Monitor SNMP over VPN

[Kevin]

I have my VPN's running the way I want, but can't seem to find the right method to enable SNMP access over the VPN.

Actually see the source CACTI server connect over the VPN to the "root" device on the LAN side of the remote fortigate, but it's denied.

How can I enable SNMP access over the VPN from the tunnel interface?

K

[doshbass · Accepted solution]

Hi Kevin,

You should be able to enable SNMP administrative access to the automatically created VPN interface found under system interface and the physical interface that the VPN is listening on.

You will likely need to give this interface an IP address as well.

Another option, possibly cleaner, would be to create a loopback interface, allow SNMP access to that interface, then create a FW policy allowing SNMP from the VPN interface to the loopback interface