FortiWeb
A FortiWeb can be configured to join a Security Fabric through the root or downstream FortiGate.
AACastillo
Staff
Staff
Article Id 340841
Description This article describes how to solve the issue when FortiWeb cannot connect to a SNMP server and shows the error 'fail to get snmp sysinfo'.
Solution
  1. When the SNMP connection from FortiWeb to the SNMP server is not working, although the SNMP configuration is correct and traffic like ICMP works OK, a 'snmpd' debug process can be done to check what's happening with this connection using the following commands:

diag debug disable
diag debug reset
diag debug app snmp 7
diag debug timestamp enable
diag debug enable

 

In this case, SNMP debug results will show messages like these:

[SNMP][ERR](snmpd_conf.c:88): fail to get snmp sysinfo
[SNMP][ERR](snmpd_conf.c:88): fail to get snmp sysinfo
[SNMP][ERR](snmpd_conf.c:88): fail to get snmp sysinfo

This can happen if the SNMP Agent is disabled.

 

  1. It is possible to solve this, under System --> Config --> SNMP and enable the 'SNMP Agent' setting:

 

001a.png

 

It also could be solved using FortiWeb CLI and enabling the 'sysinfo' setting in the SNMP configuration:


config system snmp sysinfo

set status enable

end

 

  1. Check the SNMP connection. SNMP debug commands showed that point 1 could be done again and check the generated debug information. Messages like 'fail to get snmp sysinfo' should not appear again:

FortiWeb # [SNMP][DEBUG](module_core.c:202): <msg> 39 bytes 00000000:97df -> 0, port:161
[SNMP][DEBUG](module_core.c:215): version == 0
[SNMP][DEBUG](module_core.c:215): version == 1
[SNMP][DEBUG](module_core.c:238): _check_comm,238
id(1) != 1 or id2(0) != 3, next: correcting
[SNMP][DEBUG](module_core.c:421): sendmsg : 379/379 errno:0
[SNMP][DEBUG](module_core.c:226): </msg> 1

Contributors