Skip to main content
amorales
amorales
New Member
August 2, 2021
Question

SNMP - Managed FortiSwitch

  • August 2, 2021
  • 2 replies
  • 12274 views

Hi, I would like to know if possible to monitor FortiSwitch devices using SNMP, and the best way to do it. I have found some Fortinet documentation about how to configure SNMP for managed FortiSwitch devices but I am not sure if queries should be send to FortiSwitch IP or towards the FortiGate IP. Keep in mind that I am using the default IP for FortiLink interface and it is not routed, so I cannot reach FortiSwitch devices IP from the SNMP server. Thanks in advance.

    2 replies

    mike_dp
    mike_dp
    New Member
    August 31, 2021

    You have to set up multiple things :

    From the Fortigate you need to set all the snmp stuff in CLI in the conf switch-controller snmp... sub menus. That way all the snmp configs will be pushed to all of your Fortiswitches. You will also need to allow the SNMP traffic to reach the fortilink interface with a policy. You will have to set that policy from CLI because the fortilink interface isn't in the drop down list when creating a policy.

    The Fortiswitches needs to have a routable IP address so it's reachable from your SNMP server. You will need to set a static route to reach the snmp server, allow SNMP on the internal interface of the Fortiswitch.

    Karar
    Karar
    New Member
    September 27, 2021

    I'm also trying to figure this out - I managed to get all the SNMP config onto my Fortiswitch that is managed via Fortilink by my Fortigate but I can't get a layer 3 address on it to use as the source of the SNMP traffic. I might go to TAC shortly if I can't get this figured out but if you get any luck let me know.

    mike_dp
    mike_dp
    New Member
    September 28, 2021

    For layer 3 traffic you need to set an IP address on the Fortiswitch :

    conf sys interface

    edit internal

    set mode static 

    set ip address x.x.x.x x.x.x.x

    next

     

    you'll also need to set routing in the fortiswitch

    conf router static

    edit 1

    set dst x.x.x.x x.x.x.x (snmp server subnet)

    set gateway x.x.x.x (fortigate fortilink ip)

     

    you'll have to route that subnet to your snmp server. to test you could ping from the fortiswitch the snmp server and make sure to allow that traffic in your fortigate policies.

     

     

     

     

     

     

     

    Terms & ConditionsAccessibility statement