Fortinet black logo

New Features

Enabling the INDEX extension 7.2.8

Enabling the INDEX extension 7.2.8

Note

This information is also available in the FortiOS 7.2 Administration Guide:

The INDEX extension can be enabled from the CLI to append VDOM or interface indexes in RFC tables.

config system snmp sysinfo
    set append-index {enable | disable}
end

When the append-index command is enabled:

  • VDOM and interface indexes are appended as the INDEX extension in RFC tables.

  • In multi-VDOM mode, duplicated IP addresses in different VDOMs will result in multiple entries in the RFC table.

When the append-index command is disabled:

  • VDOM and interface indexes are not appended in RFC tables.

  • In multi-VDOM mode, duplicated IP addresses in different VDOMs will only be presented once in the RFC table.

Example

In the following example, the same IP address will be set on different ports in two VDOMs. The ipAddrTable SNMP Tree output will then be reviewed before and after enabling the append-index command.

To enable the INDEX extension:
  1. In two different VDOMs, set the same address on two different ports.

    config system interface
        edit "port3"
            set vdom "vdom1"
            set ip 10.1.1.1 255.255.255.0
            set type physical
            set snmp-index 5
        next
    end
    config system interface
        edit "port4"
            set vdom "root"
            set ip 10.1.1.1 255.255.255.0
            set type physical
            set snmp-index 6
        next
    end
  2. Configure the SNMP information but do not enable the INDEX extension.

    config system snmp sysinfo
        set status enable
        set description "REGR-SYS"
    end
  3. On your PC, review the ipAddrTable SNMP Tree (OID 1.3.6.1.2.1.4.20). The IP address 10.1.1.1 is only displayed once.

    snmpwalk -v2c -c REGR-SYS 172.16.200.1 1.3.6.1.2.1.4.20
    
    IP-MIB::ipAdEntAddr.10.1.1.1 = IpAddress: 10.1.1.1
    IP-MIB::ipAdEntAddr.10.255.1.1 = IpAddress: 10.255.1.1
    IP-MIB::ipAdEntAddr.172.16.200.1 = IpAddress: 172.16.200.1
    IP-MIB::ipAdEntAddr.192.168.1.99 = IpAddress: 192.168.1.99
    IP-MIB::ipAdEntIfIndex.10.1.1.1 = INTEGER: 5
    IP-MIB::ipAdEntIfIndex.10.255.1.1 = INTEGER: 39
    IP-MIB::ipAdEntIfIndex.172.16.200.1 = INTEGER: 3
    IP-MIB::ipAdEntIfIndex.192.168.1.99 = INTEGER: 2
    IP-MIB::ipAdEntNetMask.10.1.1.1 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntNetMask.10.255.1.1 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntNetMask.172.16.200.1 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntNetMask.192.168.1.99 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntBcastAddr.10.1.1.1 = INTEGER: 1
    IP-MIB::ipAdEntBcastAddr.10.255.1.1 = INTEGER: 1
    IP-MIB::ipAdEntBcastAddr.172.16.200.1 = INTEGER: 1
    IP-MIB::ipAdEntBcastAddr.192.168.1.99 = INTEGER: 1
    IP-MIB::ipAdEntReasmMaxSize.10.1.1.1 = INTEGER: 65535
    IP-MIB::ipAdEntReasmMaxSize.10.255.1.1 = INTEGER: 65535
    IP-MIB::ipAdEntReasmMaxSize.172.16.200.1 = INTEGER: 65535
    IP-MIB::ipAdEntReasmMaxSize.192.168.1.99 = INTEGER: 65535
  4. Enable the INDEX extension.

    config system snmp sysinfo
        set status enable
        set description "REGR-SYS"
        set append-index enable
    end
  5. Review the ipAddrTable SNMP Tree (OID 1.3.6.1.2.1.4.20) again. The IP address 10.1.1.1 is now displayed twice.

