Diagnostics

Use the following commands to view IPAM related diagnostics.

To view the largest available subnet size:

# diagnose sys ipam largest-available-subnet
Largest available subnet is a /17.

To verify IPAM allocation information:

# diagnose sys ipam list entries
IPAM Entries: (sn, vdom, interface, subnet/mask, flag)
  F140EP4Q17000000 root port4 172.31.2.1/24 0
  FG5H1E5818900001 root port3 172.31.0.1/24 0
  FG5H1E5818900002 root port4 172.31.1.1/24 0
  FG5H1E5818900003 root port3 172.31.0.2/24 1

To verify the available subnets:

# diagnose sys ipam list free-subnets
IPAM free subnets: (subnet/mask)
  172.31.3.0/24
  172.31.4.0/22
  172.31.8.0/21
  172.31.16.0/20
  172.31.32.0/19
  172.31.64.0/18
  172.31.128.0/17

To remove a device from IPAM in the Security Fabric:

# diagnose sys ipam delete device F140EP4Q17000000
Successfully removed device F140EP4Q17000000 from ipam

To review IPAM statistics with SNMP:

Use the snmpwalk command to retrieve diagnostic statistics for IP pools, including allocated addresses, total available addresses, and usage percentages, using the IPAM OID branch (1.3.6.1.4.1.12356.101.32).

# snmpwalk -v2c -c <community_string> <IP_address> 1.3.6.1.4.1.12356.101.32
FORTINET-FORTIGATE-MIB::fnFortiGateMib.32.1.1.0 = INTEGER: 17 
FORTINET-FORTIGATE-MIB::fnFortiGateMib.32.1.2.0 = INTEGER: 6336
FORTINET-FORTIGATE-MIB::fnFortiGateMib.32.1.3.0 = INTEGER: 1536
FORTINET-FORTIGATE-MIB::fnFortiGateMib.32.1.4.0 = INTEGER: 7872
FORTINET-FORTIGATE-MIB::fnFortiGateMib.32.1.5.0 = INTEGER: 262144
FORTINET-FORTIGATE-MIB::fnFortiGateMib.32.1.6.0 = INTEGER: 3

OID Suffix	Description
.32.1.1	Largest Subnet Available.
.32.1.2	Number of IPAM allocated IP addresses.
.32.1.3	Number of manually allocated IP addresses.
.32.1.4	Sum of IPAM and manually allocated IP addresses.
.32.1.5	Total number of IP addresses in IPAM pools.
.32.1.6	Percentage of IP addresses used from IPAM pools.