Network Management

Fortigate for multiple VDOMs

Use the correct device template when downloading Fortinet VDOM configuration in NCM.

First published date

10/11/2018 1:23 PM

Last published date

9/27/2022 2:10 PM

Overview

Fortigate configuration template for Multi Virtual Domains (VDOM).

Product section

Network Configuration Manager

Cause

Incorrect device template.

Resolution

To resolve this, please use TFTP  instead of TELNET/SSH.

Then use the below device template:
 

<Configuration-Management Device="Fortigate 60" SystemOID=" 1.3.6.1.4.1.12356">
<Commands>
	<Command Name="RESET" Value="config system console ${CRLF}set output standard ${CRLF}end"/>
	<Command Name="Reboot" Value="execute reboot${CRLF}y${CRLF}"/>
	<Command Name="EnterConfigMode" Value="config global"/>
	<Command Name="ExitConfigMode" Value="end"/>
	<Command Name="Startup" Value="full-configuration"/>
	<Command Name="Running" Value=""/>
	<Command Name="DownloadConfig" Value="show ${ConfigType}"/>
	<Command Name="UploadConfig" Value="${ConfigText}${CRLF}${ExitConfigMode}"/>
	<Command Name="DownloadConfigIndirect" Value="execute backup full-config ${TransferProtocol} ${StorageFilename} ${StorageAddress}${CRLF}${CRLF}${CRLF}"/>
	<Command Name="UploadConfigIndirect" Value="execute restore full-config tftp ${StorageFilename} ${StorageAddress}${CRLF}${CRLF}"/>
	<Command Name="EraseConfig" Value="execute factoryreset${CRLF}y"/>
	<Command Name="SaveConfig" Value="execute cfg save"/>
	<Command Name="Version" Value="get system status"/>
	<Command Name="PreCommand" Value="config global"/>
</Commands>
</Configuration-Management>

 

If you are using SSH on your device connection profile, kindly use the below device template:

<Configuration-Management Device="Fortigate 60" SystemOID=" 1.3.6.1.4.1.12356">   
<Commands>       
    <Command Name="PreCommand" Value="config global${CRLF}config system console${CRLF}set output standard${CRLF}end${CRLF}end" RegEx="#"/>
    <Command Name="RESET" Value=""/>      
    <Command Name="EnterConfigMode" Value="config global"/>              
    <Command Name="vdom" Value="config vdom${CRLF}edit root${CRLF}show full-configuration"/>       
    <Command Name="ExitConfigMode" Value="end"/>
    <Command Name="Startup" Value="full-configuration"/>
    <Command Name="Running" Value="full-configuration"/>
    <Command Name="DownloadConfig" Value="show ${ConfigType}"/>
    <Command Name="UploadConfig" Value="${ConfigText}${CRLF}${ExitConfigMode}"/>       
    <Command Name="DownloadConfigIndirect" Value="execute backup config ${TransferProtocol} ${StorageFilename} ${StorageAddress}${CRLF}${CRLF}${CRLF}"/>       
    <Command Name="UploadConfigIndirect" Value="execute restore config tftp ${StorageFilename} ${StorageAddress}${CRLF}${CRLF}"/>       
    <Command Name="EraseConfig" Value="execute factoryreset${CRLF}y"/>
    <Command Name="SaveConfig" Value="execute cfg save"/>
    <Command Name="Version" Value="get system status"/>
</Commands>
</Configuration-Management>


Another possible solution, while having multiple VDOMs, is the template below:
 

<!--SolarWinds Network Management Tools-->
<!--Copyright 2007 SolarWinds.Net All rights reserved-->
<Configuration-Management Device="Fortigate HQ DC - verifiy" SystemOID="1.3.6.1.4.1.12358" SystemDescriptionRegex="" AutoDetectType="BySystemOid">
  <Commands>   
    <Command Name="RESET" Value="config global${CRLF}config system console${CRLF}set output standard${CRLF}end${CRLF}end${CRLF}end" RegEx="#"" />
    <Command Name="EnterConfigMode" Value="" />
    <Command Name="ExitConfigMode" Value="" />
    <Command Name="Startup" Value="" />
    <Command Name="Running" Value="" />
    <Command Name="UseMultipleDownloadCommands" Value="True" />
    <Command Name="DownloadConfig" Value="config vdom${CRLF}edit V1${CRLF}show${CRLF}end${CRLF}config vdom${CRLF}edit V2${CRLF}show${CRLF}end${CRLF}config vdom${CRLF}edit V3${CRLF}show${CRLF}end${CRLF}" />
    <Command Name="UploadConfig" Value="${ConfigText}${CRLF}${ExitConfigMode}" />
    <Command Name="DownloadConfigIndirect" Value="execute backup config ${TransferProtocol} ${StorageFilename} ${StorageAddress}${CRLF}${CRLF}${CRLF}" />
    <Command Name="UploadConfigIndirect" Value="execute restore config tftp ${StorageFilename} ${StorageAddress}${CRLF}${CRLF}" />
    <Command Name="EraseConfig" Value="execute factoryreset${CRLF}y" />
    <Command Name="SaveConfig" Value="execute cfg save" />
    <Command Name="Version" Value="get system status" />
  </Commands>
</Configuration-Management>