Troubleshooting Tip: How to troubleshoot SNMP configuration on FortiSwitch

Description

This article describes how to troubleshoot SNMP configuration on a FortiSwitch unit.

Scope

All FortiSwitch devices and models.

Solution

Validate all configuration settings are correctly in place, depending on the deployment:

• FortiLink Managed Device: Configuring SNMP.
• Standalone FortiSwitch device: SNMP.

Sometimes, the SNMP daemon needs to be restarted after a successful configuration on FortiSwitch devices. Use the following FortiSwitch CLI commands to accomplish this.

config system snmp sysinfo
    set status disable
end

Wait 30 seconds and re-enable. Repeat the tests. If they are unsuccessful, open a new TAC ticket and include the following tests on separate text files using PuTTY or a similar application to generate files. See this article: Technical Tip: How to create a log file of a session using PuTTY.

Another option to restart snmp daemon is kill the snmpd process on the FortiSwitch:

fnsysctl killall snmpd

File 1.- fsw_snmp_sniffer.txt.

Using FortiSwitch CLI session to run the following test, while trying to consult the device using SNMP:

diagnose sniffer packet any 'port 161' 4 0 a

If it is a FortiSwitch managed device, an additional file will be needed.

File 1a.- fgt_snmp_sniffer.txt.

In a FortiGate CLI session, run the following test. Change the sniffer filter to fit the environment.

diagnose sniffer packet any 'host [SNMP_server_ip_add] and port 161' 4 0 a

Try checking in with the team 3-4 times and end the process with Ctrl+C.

File 2.- fsw_snmp_debug.txt.

Gather the following outputs from the FortiSwitch CLI:

diagnose debug reset
diagnose debug application snmpd -1

diagnose debug enable

Try to consult the FortiSwitch device from the SNMP server 3-4 times, then enter the following diagnostics in the FortiSwitch CLI.

diagnose test application snmpd 1
diagnose test application snmpd 2
diagnose test application snmpd 3
diagnose test application snmpd 4

If there is information that is displayed and is not correct or if information is not displayed, use the following command to restart the process:

diagnose test application snmpd 101

After, repeat the process with the debug tests.

File 3.- fsw_debug_report.txt

Gather the output of the following from the FortiSwitch CLI:

diagnose debug report

Upload all 3 files, along with the FortiGate config file, to the newly generated ticket.