Skip to main content
bmduncan34
New Member
February 23, 2020
Question

SNMP Monitoring of FortiSwitches in Access Rings

  • February 23, 2020
  • 1 reply
  • 4312 views

I need visibility into the health of my 33 FortiSwitches which are divided among seven access rings, with 1048's at distribution.  These are all 448D FPOE switches.  Fortinet support offered one idea which I like, but wanted to see if anyone else was doing this before I built it out.  They suggested using the management ports on my switches to communicate with an snmp monitoring tool (like PRTG).  This sounds like an elegant approach.  So in a wiring closet with say six switches, I would use short patch cables to patch a management port into a switch port on an adjacent switch.  I'd configure that port to be on a management vlan that my tool can access.  I'd reconfigure the IP address of each management port to be unique on that new subnet and configure snmp on each switch.  Then all I'd need to do is make sure the management platform has the Fortinet MIBs and then discover each switch and start monitoring. 

 

We actually use Logic Monitor for our network monitoring, so I'd need to point their collectors at my FortiSwitch management ports to collect stats.  I'd also want the switches to forward traps too for error events.  I'll need to figure that out.

 

Any comments or experience doing this?

 

Thank you!

 

    1 reply

    patrickdg
    New Member
    February 25, 2020
    You can simply add an interface on a specific vlan on each switch config system interface     edit "monitor"         set ip x.x.x.x x.x.x.x         set allowaccess ping https ssh snmp         set snmp-index xx         set vlanid xxxx         set interface "internal"     next end  
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!