Fortinet black logo

FortiWiFi and FortiAP Configuration Guide

Monitoring FortiAP with SNMP

Copy Link
Copy Doc ID c3f3bf9d-a5fd-11ea-8b7d-00505692583a:930384
Download PDF

Monitoring FortiAP with SNMP

FortiAP-S and FortiAP-W2 version 6.2.0 and later support Simple Network Management Protocol (SNMP) queries and trap messages based on wireless-controller SNMP settings configured on FortiGate.

FortiAP-S and FortiAP-W2 support all SNMP versions (v1, v2, and v3).

The local standalone mode does not support FortiAP direct SNMP.

The SNMP manager requires the following management information base (MIB) files:

  • FortiAP MIB
  • Fortinet Core MIB

Downloading the FortiAP MIB and Fortinet Core MIB files

To download the FortiAP SNMP MIB and Fortinet Core MIB files, perform the following steps:

  1. Go to the Fortinet Support website.
  2. Log in to your account. If you do not have an account, create one and then log in.
  3. From the top banner, select Download > Firmware images.
  4. From the Select Product list, select FortiAP-S or FortiAP-W2, as applicable.
  5. Click the Download tab.
  6. Locate the v6.00 folder (or later) and then the 6.2 (or later) folder to match the firmware release running on your FortiAP-S or FortiAP-W2 device.
  7. Navigate through the folders to find and then download the FORTINET-FORTIAP-MIB-buildxxxx.mib file.
  8. From the Select Product list, select FortiGate.
  9. Locate the v6.00 folder (or later) and then 6.2 (or later) folder to match the firmware release running on your FortiGate device.
  10. Navigate through the folders to find and then download the FORTINET-CORE-MIB-buildxxxx.mib file.
  11. You can load the MIB files into your SNMP manager.

FortiAP SNMP trap messages

FortiAP-S and FortiAP-W2 can send the following trap messages to an SNMP manager or trap receiver:

Trap message

Description

fapDevUp

The specified FortiAP device is up.

fapCpuOverload

The CPU usage of the specified FortiAP has exceeded the configured threshold.

fapMemOverload

The memory usage of the specified FortiAP has exceeded the configured threshold.

fapDevDown

The specified FortiAP device is down.

fapAcConnected

FortiAP has connected to the specified AP controller (AC).

FortiAP SNMP queries

From your SNMP manager, you can use the SNMP GET and SNMP WALK commands to query FortiAP for status information, variables values, SSID configuration, radio configuration, and so on. You can also use the SNMP SET command to configure local FortiAP variables.

Here is an example of polling FortiAP data using the snmpwalk command from a Linux OS computer:

$ snmpwalk -v2c -c public 10.0.28.2 .1

SNMPv2-MIB::sysDescr.0 = STRING: FortiAP-S223E

SNMPv2-MIB::sysObjectID.0 = OID: FORTINET-FORTIAP-MIB::fapHostName

DISMAN-EXPRESSION-MIB::sysUpTimeInstance = Timeticks: (27486) 0:04:34.86

SNMPv2-MIB::sysContact.0 = STRING: avizzari@fortinet.com

SNMPv2-MIB::sysName.0 = STRING: FortiAP-S223E

SNMPv2-MIB::sysLocation.0 = STRING: N/A

IF-MIB::ifNumber.0 = INTEGER: 25

...

FORTINET-FORTIAP-MIB::fapVersion.0 = STRING: PS223E-v6.2-build0229

FORTINET-FORTIAP-MIB::fapSerialNum.0 = STRING: PS223E3X170000001

FORTINET-FORTIAP-MIB::fapHostName.0 = STRING: FortiAP-S223E

FORTINET-FORTIAP-MIB::fapRegionCode.0 = STRING: E

FORTINET-FORTIAP-MIB::fapBaseMacAddr.0 = STRING: 70:4c:a5:43:7b:8

FORTINET-FORTIAP-MIB::fapBiosVer.0 = STRING: 04000002

FORTINET-FORTIAP-MIB::fapBiosDataVer.0 = INTEGER: 3

FORTINET-FORTIAP-MIB::fapSysPartNum.0 = STRING: 20155-03

FORTINET-FORTIAP-MIB::fapWtpWanMode.0 = INTEGER: wanOnly(0)

FORTINET-FORTIAP-MIB::fapWtpApAddrMode.0 = INTEGER: dhcp(0)

FORTINET-FORTIAP-MIB::fapWtpApIpAddr.0 = STRING: "192.168.1.2"

FORTINET-FORTIAP-MIB::fapWtpApIpNetmask.0 = STRING: "255.255.255.0"

FORTINET-FORTIAP-MIB::fapWtpApIpGateway.0 = STRING: "192.168.1.1"

FORTINET-FORTIAP-MIB::fapWtpApMode.0 = INTEGER: thinAp(0)

...

