Fortinet white logo
Fortinet white logo

Administration Guide

Create or edit an SNMP community

Create or edit an SNMP community

An SNMP community is a grouping of devices for network administration purposes. Within that SNMP community, devices can communicate by sending and receiving traps and other information. One device can belong to multiple communities, such as one administrator terminal monitoring both a firewall SNMP and a printer SNMP community.

Add SNMP communities to your FortiProxy unit so that SNMP managers can view system information and receive SNMP traps. You can add up to three SNMP communities. Each community can have a different configuration for SNMP queries and traps and can be configured to monitor the FortiProxy unit for a different set of events. You can also add the IP addresses of up to eight SNMP managers to each community.

Selecting Create New on the SNMP v1/v2c table opens the New SNMP Community page, which provides settings for configuring a new SNMP community. Selecting a community from the list and selecting Edit opens the Edit SNMP Community page.

Configure the following settings in the New SNMP Community page or Edit SNMP Community page and click OK:

Community Name

Enter a name to identify the SNMP community. After you create the SNMP community, you cannot edit the name.

Enabled

Enable or disable the SNMP community.

Hosts

Settings for configuring the hosts of an SNMP community.

IP Address

Enter the IP address/netmask of the SNMP managers that can use the settings in this SNMP community to monitor the unit.

You can also set the IP address to 0.0.0.0 to so that any SNMP manager can use this SNMP community.

Host Type

Select one of the following: Accept queries and send traps, Accept queries only, or Send traps only

X

Removes an SNMP manager from the list within the Hosts section.

+

Select to add a blank line to the Hosts list. You can add up to 16 SNMP managers to a single community.

Queries

Settings for configuring queries for both SNMP v1 and v2c.

v1 Enabled

Enable or disable SNMP v1 queries.

Port

Enter the port number (161 by default) that the SNMP managers in this community use for SNMP v1 and SNMP v2c queries to receive configuration information from the unit.

The SNMP client software and the unit must use the same port for queries.

v2c Enabled

Enable or disable SNMP v2c queries.

Traps

Settings for configuring local and remote ports for both v1 and v2c.

v1 Enabled

Enable or disable SNMP v1 traps.

Local Port

Enter the remote port numbers (162 by default) that the unit uses to send SNMP v1 or SNMP v2c traps to the SNMP managers in this community.

The SNMP client software and the unit must use the same port for traps.

Remote Port

Enter the remote port number (162 by default) that the unit uses to send SNMP traps to the SNMP managers in this community.

The SNMP client software and the unit must use the same port for traps.

v2c Enabled

Enable or disable SNMP v2c traps.

SNMP Events

Enable each SNMP event for which the unit should send traps to the SNMP managers in this community.

Note: The CPU usage too high trapʼs sensitivity is slightly reduced by spreading values out over 8 polling cycles. This reduction prevents sharp spikes due to CPU intensive short-term events such as changing a policy.

Create or edit an SNMP community

Create or edit an SNMP community

An SNMP community is a grouping of devices for network administration purposes. Within that SNMP community, devices can communicate by sending and receiving traps and other information. One device can belong to multiple communities, such as one administrator terminal monitoring both a firewall SNMP and a printer SNMP community.

Add SNMP communities to your FortiProxy unit so that SNMP managers can view system information and receive SNMP traps. You can add up to three SNMP communities. Each community can have a different configuration for SNMP queries and traps and can be configured to monitor the FortiProxy unit for a different set of events. You can also add the IP addresses of up to eight SNMP managers to each community.

Selecting Create New on the SNMP v1/v2c table opens the New SNMP Community page, which provides settings for configuring a new SNMP community. Selecting a community from the list and selecting Edit opens the Edit SNMP Community page.

Configure the following settings in the New SNMP Community page or Edit SNMP Community page and click OK:

Community Name

Enter a name to identify the SNMP community. After you create the SNMP community, you cannot edit the name.

Enabled

Enable or disable the SNMP community.

Hosts

Settings for configuring the hosts of an SNMP community.

IP Address

Enter the IP address/netmask of the SNMP managers that can use the settings in this SNMP community to monitor the unit.

You can also set the IP address to 0.0.0.0 to so that any SNMP manager can use this SNMP community.

Host Type

Select one of the following: Accept queries and send traps, Accept queries only, or Send traps only

X

Removes an SNMP manager from the list within the Hosts section.

+

Select to add a blank line to the Hosts list. You can add up to 16 SNMP managers to a single community.

Queries

Settings for configuring queries for both SNMP v1 and v2c.

v1 Enabled

Enable or disable SNMP v1 queries.

Port

Enter the port number (161 by default) that the SNMP managers in this community use for SNMP v1 and SNMP v2c queries to receive configuration information from the unit.

The SNMP client software and the unit must use the same port for queries.

v2c Enabled

Enable or disable SNMP v2c queries.

Traps

Settings for configuring local and remote ports for both v1 and v2c.

v1 Enabled

Enable or disable SNMP v1 traps.

Local Port

Enter the remote port numbers (162 by default) that the unit uses to send SNMP v1 or SNMP v2c traps to the SNMP managers in this community.

The SNMP client software and the unit must use the same port for traps.

Remote Port

Enter the remote port number (162 by default) that the unit uses to send SNMP traps to the SNMP managers in this community.

The SNMP client software and the unit must use the same port for traps.

v2c Enabled

Enable or disable SNMP v2c traps.

SNMP Events

Enable each SNMP event for which the unit should send traps to the SNMP managers in this community.

Note: The CPU usage too high trapʼs sensitivity is slightly reduced by spreading values out over 8 polling cycles. This reduction prevents sharp spikes due to CPU intensive short-term events such as changing a policy.