Device reconciliation issue within Spectrum, Performance Management and VNA for Fortnet devices

Products

• Network Observability
• Spectrum
• Virtual Network Assurance
• CA Performance Management

Issue/Introduction

In DX NetOps environments integrated with Virtual Network Assurance (VNA), Fortinet devices discovered via the Fortinet plugin may fail to reconcile. This results in duplicate device entries in Performance Center where SNMP-polled devices and SDN-polled devices appear as separate items despite sharing identical hostnames or serial numbers.

• Duplicate devices appear in DX NetOps Performance Center.
• The Fortinet plugin does not perform device data deduplication between DX NetOps Spectrum, Performance Management, and VNA.
• Devices discovered with different IP addresses (e.g., Management IP vs. VNA IP) do not merge into a single item.

Environment

• DX NetOps Performance Management 24.3.x
• DX NetOps Spectrum 24.3.x
• Virtual Network Assurance (VNA) 24.3.x
• Fortinet SDN Plugin

Cause

A product limitation prevented the Fortinet plugin from utilizing secondary IP address ranges for reconciliation during the deduplication process.

Resolution

Fixed in release 25.4.4 and higher.

With this fix, a new configuration parameter SNMP_CIDRS is available for the Fortinet plugin. This parameter allows the definition of IP address ranges (in CIDR notation) used for SNMP monitoring to improve deduplication.

1. Upgrade the Data Aggregator (DA) and Data Collector (DC) to version 25.4.4.
2. Update the Fortinet VNA plugin to the version included in 25.4.4.
3. In the VNA Gateway configuration for the Fortinet plugin, locate the SNMP_CIDRS parameter.
4. Enter the required IP ranges (e.g., ###.###.###.0/24). Multiple ranges must be separated by commas.
5. Note: To resolve existing duplicates, delete the current Fortinet VNA engine in the VNA console. SNMP-polled data is preserved, but VNA-specific historical metrics for that engine will be reset.

Resolved Issues

Symptom: The Fortinet plug-in does not perform device data deduplication between DX NetOps Spectrum (Spectrum), DX NetOps Performance Management, and DX NetOps Virtual Network Assurance (VNA). 
Resolution: With this fix, you can now specify the range of IP addresses that the Fortinet plug-in uses for device monitoring by way of the SNMP protocol using the SNMP_CIDRS config parameter. 
(25.4.4, DE177438, 15505278,36533383)