Monitoring FortiAP with SNMP

FortiAP-S and FortiAP-W2 version 6.2.0 and later support Simple Network Management Protocol (SNMP) queries and trap messages based on wireless-controller SNMP settings configured on FortiGate.

FortiAP-S and FortiAP-W2 support all SNMP versions (v1, v2, and v3).

The local standalone mode does not support FortiAP direct SNMP.

The SNMP manager requires the following management information base (MIB) files:

  • FortiAP MIB
  • Fortinet Core MIB

Downloading the FortiAP MIB and Fortinet Core MIB files

To download the FortiAP SNMP MIB and Fortinet Core MIB files, perform the following steps:

  1. Go to the Fortinet Support website.
  2. Log in to your account. If you do not have an account, create one and then log in.
  3. From the top banner, select Download > Firmware images.
  4. From the Select Product list, select FortiAP-S or FortiAP-W2, as applicable.
  5. Click the Download tab.
  6. Locate the v6.00 folder (or later) and then the 6.2 (or later) folder to match the firmware release running on your FortiAP-S or FortiAP-W2 device.
  7. Navigate through the folders to find and then download the FORTINET-FORTIAP-MIB-buildxxxx.mib file.
  8. From the Select Product list, select FortiGate.
  9. Locate the v6.00 folder (or later) and then 6.2 (or later) folder to match the firmware release running on your FortiGate device.
  10. Navigate through the folders to find and then download the FORTINET-CORE-MIB-buildxxxx.mib file.
  11. You can load the MIB files into your SNMP manager.

FortiAP SNMP trap messages

FortiAP-S and FortiAP-W2 can send the following trap messages to an SNMP manager or trap receiver:

Trap message

Description

fapDevUp

The specified FortiAP device is up.

fapCpuOverload

The CPU usage of the specified FortiAP has exceeded the configured threshold.

fapMemOverload

The memory usage of the specified FortiAP has exceeded the configured threshold.

fapDevDown

The specified FortiAP device is down.

fapAcConnected

FortiAP has connected to the specified AP controller (AC).

FortiAP SNMP queries

From your SNMP manager, you can use the SNMP GET and SNMP WALK commands to query FortiAP for status information, variables values, SSID configuration, radio configuration, and so on. You can also use the SNMP SET command to configure local FortiAP variables.

Here is an example of polling FortiAP data using the snmpwalk command from a Linux OS computer:

$ snmpwalk -v2c -c public 10.0.28.2 .1

SNMPv2-MIB::sysDescr.0 = STRING: FortiAP-S223E

SNMPv2-MIB::sysObjectID.0 = OID: FORTINET-FORTIAP-MIB::fapHostName

DISMAN-EXPRESSION-MIB::sysUpTimeInstance = Timeticks: (27486) 0:04:34.86

SNMPv2-MIB::sysContact.0 = STRING: avizzari@fortinet.com

SNMPv2-MIB::sysName.0 = STRING: FortiAP-S223E

SNMPv2-MIB::sysLocation.0 = STRING: N/A

IF-MIB::ifNumber.0 = INTEGER: 25

...

FORTINET-FORTIAP-MIB::fapVersion.0 = STRING: PS223E-v6.2-build0229

FORTINET-FORTIAP-MIB::fapSerialNum.0 = STRING: PS223E3X170000001

FORTINET-FORTIAP-MIB::fapHostName.0 = STRING: FortiAP-S223E

FORTINET-FORTIAP-MIB::fapRegionCode.0 = STRING: E

FORTINET-FORTIAP-MIB::fapBaseMacAddr.0 = STRING: 70:4c:a5:43:7b:8

FORTINET-FORTIAP-MIB::fapBiosVer.0 = STRING: 04000002

FORTINET-FORTIAP-MIB::fapBiosDataVer.0 = INTEGER: 3

FORTINET-FORTIAP-MIB::fapSysPartNum.0 = STRING: 20155-03

FORTINET-FORTIAP-MIB::fapWtpWanMode.0 = INTEGER: wanOnly(0)

FORTINET-FORTIAP-MIB::fapWtpApAddrMode.0 = INTEGER: dhcp(0)

FORTINET-FORTIAP-MIB::fapWtpApIpAddr.0 = STRING: "192.168.1.2"

FORTINET-FORTIAP-MIB::fapWtpApIpNetmask.0 = STRING: "255.255.255.0"

FORTINET-FORTIAP-MIB::fapWtpApIpGateway.0 = STRING: "192.168.1.1"

FORTINET-FORTIAP-MIB::fapWtpApMode.0 = INTEGER: thinAp(0)

...