Skip to main content
Nco_L
New Member
Sep 19, 2019 8:56 AM UTC
Solved

SNMP Fortigate : timeout - not responding

Hello,

 

I would like to request information from my Fortigate via the SNMP protocol, so I configured the protocol, community etc. on the web interface, then activated the protocol on an internal interface to make it operational.

However, I have no answer from my Fortigate during the requests: Timeout,...

 

Thank you for your help.

BrianB
BrianBAnswer
New Member
Dec 12, 2019 9:52 PM UTC

If you have trusted hosts enabled at all, then you will need to add the IP of your polling/trap server as a trusted host.

I just went through this yesterday.

11 replies

Druss
New Member
Sep 19, 2019 12:26 PM UTC

Are you using VDOM? If so the management VDOM is root…

 

"To get SNMP working with VDOM enabled: 

 

Make sure that the interface where the SNMP collector connects to is part of the management VDOM.

 

This can be fixed in two ways

[ol]
  • Making sure that the VDOM the SNMP interface is configured for on fortigate is the management vdom by changing the management vdom. FGT # config global FGT (global) # config system global FGT (global) # set grep management-vdom
  • Using an interface that belongs to default "root" vdom for SNMP traps"[/ol]
  • Nco_L
    Nco_LAuthor
    New Member
    Sep 19, 2019 1:10 PM UTC

    Thank you for your quick answer, but we do not use in VDOM in our current configuration.

    rwpatterson
    New Member
    Sep 19, 2019 1:53 PM UTC

    Do you have trusted hosts defined? If so, is the SNMP server in that list?

    Nco_L
    Nco_LAuthor
    New Member
    Sep 19, 2019 2:17 PM UTC

    My SNMP server is not declared as a trusted host but trusted hosts are not reserved only for users?

    Because I would like to use Centreon to send SNMP requests, so I don't connect to the Firewall.

    (I use SNMP version 2c)

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT