Hi
I have an active/passive cluster of FortiGate 1500D and I'm trying to find a way to monitor the HA state of a single box by using SNMP. I have found a lot of SNMP trap related to HA state but I can't find an OID that I can query to know the HA state at a specific point in time. Any help would be appreciated
Dominic
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
You may try to download FortiGate MIB on FGT GUI:System->COnfig->SNMP, put it on your SNMP server MIB tree.
It include HA related OID under :
Name:
fgHighAvailability
Oid:
1.3.6.1.4.1.12356.101.13
Thanks for the reply Jeff
I have already installed the Fotigate MIB on our SNMP Server but I can't find an OID that clearly told me the current HA state of the box that I query. The only thing I have found is fgHaStatsMasterSerial wich contains the list of serial number of all the master in a cluster but it's not exactly what I'm looking for. Do you have a better idea to find the current HA state of a particular box?
Dominic
Op,
I don't think there's a state ( up or down ) but what I did was to write script plugin that queried the HA-cluster for the 2 strings that matches the 2 pairs
Here's a pair of FGT100C
SNMPv2-SMI::enterprises.12356.101.13.2.1.1.2.1 = STRING: "FG100C3G096xxxxx" SNMPv2-SMI::enterprises.12356.101.13.2.1.1.2.2 = STRING: "FG100C3G096xxxxx"
If the snmp query failes on .2, than I know the cluster is down. This along with the switch interfaceIndex, I have a true ideal if the pair is down
edit: here's some basic oids for HA
docs-legacy.fortinet.com/fos50hlp/50/index.html#page/FortiOS%25205.0%2520Help/HA_maintenance.085.19.html
PCNSE
NSE
StrongSwan
How about this ?
Name:
fgHaStatsTable
Oid:
1.3.6.1.4.1.12356.101.13.2.1
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1712 | |
1093 | |
752 | |
447 | |
231 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.