SNMP on fortigate not works

Forum|Forum|11 months ago
July 3, 2025
2 replies
1551 views

Hello and sorry for my english,

I want to configure SNMP on fortigate FG500E firmware v7.2.11 (no VDOM). I did on other fortigate it was easy to configure but for this model, nothing works.

I create community and allow IP of my Zabbix server (i allow V2 snmp)
After that i allow SNMP on interface fortigate

I can ping fortigate on interface, but there is no response from fortigate. The interface is not Magement interface, it is that the problem ? not sure

i don't find the solution

FortiGate

Best answer by mulbzh

Ok, i found the solution, it was that : https://nadavsvirsky.medium.com/fortigate-snmp-issues-a61c9db10bdd

If you use Trusted Hosts in user authentification on admin user, you have to add IP of snmp server

funkylicious

SuperUser

hi,

if you have trusted hosts enabled on your users, make sure that the ip of the zabbix is part in one of them.

otherwise, can you post the output for the commands,

show system snmp community

show system snmp sysinfo

"jack of all trades, master of none"

mulbzhAuthor

Explorer

I think this is a more complicated problem. i Also did debug, i can see request on fortigate but no response from fortigate

My zabbix IP is : 146.210.1.84

config system snmp sysinfo
set status enable
set description "Fortigate"
set location "DSI"
set append-index enable
end

config system snmp community
edit 1
set name "ENS"
config hosts
edit 1
set ip 146.210.91.0 255.255.255.0
set host-type query
next
edit 2
set ip 146.210.1.40 255.255.255.255
next
edit 3
set ip 146.210.1.84 255.255.255.255
next
end
set query-v1-status disable
set trap-v1-status disable
set trap-v2c-status disable
set events cpu-high mem-low log-full intf-ip vpn-tun-up vpn-tun-down ha-switch ha-hb-failure ips-signature ips-anomaly av-virus av-oversize av-pattern av-fragmented fm-if-change fm-conf-change bgp-established bgp-backward-transition ha-member-up ha-member-down ent-conf-change av-conserve av-bypass av-oversize-passed av-oversize-blocked ips-pkg-update ips-fail-open temperature-high voltage-alert power-supply-failure faz-disconnect fan-failure wc-ap-up wc-ap-down fswctl-session-up fswctl-session-down load-balance-real-server-down device-new per-cpu-high dhcp pool-usage ospf-nbr-state-change ospf-virtnbr-state-change
next
end

mulbzhAuthorAnswer

Explorer

Ok, i found the solution, it was that : https://nadavsvirsky.medium.com/fortigate-snmp-issues-a61c9db10bdd

If you use Trusted Hosts in user authentification on admin user, you have to add IP of snmp server