Template for fortigate/fortinet firewall.

[aib]

Click on Template name -> click on .xml name -> select RAW -> select all (CTRL-A) -> copy
Open Notebook -> Paste -> Save as... (template name).xml

Import it.

Repeat 11 times.

Just Do It (c) Nike

[vlam]

Thanks it is working

[CRC-error]

Question for checking the script before importing it.

Dear,

I would like to check the script before importing it.
So I've install Ruby, Ruby Gems & install SNMP via Gem.
I've also placed the if.speed file in the Zabbix server.

I know the IP address & the community for the device, but what should I fill for: -s SNMP Index?

* I want to test that this script (the one from Github) is working well on my Fortinet 80C \ 60D devices.

Thanks in advance.

[dart_ua]

ERROR: Import failed

Well, I don't wan to offend you, but right now - 10 seconds ago - I created an .XML file from source code on github and successfully imported it into my Zabbix Server templates database.

May be because I have Zabbix Server 2.2.3, I had no issue?

Anyway, there are attached .xml file which I imported. Try it.

Hi!
I try to import template "ZBX-FORTINET-INTERFACES", but got error:
"Created: Application "Interface(s)" on "ZBX-FORTINET-INTERFACES".
Created: Discovery rule "Network Interfaces" on "ZBX-FORTINET-INTERFACES".
Cannot find value map "SNMP interface status (ifAdminStatus)" used for item prototype "Admin status of interface $1" of discovery rule "Network Interfaces" on "ZBX-FORTINET-INTERFACES"."
What it is mean? Can you help me?

[aib]

Hi!
I try to import template "ZBX-FORTINET-INTERFACES", but got error:
"Created: Application "Interface(s)" on "ZBX-FORTINET-INTERFACES".
Created: Discovery rule "Network Interfaces" on "ZBX-FORTINET-INTERFACES".
Cannot find value map "SNMP interface status (ifAdminStatus)" used for item prototype "Admin status of interface $1" of discovery rule "Network Interfaces" on "ZBX-FORTINET-INTERFACES"."
What it is mean? Can you help me?

It means that you have to create Value Mapping with name "SNMP interface status (ifAdminStatus)" and with correct list of matching pairs (Number -> Description).
Administration -> General -> (select Value Mapping from Drop-down menu)

And in addition - No, I have no idea about correct list of matching pairs. Do you mind to check if it was described on github?

[dart_ua]

It means that you have to create Value Mapping with name "SNMP interface status (ifAdminStatus)" and with correct list of matching pairs (Number -> Description).
Administration -> General -> (select Value Mapping from Drop-down menu)

And in addition - No, I have no idea about correct list of matching pairs. Do you mind to check if it was described on github?

Thanks for the reply. Yes, I tried do make different combinations of values, but again received the error. Ok. I will ask it on github.

[carfemeza]

fortigate 200b

i test this template with my fortigate200b and work fine. very good one.

hello!!

wich file use for you fortigate 200b ???

thanks

[dart_ua]

hello!!

wich file use for you fortigate 200b ???

thanks

I use FG300C

[mmacpuguy]

This post just helped me out too Thanks!

Click on Template name -> click on .xml name -> select RAW -> select all (CTRL-A) -> copy
Open Notebook -> Paste -> Save as... (template name).xml

Import it.

Repeat 11 times.

Just Do It (c) Nike

This post just helped me out too Thanks!

[karistod]

Item Not Supported

Hi All,

I believe I followed the instructions as outlined at https://github.com/jjmartres/Zabbix/...net-interfaces and then imported the template ZBX-FORTINET-INTERFACES without any errors, but when i associate it to a Host a lot of the items show as "Not Supported".

For Example:
Wizard Name Triggers Key Interval History Trends Type Applications Status Info
Network Interfaces: Incoming discarded packets on interface dmz ifInDiscards[dmz] 60 7 365 SNMPv2 agent Interface(s) Not supported

Any ideas why?


