New Member

Question

FGT SNMP HA Monitoring

Forum|Forum|5 years ago
September 7, 2020
8 replies
22134 views

Hi guys and girls,

we're using PRTG to monitor our and the customers environments.

At the current time we're using shell scripts to monitor the HA status of a FGT cluster via SSH. I'd like to switch over to SNMP, because shell scripts use a high amount of ressources. But it seems to me that HA monitoring over SNMP isn't that detailed as it should be. In the MIB (of 6.0, 6.2 and 6.4) I can't find an OID to monitor for example the "monitoring device/interface" status. An this is crucial.

Do you have any experience in using SNMP to monitor a FGT cluster and the HA status in detail? Thanks in advance.

Kind regards,

Dominik

FortiGate

Jirka1

Explorer II

Hi Dominik,

we also use PRTG for monitoring.

You must use a dedicated port for management and enable SNMP redirect.

FROM KB:

If devices are in HA:

Each device in the cluster sends its own traps and manager can query both the devices Dedicated HA management port has to be enabled in the HA settings.

[size="2"]

#config system ha
set ha-mgmt-status enable
set ha-mgmt-interface “interface"
set ha-mgmt-interface-gateway x.x.x.x
end

[/size]

[size="2"]“ha-direct” setting has to be enabled on the SNMP settings

#config system snmp community

edit 1
config hosts
edit 1
set ha-direct enable
next
next
end

[/size]

Jirka

DominikAuthor

New Member

Hi Jirka,

that's correct.

For FGT models with dedicated mgmt ports you can easily monitor both nodes seperated. This way you can see if an interface is up/down. But not every location/every FGT model has a dedicated mgmt port. If you simple go onto the CLI and trigger 'get system ha status' you get such a detailed info about the ha status. This info should be able to request over SNMP. At least in my opinion. For now I don't see a way.

Kind regards,

Dominik

Jirka1

Explorer II

Hi Dominik,

I understand. Now I have tried to create a template for HA monitoring for our PRTG on HA cluster 2x 60D without mngmt port and it works.

Take a look at the screenshots to see if this would suit you: Download here: https://1drv.ms/u/s!Av_M3...DYzkwvyBR93hl?e=lpZLkG Just copy it to the folder: c: \ Program Files (x86) \ PRTG Network Monitor \ snmplibs \ and perform "Load Lookups and File Lists" in the Administration

EDIT: Of course, it is also possible to adjust the units for individual channels :)

Jirka

Sign up

Login with SSO

Login to the community

Login with SSO