    snmpwalk -v2c -c REGR-SYS 172.16.200.1 1.3.6.1.2.1.4.20
    
    IP-MIB::ipAdEntAddr.10.1.1.1.1 = IpAddress: 10.1.1.1
    IP-MIB::ipAdEntAddr.10.1.1.1.2 = IpAddress: 10.1.1.1
    IP-MIB::ipAdEntAddr.10.255.1.1.1 = IpAddress: 10.255.1.1
    IP-MIB::ipAdEntAddr.172.16.200.1.2 = IpAddress: 172.16.200.1
    IP-MIB::ipAdEntAddr.192.168.1.99.1 = IpAddress: 192.168.1.99
    IP-MIB::ipAdEntIfIndex.10.1.1.1.1 = INTEGER: 6
    IP-MIB::ipAdEntIfIndex.10.1.1.1.2 = INTEGER: 5
    IP-MIB::ipAdEntIfIndex.10.255.1.1.1 = INTEGER: 39
    IP-MIB::ipAdEntIfIndex.172.16.200.1.2 = INTEGER: 3
    IP-MIB::ipAdEntIfIndex.192.168.1.99.1 = INTEGER: 2
    IP-MIB::ipAdEntNetMask.10.1.1.1.1 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntNetMask.10.1.1.1.2 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntNetMask.10.255.1.1.1 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntNetMask.172.16.200.1.2 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntNetMask.192.168.1.99.1 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntBcastAddr.10.1.1.1.1 = INTEGER: 1
    IP-MIB::ipAdEntBcastAddr.10.1.1.1.2 = INTEGER: 1
    IP-MIB::ipAdEntBcastAddr.10.255.1.1.1 = INTEGER: 1
    IP-MIB::ipAdEntBcastAddr.172.16.200.1.2 = INTEGER: 1
    IP-MIB::ipAdEntBcastAddr.192.168.1.99.1 = INTEGER: 1
    IP-MIB::ipAdEntReasmMaxSize.10.1.1.1.1 = INTEGER: 65535
    IP-MIB::ipAdEntReasmMaxSize.10.1.1.1.2 = INTEGER: 65535
    IP-MIB::ipAdEntReasmMaxSize.10.255.1.1.1 = INTEGER: 65535
    IP-MIB::ipAdEntReasmMaxSize.172.16.200.1.2 = INTEGER: 65535
    IP-MIB::ipAdEntReasmMaxSize.192.168.1.99.1 = INTEGER: 65535

Enabling the INDEX extension 7.2.8

Note

This information is also available in the FortiOS 7.2 Administration Guide:

The INDEX extension can be enabled from the CLI to append VDOM or interface indexes in RFC tables.

config system snmp sysinfo
    set append-index {enable | disable}
end

When the append-index command is enabled:

  • VDOM and interface indexes are appended as the INDEX extension in RFC tables.

  • In multi-VDOM mode, duplicated IP addresses in different VDOMs will result in multiple entries in the RFC table.

When the append-index command is disabled:

  • VDOM and interface indexes are not appended in RFC tables.

  • In multi-VDOM mode, duplicated IP addresses in different VDOMs will only be presented once in the RFC table.

Example

In the following example, the same IP address will be set on different ports in two VDOMs. The ipAddrTable SNMP Tree output will then be reviewed before and after enabling the append-index command.

To enable the INDEX extension:
  1. In two different VDOMs, set the same address on two different ports.

    config system interface
        edit "port3"
            set vdom "vdom1"
            set ip 10.1.1.1 255.255.255.0
            set type physical
            set snmp-index 5
        next
    end
    config system interface
        edit "port4"
            set vdom "root"
            set ip 10.1.1.1 255.255.255.0
            set type physical
            set snmp-index 6
        next
    end
  2. Configure the SNMP information but do not enable the INDEX extension.

    config system snmp sysinfo
        set status enable
        set description "REGR-SYS"
    end
  3. On your PC, review the ipAddrTable SNMP Tree (OID 1.3.6.1.2.1.4.20). The IP address 10.1.1.1 is only displayed once.

