SNMP on fortigate not works

[mulbzh]

Hello and sorry for my english,

I want to configure SNMP on fortigate FG500E firmware v7.2.11 (no VDOM). I did on other fortigate it was easy to configure but for this model, nothing works.

I create community and allow IP of my Zabbix server (i allow V2 snmp)
After that i allow SNMP on interface fortigate

I can ping fortigate on interface, but there is no response from fortigate. The interface is not Magement interface, it is that the problem ? not sure

i don't find the solution

[funkylicious]

hi,

if you have trusted hosts enabled on your users, make sure that the ip of the zabbix is part in one of them.

otherwise, can you post the output for the commands,

show system snmp community

show system snmp sysinfo 

[mulbzh]

I think this is a more complicated problem. i Also did debug, i can see request on fortigate but no response from fortigate

My zabbix IP is : 146.210.1.84

config system snmp sysinfo
set status enable
set description "Fortigate"
set location "DSI"
set append-index enable
end

config system snmp community
edit 1
set name "ENS"
config hosts
edit 1
set ip 146.210.91.0 255.255.255.0
set host-type query
next
edit 2
set ip 146.210.1.40 255.255.255.255
next
edit 3
set ip 146.210.1.84 255.255.255.255
next
end
set query-v1-status disable
set trap-v1-status disable
set trap-v2c-status disable
set events cpu-high mem-low log-full intf-ip vpn-tun-up vpn-tun-down ha-switch ha-hb-failure ips-signature ips-anomaly av-virus av-oversize av-pattern av-fragmented fm-if-change fm-conf-change bgp-established bgp-backward-transition ha-member-up ha-member-down ent-conf-change av-conserve av-bypass av-oversize-passed av-oversize-blocked ips-pkg-update ips-fail-open temperature-high voltage-alert power-supply-failure faz-disconnect fan-failure wc-ap-up wc-ap-down fswctl-session-up fswctl-session-down load-balance-real-server-down device-new per-cpu-high dhcp pool-usage ospf-nbr-state-change ospf-virtnbr-state-change
next
end

[mulbzh · Accepted solution]

Ok, i found the solution, it was that : https://nadavsvirsky.medium.com/fortigate-snmp-issues-a61c9db10bdd

If you use Trusted Hosts in user authentification on admin user, you have to add IP of snmp server

[kmohan]

https://nadavsvirsky.medium.com/fortigate-snmp-issues-a61c9db10bdd