Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Robin_Svanberg
Contributor

SNMP Interface name after update to FortiOS 5.4

Hi,

 

after upgrade to FortiOS 5.4, SNMP interface names seems missing. Only gets the description.

 

Anyone experiencing the same issue? 

 

Thanks.

 

 

 

Robin Svanberg Network Consultant @ Ethersec AB in Östersund, Sweden

 

robin.svanberg@ethersec.se

Robin Svanberg Network Consultant @ Ethersec AB in Östersund, Sweden robin.svanberg@ethersec.se
4 REPLIES 4
emnoc
Esteemed Contributor III

What do  you mean by snmp interface names? Any examples ?

 

 

You can query  the interface well known  ifTable  &  any part of the IF-MIB and the related  Index descriptions aliases if that what your talking about.

 

You can get an ideal of what the fortiOS  is doing via the following dig commands

 

 

  diag debug reset 

  diag debug en 

  diag debug  app snmpd -1

 

 

Than have your poller poll the  device index and monitor the device  snap output the debug output 

 

 

snmpwalk   -c  <community> -v2c  x.x.x.x  interface

 

e.g

 

snmpd: <msg> 47 bytes 70.195.211.101:58396 -> 192.0.1.1/192.0.2.1:161 (itf 46.46)

snmpd: checking if community "nogocmmro" is valid

snmpd: checking against community "1plus2eq2C0mun1"

snmpd: name mismatch.

snmpd: checking against community "test1234"

snmpd: request 1(root)/46/70.195.211.101 == comm 1/0/70.195.211.101/255.255.255.255

snmpd: matched community "nogocmmro"

snmpd: get-next: ifEntry.1.96 -> () -> 0

snmpd: eoq_ifEntry()

snmpd: </msg> 1

 

 

 

 

 

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
DT
New Contributor II

We have exactly the same Problem.

 

"snmpwalk   -c  <community> -v2c  x.x.x.x  interface" does not return the interfacename.

 

in FortiOS 4.x all works fine, but at least on all 5.4.2 and 5.4.3 it is not there. 

boneyard
Valued Contributor

DT as emnoc requests can you do that with the debug enabled and share both outputs, from 4.x and 5.4.x?

DT
New Contributor II

Hi,

 

the Solution is quite simpel (and annoying):

 

Fortinet has decided, that the descriptionfield is not (by definition) for the interfacename, so they have removed the interface name from the descriptionfield. If you still need it, you need to place the interface name in the comment field.

 

 

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors