Fortinet Gate 60D, Руководство администратора

Страница: 185 / 706

System Config SNMP
FortiGate Version 4.0 Administration Guide
01-400-89802-20090424
185
http://docs.fortinet.com/ • Feedback
SNMP
Simple Network Management Protocol (SNMP) allows you to monitor hardware on your
network. You can configure the hardware, such as the FortiGate SNMP agent, to report
system information and send traps (alarms or event messages) to SNMP managers. An
SNMP manager is a typically a computer running an application that can read the
incoming trap and event messages from the agent and send out SNMP queries to the
SNMP agents. Another name for an SNMP manager is a host. A FortiManager unit can
act as an SNMP manager, or host, to a FortiGate unit.
Using an SNMP manager, you can access SNMP traps and data from any FortiGate
interface or VLAN subinterface configured for SNMP management access.
The FortiGate SNMP implementation is read-only. SNMP v1, v2c, and v3 compliant SNMP
managers have read-only access to FortiGate system information through queries and
can receive trap messages from the FortiGate unit. To monitor FortiGate system
information and receive FortiGate traps, you must first compile the proprietary Fortinet and
FortiGate Management Information Base (MIB) files. A MIB is a text file that describes a
list of SNMP data objects that are used by the SNMP manager. These MIBs provide the
information the SNMP manager needs to interpret the SNMP trap, event, and query
messages of the FortiGate unit SNMP agent.
The Fortinet implementation of SNMP includes support for most of RFC 2665 (Ethernet-
like MIB) and most of RFC 1213 (MIB II). For more information, see
“Fortinet MIBs” on
page 188 .
RFC support for SNMP v3 includes Architecture for SNMP Frameworks (RFC 3411), and
partial support of User-based Security Model (RFC 3414).
SNMP traps alert you to events that happen, such as an a log disk being full or a virus
being detected. For more information about SNMP traps, see
“Fortinet and FortiGate
traps” on page 189 .
SNMP fields contain information about your FortiGate unit. This information is useful to
monitor the condition of the unit, both on an ongoing basis and to provide more
information when a trap occurs. For more information about SNMP fields, see
“Fortinet
and FortiGate MIB fields” on page 192 .
Note: Part of configuring an SNMP manager is to list it as a host in a community on the
FortiGate unit it will be monitoring. Otherwise the SNMP monitor will not receive any traps
from that FortiGate unit, or be able to query it.