system snmp user
Use this command to configure SNMP v3 user settings.
SNMP v3 adds more security by using authentication and privacy encryption. You can specify an SNMP v3 user on FortiMail so that SNMP managers can connect to the FortiMail unit to view system information and receive SNMP traps.
Syntax
config system snmp user
edit <user_name>
set query-status {enable | disable}
set security-level {authnopriv | authpriv | noauthnopriv}
set trap-status {enable | disable}
set trapport-local <port_number>
set trapport-remote <port_number>
config host
edit <host_no>
set ip <class_ip>
end
end
|
Variable |
Description |
Default |
|
Enter a name to identify the SNMP user on FortiMail. |
|
|
|
Enable to allow SNMP v3 query from the SNMP managers. Also configure the query port as described below. |
disable |
|
|
Specify the port number used to listen to queries from the SNMP manager. |
161 |
|
|
Choose one of the three security levels for the communication between FortiMail and the SNMP manager.
|
|
|
|
Specify the authentication protocol if you choose authentication for the security level. Otherwise, this option is not displayed. |
|
|
|
Specify the authentication password if you choose authentication for the security level. Otherwise, this option is not displayed. |
|
|
|
Enable or disable the SNMP v3 user on FortiMail. |
disable |
|
|
Enable to activate traps on FortiMail. |
disable |
|
|
trapevent {cpu | deferred-queue | ha | ip-change | logdisk | mem | raid | remote-storage | spam | system | virus} |
Enter one or more of the following events that will generate a trap when the event occurs or when its threshold is reached:
Note: Since FortiMail checks its status in a scheduled interval, not all the events will trigger traps. For example, FortiMail checks its hardware status every 60 seconds. This means that if the power is off for a few seconds but is back on before the next status check, no system event trap will be sent. To set SNMP trap thresholds for the event types that use them, see system snmp threshold. Events apply only when traps are enabled in . |
cpu deferred-queue ha logdisk maildisk mem raid remote-storage system |
|
Enter the local port number for sending traps. |
162 |
|
|
Enter the remote port number that listens to SNMP traps on the SNMP manager. |
162 |
|
|
Enter an index number for the SNMP manager. |
|
|
|
Enter the IP address of the SNMP manager. |
|