Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    6.2.1
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.16
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.16
    6.2.15
    6.2.14
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.0.0
    5.6.0
    5.4.0
    5.2.0
    5.0.0

    system snmp community

    SNMP community configuration.

      config system snmp community
      Description: SNMP community configuration.
      edit <id>
          set name {string}
          set status [enable|disable]
          config hosts
              Description: Configure IPv4 SNMP managers (hosts).
              edit <id>
                  set source-ip {ipv4-address}
                  set ip {user}
                  set ha-direct [enable|disable]
                  set host-type [any|query|...]
              next
          end
          config hosts6
              Description: Configure IPv6 SNMP managers.
              edit <id>
                  set source-ipv6 {ipv6-address}
                  set ipv6 {ipv6-prefix}
                  set ha-direct [enable|disable]
                  set host-type [any|query|...]
              next
          end
          set query-v1-status [enable|disable]
          set query-v1-port {integer}
          set query-v2c-status [enable|disable]
          set query-v2c-port {integer}
          set trap-v1-status [enable|disable]
          set trap-v1-lport {integer}
          set trap-v1-rport {integer}
          set trap-v2c-status [enable|disable]
          set trap-v2c-lport {integer}
          set trap-v2c-rport {integer}
          set events {option1}, {option2}, ...
      next
  end

    config system snmp community

    Parameter Name Description Type Size
    name Community name. string Maximum length: 35
    status Enable/disable this SNMP community.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    query-v1-status Enable/disable SNMP v1 queries.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    query-v1-port SNMP v1 query port (default = 161). integer Minimum value: 1 Maximum value: 65535
    query-v2c-status Enable/disable SNMP v2c queries.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    query-v2c-port SNMP v2c query port (default = 161). integer Minimum value: 0 Maximum value: 65535
    trap-v1-status Enable/disable SNMP v1 traps.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    trap-v1-lport SNMP v1 trap local port (default = 162). integer Minimum value: 1 Maximum value: 65535
    trap-v1-rport SNMP v1 trap remote port (default = 162). integer Minimum value: 1 Maximum value: 65535
    trap-v2c-status Enable/disable SNMP v2c traps.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    trap-v2c-lport SNMP v2c trap local port (default = 162). integer Minimum value: 1 Maximum value: 65535
    trap-v2c-rport SNMP v2c trap remote port (default = 162). integer Minimum value: 1 Maximum value: 65535
    events SNMP trap events.
    cpu-high: Send a trap when CPU usage is high.
    mem-low: Send a trap when available memory is low.
    log-full: Send a trap when log disk space becomes low.
    intf-ip: Send a trap when an interface IP address is changed.
    vpn-tun-up: Send a trap when a VPN tunnel comes up.
    vpn-tun-down: Send a trap when a VPN tunnel goes down.
    ha-switch: Send a trap after an HA failover when the backup unit has taken over.
    ha-hb-failure: Send a trap when HA heartbeats are not received.
    ips-signature: Send a trap when IPS detects an attack.
    ips-anomaly: Send a trap when IPS finds an anomaly.
    av-virus: Send a trap when AntiVirus finds a virus.
    av-oversize: Send a trap when AntiVirus finds an oversized file.
    av-pattern: Send a trap when AntiVirus finds file matching pattern.
    av-fragmented: Send a trap when AntiVirus finds a fragmented file.
    fm-if-change: Send a trap when FortiManager interface changes. Send a FortiManager trap.
    fm-conf-change: Send a trap when a configuration change is made by a FortiGate administrator and the FortiGate is managed by FortiManager.
    bgp-established: Send a trap when a BGP FSM transitions to the established state.
    bgp-backward-transition: Send a trap when a BGP FSM goes from a high numbered state to a lower numbered state.
    ha-member-up: Send a trap when an HA cluster member goes up.
    ha-member-down: Send a trap when an HA cluster member goes down.
    ent-conf-change: Send a trap when an entity MIB change occurs (RFC4133).
    av-conserve: Send a trap when the FortiGate enters conserve mode.
    av-bypass: Send a trap when the FortiGate enters bypass mode.
    av-oversize-passed: Send a trap when AntiVirus passes an oversized file.
    av-oversize-blocked: Send a trap when AntiVirus blocks an oversized file.
    ips-pkg-update: Send a trap when the IPS signature database or engine is updated.
    ips-fail-open: Send a trap when the IPS network buffer is full.
    faz-disconnect: Send a trap when a FortiAnalyzer disconnects from the FortiGate.
    wc-ap-up: Send a trap when a managed FortiAP comes up.
    wc-ap-down: Send a trap when a managed FortiAP goes down.
    fswctl-session-up: Send a trap when a FortiSwitch controller session comes up.
    fswctl-session-down: Send a trap when a FortiSwitch controller session goes down.
    load-balance-real-server-down: Send a trap when a server load balance real server goes down.
    device-new: Send a trap when a new device is found.
    per-cpu-high: Send a trap when per-CPU usage is high.
    		 option -

