SNMP polling extensions to support new OIDs 6.4.2

New OIDs are added to support SNMP query for license details and IPsec tunnels.

To configure SNMP:

config system snmp community
    edit 1
        set name "SNMP-TEST"
        config hosts
            edit 1
                set ip 10.1.100.11 255.255.255.255
            next
            edit 2
                set ip 172.16.200.55 255.255.255.255
            next
        end
        config hosts6
            edit 1
                set ipv6 2000:172:16:200::55/128
            next
            edit 2
                set ipv6 2000:10:1:100::11/128
            next
        end
        set events cpu-high mem-low log-full intf-ip vpn-tun-up vpn-tun-down ha-switch ha-hb-failure ips-signature ips-anomaly av-virus av-oversize av-pattern av-fragmented fm-if-change fm-conf-change ha-member-up ha-member-down ent-conf-change av-conserve av-bypass av-oversize-passed av-oversize-blocked ips-pkg-update faz-disconnect
    next
end

License details

New OIDs are added in fgSystemInfoAdvanced to support SNMP query for license details, including the following two tables.

fgLicContracts 1.3.6.1.4.1.12356.101.4.6.3.1

snmpwalk -v2c -c SNMP-TEST 172.16.200.1 1.3.6.1.4.1.12356.101.4.6.3.1
FORTINET-FORTIGATE-MIB::fgLicContractCount.0 = INTEGER: 28
FORTINET-FORTIGATE-MIB::fgLicContractDesc.1 = STRING: Hardware
FORTINET-FORTIGATE-MIB::fgLicContractDesc.2 = STRING: Enhanced
FORTINET-FORTIGATE-MIB::fgLicContractDesc.3 = STRING: Firmware & general updates
FORTINET-FORTIGATE-MIB::fgLicContractDesc.4 = STRING: FortiClient
FORTINET-FORTIGATE-MIB::fgLicContractDesc.5 = STRING: Webfilter
FORTINET-FORTIGATE-MIB::fgLicContractDesc.6 = STRING: Virus Definitions
FORTINET-FORTIGATE-MIB::fgLicContractDesc.7 = STRING: Security Rating license
FORTINET-FORTIGATE-MIB::fgLicContractDesc.8 = STRING: SPRT
...

fgLicVersions 1.3.6.1.4.1.12356.101.4.6.3.2           

snmpwalk -v2c -c SNMP-TEST  172.16.200.1 1.3.6.1.4.1.12356.101.4.6.3.2 (Version info)
FORTINET-FORTIGATE-MIB::fgLicVersionCount.0 = INTEGER: 25
FORTINET-FORTIGATE-MIB::fgLicVersionDesc.1 = STRING: Application Definitions
FORTINET-FORTIGATE-MIB::fgLicVersionDesc.2 = STRING: Virus Definitions
FORTINET-FORTIGATE-MIB::fgLicVersionDesc.3 = STRING: Extended set
FORTINET-FORTIGATE-MIB::fgLicVersionDesc.4 = STRING: Extreme set
FORTINET-FORTIGATE-MIB::fgLicVersionDesc.5 = STRING: Mobile Malware Definitions
FORTINET-FORTIGATE-MIB::fgLicVersionDesc.6 = STRING: Flow-based Virus Definitions
FORTINET-FORTIGATE-MIB::fgLicVersionDesc.7 = STRING: Botnet Domain Database
FORTINET-FORTIGATE-MIB::fgLicVersionDesc.8 = STRING: Attack Definitions
FORTINET-FORTIGATE-MIB::fgLicVersionDesc.9 = STRING: Attack Extended Definitions
...

IPsec tunnels

New OIDs are added in fgVpn to support SNMP query for IPv4 and IPv6 IPsec tunnels, including the following two tables.

fgVpn2DialupTable 1.3.6.1.4.1.12356.101.12.4.1

snmpwalk  -v2c -c SNMP-TEST 172.16.200.1 1.3.6.1.4.1.12356.101.12.4.1
FORTINET-FORTIGATE-MIB::fgVpn2DialupIndex.1 = INTEGER: 1
FORTINET-FORTIGATE-MIB::fgVpn2DialupIndex.2 = INTEGER: 2
FORTINET-FORTIGATE-MIB::fgVpn2DialupIndex.3 = INTEGER: 3
FORTINET-FORTIGATE-MIB::fgVpn2DialupIndex.4 = INTEGER: 4
FORTINET-FORTIGATE-MIB::fgVpn2DialupIndex.5 = INTEGER: 5
FORTINET-FORTIGATE-MIB::fgVpn2DialupIndex.6 = INTEGER: 6
FORTINET-FORTIGATE-MIB::fgVpn2DialupGatewayType.1 = INTEGER: ipv6(2)
FORTINET-FORTIGATE-MIB::fgVpn2DialupGatewayType.2 = INTEGER: ipv6(2)
FORTINET-FORTIGATE-MIB::fgVpn2DialupGatewayType.3 = INTEGER: ipv4(1)
FORTINET-FORTIGATE-MIB::fgVpn2DialupGatewayType.4 = INTEGER: ipv4(1)
FORTINET-FORTIGATE-MIB::fgVpn2DialupGatewayType.5 = INTEGER: ipv4(1)
FORTINET-FORTIGATE-MIB::fgVpn2DialupGatewayType.6 = INTEGER: ipv4(1)
...

fgVpn2TunTable 1.3.6.1.4.1.12356.101.12.4.2

snmpwalk  -v2c -c SNMP-TEST 172.16.200.1 1.3.6.1.4.1.12356.101.12.4.2 (Tunnel VPN)
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase1Name.3.1 = STRING: tovd6
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase1Name.4.1 = STRING: tovd7
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase1Name.6.1 = STRING: dailToVd1
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase1Name.7.1 = STRING: vd3-dial-vd1
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase1Name.8.1 = STRING: spoke1
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase1Name.8.2 = STRING: spoke1
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase1Name.9.2 = STRING: spoke1v6
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase1Name.9.3 = STRING: spoke1v6
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase1Name.10.1 = STRING: Spoke2
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase1Name.10.2 = STRING: Spoke2
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase1Name.11.1 = STRING: spoke2v6
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase1Name.12.1 = STRING: tovd1
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase1Name.13.1 = STRING: vd7to1-ip6
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase2Name.3.1 = STRING: tovd6
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase2Name.4.1 = STRING: tovd7
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase2Name.6.1 = STRING: dailToVd1
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase2Name.7.1 = STRING: vd3-to-vd1
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase2Name.8.1 = STRING: spoke1
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase2Name.8.2 = STRING: spoke1-v2
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase2Name.9.2 = STRING: spoke1v6-2
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase2Name.9.3 = STRING: spoke1v6
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase2Name.10.1 = STRING: Spoke2
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase2Name.10.2 = STRING: spoke2-p2
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase2Name.11.1 = STRING: spoke2v6
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase2Name.12.1 = STRING: tovd1
FORTINET-FORTIGATE-MIB::fgVpn2TunPhase2Name.13.1 = STRING: vd7to1-ip6
FORTINET-FORTIGATE-MIB::fgVpn2TunRemGwyIpType.3.1 = INTEGER: ipv4(1)
FORTINET-FORTIGATE-MIB::fgVpn2TunRemGwyIpType.4.1 = INTEGER: ipv6(2)
FORTINET-FORTIGATE-MIB::fgVpn2TunRemGwyIpType.6.1 = INTEGER: ipv4(1)
...