Credentials

Tests the values entered in the device model against the device:

• SNMP credentials

• CLI credentials

• SSL settings

Available options:

• SNMPv1

• SNMPv2c

• SNMPv3-AuthPriv

• SNMPv3-AuthNoPriv

SNMPv1 Community String

Required for SNMPv3. User Name for access to the device. Recommended but not required.

Required for SNMPv3. Available options are:

• MD5

• SHA1

• SHA224

• SHA256

• SHA384

• SHA512 (Recommended)

Required for SNMPv3. Specify password to match what the device is using.

Required for SNMPv3-AuthPriv. Available options are:

• DES

• Triple DES

• AES-128

• AES-192

• AES-256 (Recommended)

• AES-192 Cisco

• AES-256 Cisco

Required for SNMPv3-AuthPriv. Specify password to match what the device is using.

Note: Ensure that passwords are at least 8 characters in length. Please note that longer passwords with repetitive strings may result in exactly the same key. For example, a password 'fortfort' will result in exactly the same key as password 'fortfortfort'.

The user name used to log on to the device for configuration. This is for CLI access.

The user account must have the appropriate permissions configured on the device.

For network devices using API credentials, the User Name is the serial number of the appliance.

The password required to configure the device. This is for CLI access.

For network devices using API credentials, the Password is the REST API Key.

The enable password for the device. This is for CLI access.

Note: Arista switches can be configured to require typing "enable" to enter enable mode, but no password is needed. For such configurations, populate this field with the # character.

The super password required for access to more features on 3Com devices.

Port for the External Captive Portal that was configured by the user on the device during the initial device setup. This port is required for FortiNAC to send commands to the device. Consult the manufacturer for assistance in locating this port number.

Used to determine how long to wait to connect and/or establish a Telnet/SSH session for this device. When disabled (default), the global setting "Telnet/SSH Connection Timeout (Sec)" applies. See Network device.

Used to determine how long to wait for a CLI response (prompt, show commands, etc) for this device. When disabled (default), the global setting "Telnet/SSH Connection Timeout (Sec)" applies. See Network device.

Use Telnet to log on to the device for configuration.

Use SSH1 to log on to the device for configuration.

Use SSH2 to log on to the device for configuration.

Offers enhanced security for communicating with network devices where FortiNAC uses the REST API. FortiNAC will not communicate with the device unless the SSL connection is considered “secure”.

The public key in the certificate must be signed by a trusted certificate authority (CA) known to FortiNAC. If FortiNAC does not trust the connection, clicking the Validate Credentials button will display "Certificate is not trusted”.

View details for the certificate with the option to import if not already trusted by FortiNAC.

When a certificate is imported, it is listed as a “General Trusted CA” certificate target under the Trusted Certificates view.

Toggle to enable/disable SSL certificate verification with this device. When enabled, the digital certificate presented by the device must be signed by a trusted certificate authority (CA).

Important: Prior to enabling this option, ensure the CA certificate is listed as a “General Trusted CA” certificate target under the Trusted Certificates view. See Trusted Certificates.