Technical Tip: How to configure custom value for the FortiWeb SNMPv3 Engine-ID

Prerequisite:

• FortiWeb SNMP Agent is enabled, and SNMPv3 is used.
• It is possible to use the hexdump command to convert the Engine-ID string to Hex format.

Each message sent from the SNMP engine contains the snmpEngineID values. The snmpEngineID is used to uniquely identify the device's SNMP engine. FortiWeb SNMP agent has the option to configure the engine-id name. The engine-id is part of the snmpEngineID but does not include the Fortinet prefix 0x8000304404.

1. If no value is defined in the FortiWeb SNMP agent, FortiWeb will use the Device Serial Number as the SNMPv3 Engine-ID value by default. To configure the SNMP Engine-ID, use the CLI config commands below:

FortiWeb # config system snmp sysinfo

FortiWeb (sysinfo) # set engine-id FortiWeb-Test

FortiWeb (sysinfo) # end

FortiWeb #

2. The snmpEngineID value is the combination of the Fortinet prefix value '0x8000304404' and the hexdump of the Engine-ID value of FortiWeb. Use the command in a Linux system to convert the hex value of 'FortiWeb-Test'. If no value is defined in the FortiWeb SNMP Engine-ID, run the hexdump converter value using the FortiWeb Serial Number.

# echo "FortiWeb-Test" | tr -d '\n' | xxd -ps -c 200

466f7274695765622d54657374

3. The snmpEngineID will be combined as follows:

8000304404 (FortiNet prefix) & 466f7274695765622d54657374

= 8000304404466f7274695765622d54657374

4. Take a packet capture in FortiWeb to verify the SNMP packet (port 161). 

Related documents:

system snmp sysinfo

SNMP traps & queries 

system snmp community