Troubleshooting Tip: Testing FortiManager and FortiAnalyzer SNMPv3 from a Linux

[mvlasak]

Description	This article describes how to test FortiManager and FortiAnalyzer SNMPv3 from a Linux machine.
Scope	FortiAnalyzer 7.0 and above and FortiManager 7.0 and above.
Solution	Download iReasoning MIB Browser http://ireasoning.com/. Example: snmpwalk -mALL -v3 -u fortinet -l authPriv -a SHA -A fortinet -x AES -X fortinet 192.168.254.101 Test SNMP v3 FAZ 7.x SHA1 AES - from Linux Ubuntu: Technical Tip: Download FortiManager, FortiAnalyzer and FortiCore SNMP MIBs. Install snmpwalk to Linux and upload both Fortinet MIB files to /usr/share/snmp/mibs/ (UBUNTU), then use name instead of OID. root@SRV-Ubu:~# snmpwalk -v 2c -c test12345 10.109.19.9 1.3.6.1.4.1.12356.101.4.1.1.0 iso.3.6.1.4.1.12356.101.4.1.1.0 = STRING: "v6.4.9,build1966,220421 (GA)" root@SRV-Ubu:~# snmpwalk -v 2c -c test12345 10.109.19.9 fgSystem fgSystem: Unknown Object Identifier (Sub-id not found: (top) -> fgSystem) root@SRV-Ubu:~# snmpwalk -v 2c -c test12345 10.109.19.9 fgSysVersion fgSysVersion: Unknown Object Identifier (Sub-id not found: (top) -> fgSysVersion) root@SRV-Ubu:~# snmpwalk -v 2c -c test12345 10.109.19.9 -m +FORTINET-CORE-MIB:FORTINET-FORTIGATE-MIB fgSysUpTime FORTINET-FORTIGATE-MIB::fgSysUpTime.0 = Counter64: 295689901 hundredths of a second root@SRV-Ubu:~# snmpwalk -v 2c -c test12345 10.109.19.9 -m +FORTINET-CORE-MIB:FORTINET-FORTIGATE-MIB fgSysVersion FORTINET-FORTIGATE-MIB::fgSysVersion.0 = STRING: v6.4.9,build1966,220421 (GA) Note: Physical FortiManager and FortiAnalyzer devices have bigger disks, so takes longer time to get disk usage. Use -t for longer snmpwalk timeout. snmpwalk -t60 -v 3 -u u 172.16.78.45 1.3.6.1.4.1.12356.103.2.1.8.0 iso.3.6.1.4.1.12356.103.2.1.8.0 = Counter64: 1571196 Related article: Technical Tip: How to configure and test SNMPv3 and SNMPv2 config on FortiManager/FortiAnalyzer