Please note this is my first time working on Linux so I am have done something wrong

UPDATE:
I identified that any item which was relying on the IF-MIB lookup as an SNMP OID was not working, for example: <snmp_oid>IF-MIB::ifAlias.{#SNMPINDEX}</snmp_oid>. I found the correct SNMP OIDS and entered them manually in the template and now they are working, apart from the interface speed which is relying on if.speed external script. I followed the same instructions and steps for both if.vdom and if.speed external scripts, if.vdom is working but if.speed is not working.

Any ideas?

[WillemR]

Hi All,

I believe I followed the instructions as outlined at https://github.com/jjmartres/Zabbix/...net-interfaces and then imported the template ZBX-FORTINET-INTERFACES without any errors, but when i associate it to a Host a lot of the items show as "Not Supported".

For Example:
Wizard Name Triggers Key Interval History Trends Type Applications Status Info
Network Interfaces: Incoming discarded packets on interface dmz ifInDiscards[dmz] 60 7 365 SNMPv2 agent Interface(s) Not supported

Any ideas why?


Please note this is my first time working on Linux so I am have done something wrong

UPDATE:
I identified that any item which was relying on the IF-MIB lookup as an SNMP OID was not working, for example: <snmp_oid>IF-MIB::ifAlias.{#SNMPINDEX}</snmp_oid>. I found the correct SNMP OIDS and entered them manually in the template and now they are working, apart from the interface speed which is relying on if.speed external script. I followed the same instructions and steps for both if.vdom and if.speed external scripts, if.vdom is working but if.speed is not working.

Any ideas?

if.speed needs resolv-replace to function correctly.

require 'rubygems'
require 'optparse'
require 'snmp'
require 'resolv-replace'

[karistod]

if.speed needs resolv-replace to function correctly.

require 'rubygems'
require 'optparse'
require 'snmp'
require 'resolv-replace'

Trying to install óptparse' as follows:

sudo apt-get install python-argparse
Reading package lists... Done
Building dependency tree
Reading state information... Done
Note, selecting 'libpython2.7-stdlib' instead of 'python-argparse'
libpython2.7-stdlib is already the newest version.

So I guess I am ok there.

rubygems and snmp already installed.

The only package I found for resolv-replace is 'em-resolv-replace' is that the correct package? If yes still nothing

I also found the following in Zabbix server log:
1253:20160126:122029.356 item "Host:if.speed["-d","{HOST.HOST}","-c","{$SNMP_COMMUNITY}","-s","6"]" became not supported: Received value [/usr/bin/env: ruby: No such file or directory] is not suitable for value type [Numeric (unsigned)] and data type [Decimal]

[WillemR]

Trying to install óptparse' as follows:

sudo apt-get install python-argparse
Reading package lists... Done
Building dependency tree
Reading state information... Done
Note, selecting 'libpython2.7-stdlib' instead of 'python-argparse'
libpython2.7-stdlib is already the newest version.

So I guess I am ok there.

rubygems and snmp already installed.

The only package I found for resolv-replace is 'em-resolv-replace' is that the correct package? If yes still nothing

I also found the following in Zabbix server log:
1253:20160126:122029.356 item "Host:if.speed["-d","{HOST.HOST}","-c","{$SNMP_COMMUNITY}","-s","6"]" became not supported: Received value [/usr/bin/env: ruby: No such file or directory] is not suitable for value type [Numeric (unsigned)] and data type [Decimal]

change the if.speed file, add:

require 'resolv-replace'

under all the other requirements.

[karistod]

change the if.speed file, add:

require 'resolv-replace'

under all the other requirements.

I did that, item still shows as Not supported.
Strange thing is i see nothing related to this in zabbix_server.log from today.

[karistod]

I did that, item still shows as Not supported.
Strange thing is i see nothing related to this in zabbix_server.log from today.

I gave up on this and did a new item prototype in the template with the SNMP OID and a multiplier and that works ok.