FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ajoy
Staff
Staff
Article Id 265077
Description

This article describes how to resolve an issue where SNMP is not established after completing the initial configuration in FortiGate.

Scope

FortiGate 6.x.x and 7.x.x.

Solution

The issue occurs in the following scenario:

 

Upon attempting to connect the SNMP client (FortiGate) to the SNMP manager (Oputils), processing appears as in the below diagram, or the 'test' shows as having failed in other SNMP managers:

 
 
 

SNMP_KB.png

 

Sniffer and Wireshark captures show as below:

SNMP-KB-3.png

SNMP-4.png

 

First, verify the following:

 

config global
show full system global | grep management-vdom

Verify if the interface is the part of the management VDOM with live diagnostics.

 

In SSH1:


diagnose debug application snmpd -1

diagnose debug enable

Nothing is seen in the output or the following continuously. For example:

 

snmpd: updating cache: idx_cache

snmpd: updating cache: idx_cache

snmpd: updating cache: idx_cache

snmpd: updating cache: idx_cache

snmpd: updating cache: idx_cache

snmpd: updating cache: idx_cache

 

The conditions described in Technical Tip: How to configure FortiGate SNMP Agent for monitoring have been met

 

The guide has been verified as per SNMP v1/v2c communities - FortiGate documentation.

 

This issue can occur if the SNMP agent is disabled

It is necessary to enable the SNMP agent to send the traps and receive queries, which is disabled by default:

 

config system snmp sysinfo

set status enable

end

 

SNMP-5.png
 

After changing to enable, traffic will be seen on 161 from FortiGate and also the following debug output:

 

SNMP-5.png
Contributors