    snmpwalk -v2c -c REGR-SYS 172.16.200.1 1.3.6.1.2.1.4.20
    
    IP-MIB::ipAdEntAddr.10.1.1.1 = IpAddress: 10.1.1.1
    IP-MIB::ipAdEntAddr.10.255.1.1 = IpAddress: 10.255.1.1
    IP-MIB::ipAdEntAddr.172.16.200.1 = IpAddress: 172.16.200.1
    IP-MIB::ipAdEntAddr.192.168.1.99 = IpAddress: 192.168.1.99
    IP-MIB::ipAdEntIfIndex.10.1.1.1 = INTEGER: 5
    IP-MIB::ipAdEntIfIndex.10.255.1.1 = INTEGER: 39
    IP-MIB::ipAdEntIfIndex.172.16.200.1 = INTEGER: 3
    IP-MIB::ipAdEntIfIndex.192.168.1.99 = INTEGER: 2
    IP-MIB::ipAdEntNetMask.10.1.1.1 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntNetMask.10.255.1.1 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntNetMask.172.16.200.1 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntNetMask.192.168.1.99 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntBcastAddr.10.1.1.1 = INTEGER: 1
    IP-MIB::ipAdEntBcastAddr.10.255.1.1 = INTEGER: 1
    IP-MIB::ipAdEntBcastAddr.172.16.200.1 = INTEGER: 1
    IP-MIB::ipAdEntBcastAddr.192.168.1.99 = INTEGER: 1
    IP-MIB::ipAdEntReasmMaxSize.10.1.1.1 = INTEGER: 65535
    IP-MIB::ipAdEntReasmMaxSize.10.255.1.1 = INTEGER: 65535
    IP-MIB::ipAdEntReasmMaxSize.172.16.200.1 = INTEGER: 65535
    IP-MIB::ipAdEntReasmMaxSize.192.168.1.99 = INTEGER: 65535
  4. Enable the INDEX extension.

    config system snmp sysinfo
        set status enable
        set description "REGR-SYS"
        set append-index enable
    end
  5. Review the ipAddrTable SNMP Tree (OID 1.3.6.1.2.1.4.20) again. The IP address 10.1.1.1 is now displayed twice.

    snmpwalk -v2c -c REGR-SYS 172.16.200.1 1.3.6.1.2.1.4.20
    
    IP-MIB::ipAdEntAddr.10.1.1.1.1 = IpAddress: 10.1.1.1
    IP-MIB::ipAdEntAddr.10.1.1.1.2 = IpAddress: 10.1.1.1
    IP-MIB::ipAdEntAddr.10.255.1.1.1 = IpAddress: 10.255.1.1
    IP-MIB::ipAdEntAddr.172.16.200.1.2 = IpAddress: 172.16.200.1
    IP-MIB::ipAdEntAddr.192.168.1.99.1 = IpAddress: 192.168.1.99
    IP-MIB::ipAdEntIfIndex.10.1.1.1.1 = INTEGER: 6
    IP-MIB::ipAdEntIfIndex.10.1.1.1.2 = INTEGER: 5
    IP-MIB::ipAdEntIfIndex.10.255.1.1.1 = INTEGER: 39
    IP-MIB::ipAdEntIfIndex.172.16.200.1.2 = INTEGER: 3
    IP-MIB::ipAdEntIfIndex.192.168.1.99.1 = INTEGER: 2
    IP-MIB::ipAdEntNetMask.10.1.1.1.1 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntNetMask.10.1.1.1.2 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntNetMask.10.255.1.1.1 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntNetMask.172.16.200.1.2 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntNetMask.192.168.1.99.1 = IpAddress: 255.255.255.0
    IP-MIB::ipAdEntBcastAddr.10.1.1.1.1 = INTEGER: 1
    IP-MIB::ipAdEntBcastAddr.10.1.1.1.2 = INTEGER: 1
    IP-MIB::ipAdEntBcastAddr.10.255.1.1.1 = INTEGER: 1
    IP-MIB::ipAdEntBcastAddr.172.16.200.1.2 = INTEGER: 1
    IP-MIB::ipAdEntBcastAddr.192.168.1.99.1 = INTEGER: 1
    IP-MIB::ipAdEntReasmMaxSize.10.1.1.1.1 = INTEGER: 65535
    IP-MIB::ipAdEntReasmMaxSize.10.1.1.1.2 = INTEGER: 65535
    IP-MIB::ipAdEntReasmMaxSize.10.255.1.1.1 = INTEGER: 65535
    IP-MIB::ipAdEntReasmMaxSize.172.16.200.1.2 = INTEGER: 65535
    IP-MIB::ipAdEntReasmMaxSize.192.168.1.99.1 = INTEGER: 65535