##SNMP ENFORCEMENT##
conf t
username fnac privilege 15 secret ********
ip access-list standard FORTINAC-SNMP
permit <NAC IP>
!permit <NAC2 IP>
snmp-server user fortinac-rw fortinac-group v3 auth sha ******** priv aes 128 ******** access FORTINAC-SNMP
snmp-server group fortinac-group v3 priv read fortinac-snmp-rw write fortinac-snmp-rw notify fortinac-snmp-rw access FORTINAC-SNMP
snmp-server group fortinac-group v3 priv context vlan- match prefix read fortinac-snmp-rw write fortinac-snmp-rw access FORTINAC-SNMP
snmp-server view fortinac-snmp-rw iso included
snmp-server view fortinac-snmp-rw system included
snmp-server view fortinac-snmp-rw interfaces included
snmp-server enable traps snmp coldstart warmstart
snmp-server enable traps mac-notification change move threshold
snmp-server host <NAC IP> traps version 3 priv fortinac-rw mac-notification
!snmp-server host <NAC2 IP> traps version 3 priv fortinac-rw mac-notification
mac address-table notification change
mac address-table notification mac-move
mac address-table notification threshold
do wr mem

##SNMP SIGNALING NOTES##
Disable these as pr. fortinet documentation:
no snmp-server enable traps linkup linkdown - global
	no snmp trap link-status - pr. port

##SNMP AS DISCOVERY ONLY##
conf t
username fnac privilege 15 secret ********
ip access-list standard FORTINAC-SNMP
permit <NAC IP>
!permit <NAC2 IP>
snmp-server user fortinac-ro fortinac-group v3 auth sha ******** priv aes 128 ******** access FORTINAC-SNMP
snmp-server group fortinac-group v3 priv read fortinac-snmp-ro notify fortinac-snmp-ro access FORTINAC-SNMP
snmp-server group fortinac-group v3 priv context vlan- match prefix read fortinac-snmp-ro access FORTINAC-SNMP
snmp-server view fortinac-snmp-ro iso included
snmp-server view fortinac-snmp-ro system included
snmp-server view fortinac-snmp-ro interfaces included
snmp-server enable traps snmp coldstart warmstart
snmp-server enable traps mac-notification change move threshold
snmp-server host <NAC IP> traps version 3 priv fortinac-ro mac-notification
!snmp-server host <NAC2 IP> traps version 3 priv fortinac-ro mac-notification
mac address-table notification change
mac address-table notification mac-move
mac address-table notification threshold
snmp-server enable traps snmp coldstart warmstart
snmp-server enable traps mac-notification change move threshold
do wr mem

**IF L3 SWITCH:**

snmp-server source-interface traps <vlan>