Troubleshooting Tip: Testing FortiManager and FortiAnalyzer SNMPv3 from a Linux

Download iReasoning MIB Browser http://ireasoning.com/.

Example:

snmpwalk -mALL -v3 -u fortinet -l authPriv -a SHA -A fortinet -x AES -X fortinet 192.168.254.101

Test SNMP v3 FAZ 7.x SHA1 AES - from Linux Ubuntu: Technical Tip: Download FortiManager, FortiAnalyzer and FortiCore SNMP MIBs.

Install snmpwalk to Linux and upload both Fortinet MIB files to /usr/share/snmp/mibs/ (UBUNTU), then use name instead of OID.

root@SRV-Ubu:~# snmpwalk -v 2c -c test12345 10.109.19.9 1.3.6.1.4.1.12356.101.4.1.1.0
iso.3.6.1.4.1.12356.101.4.1.1.0 = STRING: "v6.4.9,build1966,220421 (GA)"

root@SRV-Ubu:~# snmpwalk -v 2c -c test12345 10.109.19.9 fgSystem
fgSystem: Unknown Object Identifier (Sub-id not found: (top) -> fgSystem)

root@SRV-Ubu:~# snmpwalk -v 2c -c test12345 10.109.19.9 fgSysVersion
fgSysVersion: Unknown Object Identifier (Sub-id not found: (top) -> fgSysVersion)

root@SRV-Ubu:~# snmpwalk -v 2c -c test12345 10.109.19.9 -m +FORTINET-CORE-MIB:FORTINET-FORTIGATE-MIB fgSysUpTime
FORTINET-FORTIGATE-MIB::fgSysUpTime.0 = Counter64: 295689901 hundredths of a second

root@SRV-Ubu:~# snmpwalk -v 2c -c test12345 10.109.19.9 -m +FORTINET-CORE-MIB:FORTINET-FORTIGATE-MIB fgSysVersion
FORTINET-FORTIGATE-MIB::fgSysVersion.0 = STRING: v6.4.9,build1966,220421 (GA)

Note: Physical FortiManager and FortiAnalyzer devices have bigger disks, so takes longer time to get disk usage. Use -t for longer snmpwalk timeout.

snmpwalk -t60 -v 3 -u u 172.16.78.45 1.3.6.1.4.1.12356.103.2.1.8.0
iso.3.6.1.4.1.12356.103.2.1.8.0 = Counter64: 1571196

From the GUI, test using the SNMP Tools Tester.

The tool has all private algorithm protocols except for 'AES256CISCO'.

Related article:

Technical Tip: How to configure and test SNMPv3 and SNMPv2 config on FortiManager/FortiAnalyzer