SNMP agent enable/disable status on the GUI and CLI is different

[StevenT]

Hi,

Anyone using Fortigate standalone with firmware 7.2.5. I found a discrepancy between the CLI and GUI settings. Do take note. :)

We are using 2 FortiGate, each with different firmware of 7.0.10 & 7.2.5 to compare.
Before doing the dedicated OOB on the Fortigate with firmware 7.2.5, we were sniffing the packets and trying to initiate traffic from the SolarWinds SNMP.

After setting the management interface to dedicated OOB, we check for the config of the SNMP agent to Fortigate and found out that in GUI, it is enabled however, in the CLI, it was disabled.

That’s why all this time when doing a sniffer, we cannot see any reply traffic in the mgmt. port. While trying to troubleshoot the SNMP issue on the 7.2.5 unit with dedicated OOB.

[srajeswaran]

When you configure dedicated management interface, they are bound to a default vdom vsys_hamgmt. Can you enter this vdom and run the sniffer command?

execute enter vsys_hamgmt
Ref: https://community.fortinet.com/t5/FortiGate/Technical-Tip-HA-Reserved-Management-Interface-s-hidden-...

[knagaraju]

Hello StevenT,
Please share me the outputs of below commands from fortigate cli
get system status
show full system snmp sysinfo
show full system snmp user
show full system snmp community

Regards
Nagaraju