SNMP response

[luca1994]

Hello team,

i have the following problem when try to configuring SNMP on interface LAN (not MGMT dedicated)

The monitoring system is reachable via ipsec tunnel. When I try to configure SNMP on the LAN interface, in the local firewall logs I see traffic but no return traffic.
The strange thing is that the same policy correctly allows SNMP traffic as well as HTTPS traffic from the ipsec tunnel to the ip address of the interface on which SNMP is enabled.

Thanks for the support

BR

[ozkanaltas · Accepted solution]

Hello @luca1994 ,

Did you check local traffic logs? Do you have a trusted host configuration on your admin users? 

[luca1994]

Hello @ozkanaltas ,

the scrennshot you see is taken from the local log monitor.
Yes, I added the ip address as trusted host for administrative users

Thanks

BR

[ozkanaltas]

Hello @luca1994 ,

Can you add the IP address of the monitoring tool to the trusted host configuration? It doesn't matter which administrator account you configure. You can configure it to anyone.

[luca1994]

When I added the trusted host for ALL administrative users, the problem was solved.

BR

[HungDT]

Hi Luca,

You add trusted host on fortigate, access system -> Administrators, enable Restrict login to trusted hosts. Is that right ? I have the same problem with you.

[luca1994]

Hi @HungDT ,

yes, i have add trusted hosts for ALL administrative users.