Monitoring FortiAP with SNMP
FortiAP-S and FortiAP-W2 version 6.2.0 and later support Simple Network Management Protocol (SNMP) queries and trap messages based on wireless-controller SNMP settings configured on FortiGate.
FortiAP-S and FortiAP-W2 support all SNMP versions (v1, v2, and v3).
The local standalone mode does not support FortiAP direct SNMP.
The SNMP manager requires the following management information base (MIB) files:
- FortiAP MIB
- Fortinet Core MIB
Downloading the FortiAP MIB and Fortinet Core MIB files
To download the FortiAP SNMP MIB and Fortinet Core MIB files, perform the following steps:
- Go to the Fortinet Support website.
- Log in to your account. If you do not have an account, create one and then log in.
- From the top banner, select Download > Firmware images.
- From the Select Product list, select FortiAP-S or FortiAP-W2, as applicable.
- Click the Download tab.
- Locate the v6.00 folder (or later) and then the 6.2 (or later) folder to match the firmware release running on your FortiAP-S or FortiAP-W2 device.
- Navigate through the folders to find and then download the FORTINET-FORTIAP-MIB-buildxxxx.mib file.
- From the Select Product list, select FortiGate.
- Locate the v6.00 folder (or later) and then 6.2 (or later) folder to match the firmware release running on your FortiGate device.
- Navigate through the folders to find and then download the FORTINET-CORE-MIB-buildxxxx.mib file.
- You can load the MIB files into your SNMP manager.
FortiAP SNMP trap messages
FortiAP-S and FortiAP-W2 can send the following trap messages to an SNMP manager or trap receiver:
|
Trap message |
Description |
|---|---|
|
fapDevUp |
The specified FortiAP device is up. |
|
fapCpuOverload |
The CPU usage of the specified FortiAP has exceeded the configured threshold. |
|
fapMemOverload |
The memory usage of the specified FortiAP has exceeded the configured threshold. |
|
fapDevDown |
The specified FortiAP device is down. |
|
fapAcConnected |
FortiAP has connected to the specified AP controller (AC). |
FortiAP SNMP queries
From your SNMP manager, you can use the SNMP GET and SNMP WALK commands to query FortiAP for status information, variables values, SSID configuration, radio configuration, and so on. You can also use the SNMP SET command to configure local FortiAP variables.
Here is an example of polling FortiAP data using the snmpwalk command from a Linux OS computer:
$ snmpwalk -v2c -c public 10.0.28.2 .1
SNMPv2-MIB::sysDescr.0 = STRING: FortiAP-S223E
SNMPv2-MIB::sysObjectID.0 = OID: FORTINET-FORTIAP-MIB::fapHostName
DISMAN-EXPRESSION-MIB::sysUpTimeInstance = Timeticks: (27486) 0:04:34.86
SNMPv2-MIB::sysContact.0 = STRING: avizzari@fortinet.com
SNMPv2-MIB::sysName.0 = STRING: FortiAP-S223E
SNMPv2-MIB::sysLocation.0 = STRING: N/A
IF-MIB::ifNumber.0 = INTEGER: 25
...
FORTINET-FORTIAP-MIB::fapVersion.0 = STRING: PS223E-v6.2-build0229
FORTINET-FORTIAP-MIB::fapSerialNum.0 = STRING: PS223E3X170000001
FORTINET-FORTIAP-MIB::fapHostName.0 = STRING: FortiAP-S223E
FORTINET-FORTIAP-MIB::fapRegionCode.0 = STRING: E
FORTINET-FORTIAP-MIB::fapBaseMacAddr.0 = STRING: 70:4c:a5:43:7b:8
FORTINET-FORTIAP-MIB::fapBiosVer.0 = STRING: 04000002
FORTINET-FORTIAP-MIB::fapBiosDataVer.0 = INTEGER: 3
FORTINET-FORTIAP-MIB::fapSysPartNum.0 = STRING: 20155-03
FORTINET-FORTIAP-MIB::fapWtpWanMode.0 = INTEGER: wanOnly(0)
FORTINET-FORTIAP-MIB::fapWtpApAddrMode.0 = INTEGER: dhcp(0)
FORTINET-FORTIAP-MIB::fapWtpApIpAddr.0 = STRING: "192.168.1.2"
FORTINET-FORTIAP-MIB::fapWtpApIpNetmask.0 = STRING: "255.255.255.0"
FORTINET-FORTIAP-MIB::fapWtpApIpGateway.0 = STRING: "192.168.1.1"
FORTINET-FORTIAP-MIB::fapWtpApMode.0 = INTEGER: thinAp(0)
...