Debugging
(FNC-CA) FortiNAC Commands
Use the following KB article to gather the appropriate logs using the debugs below.
Gather logs for debugging and troubleshooting
Note: Debugs disable automatically upon restart of FortiNAC control and management processes.
|
Function |
Syntax |
Log File |
|---|---|---|
|
FortiNAC Server (Proxy RADIUS) |
|
/bsc/logs/output.master |
|
FortiNAC Server (Local RADIUS)* |
|
/bsc/logs/output.master |
|
RADIUS Service (Local RADIUS) |
Stop logging: Ctrl-C
|
/var/log/radius/radius.log |
|
Device Interface/VLAN read debug SSH/Telnet CLI activity |
Enable:
Disable:
|
|
|
L2 related activity |
|
/bsc/logs/output.master |
|
SNMP activity |
|
/bsc/logs/output.master |
|
Vendor specific debugging |
|
/bsc/logs/output.master |
|
Disable debug |
|
N/A |
*Logging for a given MAC Address:nacdebug -logger 'yams.RadiusAccess.RadiusAccessEngine.00:11:22:33:44:55' -level FINEST
Disable:
nacdebug -logger 'yams.RadiusAccess.RadiusAccessEngine.00:11:22:33:44:55'
Other Tools
Send a RADIUS Disconnect (WLC C9800 only):
SendCoA -ip <devip> -mac <clientmac> -dis
Example:
SendCoA -ip 10.1.0.25 -mac 00:1B:77:11:CE:2F -dis