    config hosts

    Parameter Name Description Type Size
    source-ip Source IPv4 address for SNMP traps. ipv4-address Not Specified
    ip IPv4 address of the SNMP manager (host). user Not Specified
    ha-direct Enable/disable direct management of HA cluster members.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    host-type Control whether the SNMP manager sends SNMP queries, receives SNMP traps, or both.
    any: Accept queries from and send traps to this SNMP manager.
    query: Accept queries from this SNMP manager but do not send traps.
    trap: Send traps to this SNMP manager but do not accept SNMP queries from this SNMP manager.
    		 option -

    config hosts6

    Parameter Name Description Type Size
    source-ipv6 Source IPv6 address for SNMP traps. ipv6-address Not Specified
    ipv6 SNMP manager IPv6 address prefix. ipv6-prefix Not Specified
    ha-direct Enable/disable direct management of HA cluster members.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    host-type Control whether the SNMP manager sends SNMP queries, receives SNMP traps, or both.
    any: Accept queries from and send traps to this SNMP manager.
    query: Accept queries from this SNMP manager but do not send traps.
    trap: Send traps to this SNMP manager but do not accept SNMP queries from this SNMP manager.
    		 option -
    Previous
    Next

    system snmp community

    SNMP community configuration.

      config system snmp community
      Description: SNMP community configuration.
      edit <id>
          set name {string}
          set status [enable|disable]
          config hosts
              Description: Configure IPv4 SNMP managers (hosts).
              edit <id>
                  set source-ip {ipv4-address}
                  set ip {user}
                  set ha-direct [enable|disable]
                  set host-type [any|query|...]
              next
          end
          config hosts6
              Description: Configure IPv6 SNMP managers.
              edit <id>
                  set source-ipv6 {ipv6-address}
                  set ipv6 {ipv6-prefix}
                  set ha-direct [enable|disable]
                  set host-type [any|query|...]
              next
          end
          set query-v1-status [enable|disable]
          set query-v1-port {integer}
          set query-v2c-status [enable|disable]
          set query-v2c-port {integer}
          set trap-v1-status [enable|disable]
          set trap-v1-lport {integer}
          set trap-v1-rport {integer}
          set trap-v2c-status [enable|disable]
          set trap-v2c-lport {integer}
          set trap-v2c-rport {integer}
          set events {option1}, {option2}, ...
      next
  end

