Problema de SNMP Fortigate 100D y Zabbix 6.2

[alvinduran83]

Saludos a todos, al configurar el zabbix para monitorear el Fortinet me da un error de Timeout con la conexion a traves del puerto. Realice los siguientes pasos:

1. Agregue el Host en Zabbix
2. Configure la comunidad SNMP con el nombre zabbix para probar
3. Configure en el Fortinet la misma comunidad SNMP y la habilte

Anexo la foto con el error presentado. Muchas Gracias por su ayuda

[jtnfoley]

I'm using the template "Template Net Fortinet FortiGate SNMP" with great success. From its' comments:

Zabbix Template for Fortinet FortiGate
URL: https://github.com/mbdraks/fortinet-zabbix
Author: Michel Barbosa
Version: 2.1.0​

If you don't have snmpwalk on your Zabbix host or proxies, install it. Then (assuming SNMP v2) :

snmpwalk -v2c -c <your community string> 192.168.4.2 .1

The ".1" at the end of that command will tell snmpwalk to return all the data that the Fortinet will support via SNMP.

Lastly, Fortigates have an option for which administration protocols should be enabled on which interfaces. Make sure to check SNMP on your 192.168.4.2 interface!

[superlava]

Is this host being monitored by server or proxy? And are you able to reach server or proxy from firewall?

There are several reasons for this error
*Device Unreachable from proxy/server
*Community Mismatch
*SNMP not enabled on firewall or interface.

[alvinduran83]

El Host esta siendo monitoreado por un server, desde el servidor si hago ping al firewall

PING 192.168.4.2 (192.168.4.2) 56(84) bytes of data.
64 bytes from 192.168.4.2: icmp_seq=1 ttl=64 time=0.728 ms
64 bytes from 192.168.4.2: icmp_seq=2 ttl=64 time=0.254 ms
64 bytes from 192.168.4.2: icmp_seq=3 ttl=64 time=0.281 ms
64 bytes from 192.168.4.2: icmp_seq=4 ttl=64 time=0.293 ms


Revisando el log del server aparece lo siguiente:
enabling SNMP agent checks on host "Fortinet": interface became available
99370:20221019:091217.968 item "Fortinet:net.if.out[ifHCOutOctets.3]" became not supported: No Such Instance currently exists at this OID
99370:20221019:091217.986 item "Fortinet:net.if.in[ifHCInOctets.3]" became not supported: No Such Instance currently exists at this OID

[jtnfoley]

I'm using the template "Template Net Fortinet FortiGate SNMP" with great success. From its' comments:

Zabbix Template for Fortinet FortiGate
URL: https://github.com/mbdraks/fortinet-zabbix
Author: Michel Barbosa
Version: 2.1.0​

If you don't have snmpwalk on your Zabbix host or proxies, install it. Then (assuming SNMP v2) :

snmpwalk -v2c -c <your community string> 192.168.4.2 .1

The ".1" at the end of that command will tell snmpwalk to return all the data that the Fortinet will support via SNMP.

Lastly, Fortigates have an option for which administration protocols should be enabled on which interfaces. Make sure to check SNMP on your 192.168.4.2 interface!

[alvinduran83]

Buenos días Muchas Gracias, efectivamente segui tus recomendaciones y logre obtener el acceso y las graficas para el monitoreo del dispositvo. Con la plantilla y acesso administrativo todo fue un exito. Muchas Gracias

[jtnfoley]

Buenos días Muchas Gracias, efectivamente segui tus recomendaciones y logre obtener el acceso y las graficas para el monitoreo del dispositvo. Con la plantilla y acesso administrativo todo fue un exito. Muchas Gracias

¡De nada!

Mi español es muy pobre, traducción a través de Google Translate.