Skip to main content
Djamil
Djamil
New Member
May 5, 2021
Question

SNMP blocked by IPv4 Policy

  • May 5, 2021
  • 1 reply
  • 18384 views

Hello guys,

 

I'm actually working on administrating our Fortigates and monitoring them using LibreNMS.

 

My problem is with one FortiGate that have an IPv4 Policy with the following configuration :

 

 

If I change the destination from the "Virtual IP Group LDLC-redirect-Zyxel" to "ALL", I can add this FortiGate to LibreNMS without any problem, but as soon as I put the Virtual IP Group back, I lose the SNMP pooling.

 

How can I solve this issue?

 

 

1 reply

SJFriedl
SJFriedl
New Member
May 5, 2021

Something must be broken in the forum software, because I got the nightmare image paste you did. Maybe you have to *attach* it rather than just paste it in place?

emnoc
emnoc
New Member
May 5, 2021

Do you have a policy allowing SNMP for the src to dst(s)?  Since when you change it to all it work it tells me your policy is bad.

 

did you do a trace

 

e.g cli cmds

 

diag debug reset 

diag debug enable 

diag debug flow filter port 161

diag debug flow filter addr x.x.x.x

diag debug flow trace start 100

 

do a poll from NMS, see what policy hits or if it hits policy 0

 

After diagnostic

 

diag debug reset 

diag debug disable

 

 

FWIW diag debug is the 1st you should do when troubleshooting

 

 

Ken Felix

Terms & ConditionsAccessibility statement