Description |
This article describes how to resolve an issue where SNMP is not established after completing the initial configuration in FortiGate. |
Scope |
FortiGate 6.x.x and 7.x.x. |
Solution |
The issue occurs in the following scenario:
Upon attempting to connect the SNMP client (FortiGate) to the SNMP manager (Oputils), processing appears as in the below diagram, or the 'test' shows as having failed in other SNMP managers:
Sniffer and Wireshark captures show as below:
First, verify the following:
config global Verify if the interface is the part of the management VDOM with live diagnostics.
In SSH1:
diagnose debug enable Nothing is seen in the output or the following continuously. For example:
snmpd: updating cache: idx_cache snmpd: updating cache: idx_cache snmpd: updating cache: idx_cache snmpd: updating cache: idx_cache snmpd: updating cache: idx_cache snmpd: updating cache: idx_cache
The conditions described in Technical Tip: How to configure FortiGate SNMP Agent for monitoring have been met.
The guide has been verified as per SNMP v1/v2c communities - FortiGate documentation.
This issue can occur if the SNMP agent is disabled It is necessary to enable the SNMP agent to send the traps and receive queries, which is disabled by default:
config system snmp sysinfo set status enable end
After changing to enable, traffic will be seen on 161 from FortiGate and also the following debug output:
|
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.