Fortinet white logo
Fortinet white logo
7.6.0

Debugging

Debugging

(FNC-CA) FortiNAC Commands

Use the following KB article to gather the appropriate logs using the debugs below.

Gather logs for debugging and troubleshooting

Note: Debugs disable automatically upon restart of FortiNAC control and management processes.

Function

Syntax

Log File

FortiNAC

Server

(Proxy

RADIUS)

nacdebug –name RadiusManager true

/bsc/logs/output.master

FortiNAC Server

(Local RADIUS)*

nacdebug –name RadiusAccess true

/bsc/logs/output.master

RADIUS Service

(Local RADIUS)

radiusd -X -l /var/log/radius/radius.log

Stop logging: Ctrl-C

/var/log/radius/radius.log

L2 related activity

nacdebug –name BridgeManager true

/bsc/logs/output.master

Vendor specific debugging

nacdebug –name Airespace true

/bsc/logs/output.master

SSH/Telnet CLI activity

nacdebug –name TelnetServer true

/bsc/logs/output.master

SNMP activity

nacdebug –name SnmpV1 true

/bsc/logs/output.master

Disable debug

nacdebug –name <debug name> false

N/A

*Logging for a given MAC Address:
nacdebug -logger 'yams.RadiusAccess.RadiusAccessEngine.00:11:22:33:44:55' -level FINEST

Disable:

nacdebug -logger 'yams.RadiusAccess.RadiusAccessEngine.00:11:22:33:44:55'

Debugging

Debugging

(FNC-CA) FortiNAC Commands

Use the following KB article to gather the appropriate logs using the debugs below.

Gather logs for debugging and troubleshooting

Note: Debugs disable automatically upon restart of FortiNAC control and management processes.

Function

Syntax

Log File

FortiNAC

Server

(Proxy

RADIUS)

nacdebug –name RadiusManager true

/bsc/logs/output.master

FortiNAC Server

(Local RADIUS)*

nacdebug –name RadiusAccess true

/bsc/logs/output.master

RADIUS Service

(Local RADIUS)

radiusd -X -l /var/log/radius/radius.log

Stop logging: Ctrl-C

/var/log/radius/radius.log

L2 related activity

nacdebug –name BridgeManager true

/bsc/logs/output.master

Vendor specific debugging

nacdebug –name Airespace true

/bsc/logs/output.master

SSH/Telnet CLI activity

nacdebug –name TelnetServer true

/bsc/logs/output.master

SNMP activity

nacdebug –name SnmpV1 true

/bsc/logs/output.master

Disable debug

nacdebug –name <debug name> false

N/A

*Logging for a given MAC Address:
nacdebug -logger 'yams.RadiusAccess.RadiusAccessEngine.00:11:22:33:44:55' -level FINEST

Disable:

nacdebug -logger 'yams.RadiusAccess.RadiusAccessEngine.00:11:22:33:44:55'