SNMP Link Traps

Enable SNMP traps on each FortiSwitch if RADIUS Authentication will not be used.

In the FortiSwitch CLI, configure Link State traps to be sent to FortiNAC’s primary IP address when clients connect or disconnect. Traps are configured per switch.

Reference:

https://docs.fortinet.com/document/fortiswitch/7.0.4/fortiswitchos-cli-reference/500379/config-system#config20

Type the following commands

config system snmp community

edit <number>

config hosts

edit <number>

set interface ""<management interface name>""

set ip <eth0 IP address> <mask>

next

end

set trap-v2c-status disable

next

end

SNMP Trap Example

The below is used in all the following configuration examples:

10.12.240.7/24 = Primary NAC Server eth0 IP address

Community name = fortinet

config system snmp community

edit 1

config hosts

edit 1

set ip 10.12.240.7 255.255.255.0

next

end

set name "fortinet"

set trap-v2c-status disable

next

end

Proceed to Configure FortiNAC (Standalone Mode).