    config system snmp community

    Parameter Name Description Type Size
    name Community name. string Maximum length: 35
    status Enable/disable this SNMP community.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    query-v1-status Enable/disable SNMP v1 queries.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    query-v1-port SNMP v1 query port (default = 161). integer Minimum value: 1 Maximum value: 65535
    query-v2c-status Enable/disable SNMP v2c queries.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    query-v2c-port SNMP v2c query port (default = 161). integer Minimum value: 0 Maximum value: 65535
    trap-v1-status Enable/disable SNMP v1 traps.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    trap-v1-lport SNMP v1 trap local port (default = 162). integer Minimum value: 1 Maximum value: 65535
    trap-v1-rport SNMP v1 trap remote port (default = 162). integer Minimum value: 1 Maximum value: 65535
    trap-v2c-status Enable/disable SNMP v2c traps.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    trap-v2c-lport SNMP v2c trap local port (default = 162). integer Minimum value: 1 Maximum value: 65535
    trap-v2c-rport SNMP v2c trap remote port (default = 162). integer Minimum value: 1 Maximum value: 65535
    events SNMP trap events.
    cpu-high: Send a trap when CPU usage is high.
    mem-low: Send a trap when available memory is low.
    log-full: Send a trap when log disk space becomes low.
    intf-ip: Send a trap when an interface IP address is changed.
    vpn-tun-up: Send a trap when a VPN tunnel comes up.
    vpn-tun-down: Send a trap when a VPN tunnel goes down.
    ha-switch: Send a trap after an HA failover when the backup unit has taken over.
    ha-hb-failure: Send a trap when HA heartbeats are not received.
    ips-signature: Send a trap when IPS detects an attack.
    ips-anomaly: Send a trap when IPS finds an anomaly.
    av-virus: Send a trap when AntiVirus finds a virus.
    av-oversize: Send a trap when AntiVirus finds an oversized file.
    av-pattern: Send a trap when AntiVirus finds file matching pattern.
    av-fragmented: Send a trap when AntiVirus finds a fragmented file.
    fm-if-change: Send a trap when FortiManager interface changes. Send a FortiManager trap.
    fm-conf-change: Send a trap when a configuration change is made by a FortiGate administrator and the FortiGate is managed by FortiManager.
    bgp-established: Send a trap when a BGP FSM transitions to the established state.
    bgp-backward-transition: Send a trap when a BGP FSM goes from a high numbered state to a lower numbered state.
    ha-member-up: Send a trap when an HA cluster member goes up.
    ha-member-down: Send a trap when an HA cluster member goes down.
    ent-conf-change: Send a trap when an entity MIB change occurs (RFC4133).
    av-conserve: Send a trap when the FortiGate enters conserve mode.
    av-bypass: Send a trap when the FortiGate enters bypass mode.
    av-oversize-passed: Send a trap when AntiVirus passes an oversized file.
    av-oversize-blocked: Send a trap when AntiVirus blocks an oversized file.
    ips-pkg-update: Send a trap when the IPS signature database or engine is updated.
    ips-fail-open: Send a trap when the IPS network buffer is full.
    faz-disconnect: Send a trap when a FortiAnalyzer disconnects from the FortiGate.
    wc-ap-up: Send a trap when a managed FortiAP comes up.
    wc-ap-down: Send a trap when a managed FortiAP goes down.
    fswctl-session-up: Send a trap when a FortiSwitch controller session comes up.
    fswctl-session-down: Send a trap when a FortiSwitch controller session goes down.
    load-balance-real-server-down: Send a trap when a server load balance real server goes down.
    device-new: Send a trap when a new device is found.
    per-cpu-high: Send a trap when per-CPU usage is high.
    		 option -

    config hosts

    Parameter Name Description Type Size
    source-ip Source IPv4 address for SNMP traps. ipv4-address Not Specified
    ip IPv4 address of the SNMP manager (host). user Not Specified
    ha-direct Enable/disable direct management of HA cluster members.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    host-type Control whether the SNMP manager sends SNMP queries, receives SNMP traps, or both.
    any: Accept queries from and send traps to this SNMP manager.
    query: Accept queries from this SNMP manager but do not send traps.
    trap: Send traps to this SNMP manager but do not accept SNMP queries from this SNMP manager.
    		 option -

    config hosts6

    Parameter Name Description Type Size
    source-ipv6 Source IPv6 address for SNMP traps. ipv6-address Not Specified
    ipv6 SNMP manager IPv6 address prefix. ipv6-prefix Not Specified
    ha-direct Enable/disable direct management of HA cluster members.
    enable: Enable setting.
    disable: Disable setting.
    		 option -
    host-type Control whether the SNMP manager sends SNMP queries, receives SNMP traps, or both.
    any: Accept queries from and send traps to this SNMP manager.
    query: Accept queries from this SNMP manager but do not send traps.
    trap: Send traps to this SNMP manager but do not accept SNMP queries from this SNMP manager.
    		 option -
    Previous
    Next