Fortinet black logo

Administration Guide

Home FortiManager 7.4.2 Administration Guide
7.4.2
7.4.2
7.4.1
7.4.0
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.12
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.4.14
6.4.13
6.4.12
6.4.11
6.4.10
6.4.9
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.6
6.2.5
6.2.3
6.2.2
6.2.1
6.2.0
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.6.11
5.6.10
5.6.9
5.6.8
5.6.7
5.6.6
5.6.5
5.6.4
5.6.3
5.6.2
5.6.1
5.6.0
5.4.7
5.4.6
5.4.5
5.4.4
5.4.3
5.4.2
5.4.1
5.4.0
5.2.10
5.2.7
5.2.6
5.2.4
5.2.3
5.2.2
5.2.1
5.2.0
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
4.3.8
4.3.7
4.3.6
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.9
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.0
4.0.3
4.0.2
4.0.1
4.0.0

Onboarding new branch devices

Onboarding new branch devices

The SD-WAN overlay template uses a device group to determine which devices receive the SD-WAN provisioning templates.

When a new device is added to the device group, the SD-WAN provisioning templates are automatically assigned to the device, and you can install the changes using the Install Wizard.

Branch onboarding can be further simplified with the use of device blueprints and metadata variables:

  • Device blueprints can be used when adding model devices to FortiManager to simplify configuration of device settings, including device groups, configuring pre-run templates, policy packages, provisioning templates, and more. See Using device blueprints for model devices.
  • Metadata variables can be used as variables in provisioning templates. The branch_id variable is automatically created by the template and each branch device must be assigned a unique value. A branch ID value can be automatically assigned to devices in the SD-WAN branch device group when the Automatic Branch ID Assignment setting is enabled in the SD-WAN overlay template wizard. See ADOM-level metadata variables.

When onboarding multiple new branch devices, you can import devices from a CSV file using device blueprints. Metadata fields including the branch_id variable can be specified directly in the CSV file. See Import model devices from a CSV file.

To onboard new branch devices:
  1. Add the new FortiGate model device to FortiManager using the Device Manager.
    Optionally, you can configure a device blueprint to simplify device onboarding. See Using device blueprints for model devices.
  2. Assign the FortiGate device to the template's branch device group.
    The branch provisioning templates are automatically assigned to the device.
  3. Specify the metadata variables used by the SD-WAN overlay template. By default, the branch_id metadata variable must be specified. When Automatic Branch ID Assignment setting is enabled in the wizard, the branch ID is automatically applied to devices in the branch device group. See Automatic Branch ID Assignment.
  4. Assign policy package for the branch device, and then install the changes using the Install Wizard. See Install wizard.
Previous
Next

Onboarding new branch devices

The SD-WAN overlay template uses a device group to determine which devices receive the SD-WAN provisioning templates.

When a new device is added to the device group, the SD-WAN provisioning templates are automatically assigned to the device, and you can install the changes using the Install Wizard.

Branch onboarding can be further simplified with the use of device blueprints and metadata variables:

  • Device blueprints can be used when adding model devices to FortiManager to simplify configuration of device settings, including device groups, configuring pre-run templates, policy packages, provisioning templates, and more. See Using device blueprints for model devices.
  • Metadata variables can be used as variables in provisioning templates. The branch_id variable is automatically created by the template and each branch device must be assigned a unique value. A branch ID value can be automatically assigned to devices in the SD-WAN branch device group when the Automatic Branch ID Assignment setting is enabled in the SD-WAN overlay template wizard. See ADOM-level metadata variables.

When onboarding multiple new branch devices, you can import devices from a CSV file using device blueprints. Metadata fields including the branch_id variable can be specified directly in the CSV file. See Import model devices from a CSV file.

To onboard new branch devices:
  1. Add the new FortiGate model device to FortiManager using the Device Manager.
    Optionally, you can configure a device blueprint to simplify device onboarding. See Using device blueprints for model devices.
  2. Assign the FortiGate device to the template's branch device group.
    The branch provisioning templates are automatically assigned to the device.
  3. Specify the metadata variables used by the SD-WAN overlay template. By default, the branch_id metadata variable must be specified. When Automatic Branch ID Assignment setting is enabled in the wizard, the branch ID is automatically applied to devices in the branch device group. See Automatic Branch ID Assignment.
  4. Assign policy package for the branch device, and then install the changes using the Install Wizard. See Install wizard.
Previous
Next