[Check_mk (english)] if inventory for fortinet

Jonathan_Chatriot · November 27, 2018, 2:39pm

Hello,

I have about 350 fortigate unit in my check_mk.

I am currently upgrading the firmware of my firewall, and I sax a little change with the interface inventory.

With firmware 5.2.13, the interface are inventoried like :

Interface port1 detail : [Alias]

With firmware 5.4.10, the interface are inventoried like :

Interface 00X detail : [Alias]

I have tested with the different option in main.mk ( if_inventory_uses_alias, or if_inventory_uses_description), but I can't obtain the same result as the firmware 5.1.13.

The name interface 00X is not helpful.

Is there a way to obtain the interface inventory like : Interface port1 detail : [Alias] ?

I am using check_mk 1.5.0p8.

Thanks for your help

Jonathan

Jonathan_Chatriot · December 4, 2018, 8:17am

Hi,

my problem is still present with the interface inventory on fortigate.

How can I force the interface inventory with the ifName ?

Here is the snmpwalk result :

snmpwalk -v 2c -c community XX.XX.XX.XX .1.3.6.1.2.1.31.1.1.1.1
IF-MIB::ifName.1 = STRING: dmz
IF-MIB::ifName.2 = STRING: wan1
IF-MIB::ifName.3 = STRING: wan2
IF-MIB::ifName.4 = STRING: modem
IF-MIB::ifName.5 = STRING: ssl.root
IF-MIB::ifName.6 = STRING: mgmt
IF-MIB::ifName.7 = STRING: ha1
IF-MIB::ifName.8 = STRING: ha2
IF-MIB::ifName.9 = STRING: port1
IF-MIB::ifName.10 = STRING: port2
IF-MIB::ifName.11 = STRING: port3
IF-MIB::ifName.12 = STRING: port4
IF-MIB::ifName.13 = STRING: port5
IF-MIB::ifName.14 = STRING: port6
IF-MIB::ifName.15 = STRING: port7
IF-MIB::ifName.16 = STRING: port8
IF-MIB::ifName.17 = STRING: port9
IF-MIB::ifName.18 = STRING: port10
IF-MIB::ifName.19 = STRING: port11
IF-MIB::ifName.20 = STRING: port12
IF-MIB::ifName.21 = STRING: port13
IF-MIB::ifName.22 = STRING: port14
IF-MIB::ifName.23 = STRING: port15
IF-MIB::ifName.24 = STRING: port16

snmpwalk -v 2c -c community XX.XX.XX.XX .1.3.6.1.2.1.2.2.1.2
IF-MIB::ifDescr.1 = STRING:
IF-MIB::ifDescr.2 = STRING:
IF-MIB::ifDescr.3 = STRING:
IF-MIB::ifDescr.4 = STRING:
IF-MIB::ifDescr.5 = STRING:
IF-MIB::ifDescr.6 = STRING:
IF-MIB::ifDescr.7 = STRING:
IF-MIB::ifDescr.8 = STRING:
IF-MIB::ifDescr.9 = STRING:
IF-MIB::ifDescr.10 = STRING:
IF-MIB::ifDescr.11 = STRING:
IF-MIB::ifDescr.12 = STRING:
IF-MIB::ifDescr.13 = STRING:
IF-MIB::ifDescr.14 = STRING:
IF-MIB::ifDescr.15 = STRING:
IF-MIB::ifDescr.16 = STRING:
IF-MIB::ifDescr.17 = STRING:
IF-MIB::ifDescr.18 = STRING:
IF-MIB::ifDescr.19 = STRING:
IF-MIB::ifDescr.20 = STRING:
IF-MIB::ifDescr.21 = STRING:
IF-MIB::ifDescr.22 = STRING:
IF-MIB::ifDescr.23 = STRING:
IF-MIB::ifDescr.24 = STRING:

snmpwalk -v 2c -c community XX.XX.XX.XX .1.3.6.1.2.1.31.1.1.1.18
IF-MIB::ifAlias.1 = STRING:
IF-MIB::ifAlias.2 = STRING: internet
IF-MIB::ifAlias.3 = STRING:
IF-MIB::ifAlias.4 = STRING:
IF-MIB::ifAlias.5 = STRING: sslvpn tunnel interface
IF-MIB::ifAlias.6 = STRING:
IF-MIB::ifAlias.7 = STRING:
IF-MIB::ifAlias.8 = STRING:
IF-MIB::ifAlias.9 = STRING: admin
IF-MIB::ifAlias.10 = STRING: peda
IF-MIB::ifAlias.11 = STRING: col
IF-MIB::ifAlias.12 = STRING: dmz
IF-MIB::ifAlias.13 = STRING: interco
IF-MIB::ifAlias.14 = STRING: dmzi
IF-MIB::ifAlias.15 = STRING: securite
IF-MIB::ifAlias.16 = STRING:
IF-MIB::ifAlias.17 = STRING:
IF-MIB::ifAlias.18 = STRING:
IF-MIB::ifAlias.19 = STRING:
IF-MIB::ifAlias.20 = STRING:
IF-MIB::ifAlias.21 = STRING:
IF-MIB::ifAlias.22 = STRING:
IF-MIB::ifAlias.23 = STRING:
IF-MIB::ifAlias.24 = STRING:
IF-MIB::ifAlias.25 = STRING:

Any suggestions are more then welcome!

Best regards,

Jonathan

···

Le 27/11/2018 à 15:39, Jonathan Chatriot a écrit :

Hello,

I have about 350 fortigate unit in my check_mk.

I am currently upgrading the firmware of my firewall, and I sax a little change with the interface inventory.

With firmware 5.2.13, the interface are inventoried like :

Interface port1 detail : [Alias]

With firmware 5.4.10, the interface are inventoried like :

Interface 00X detail : [Alias]

I have tested with the different option in main.mk ( if_inventory_uses_alias, or if_inventory_uses_description), but I can't obtain the same result as the firmware 5.1.13.

The name interface 00X is not helpful.

Is there a way to obtain the interface inventory like : Interface port1 detail : [Alias] ?

I am using check_mk 1.5.0p8.

Thanks for your help

Jonathan

_______________________________________________
checkmk-en mailing list
checkmk-en@lists.mathias-kettner.de
Manage your subscription or unsubscribe
https://lists.mathias-kettner.de/cgi-bin/mailman/listinfo/checkmk-en

andreas-doehler · December 4, 2018, 10:03pm

Hi Jonathan,

take a look at the “Network Interface and Switch Port Discovery” rule.

Test one switch with the settings →

“Description as service name for network interface checks” → “Use description”

and

“Alias as service name for network interface checks” → “Do not use alias”

A second switch you should configure with the exact opposite rule and inspect booth results.

One should show you the desired result.

The following data from your post is used for the alias names.

snmpwalk -v 2c -c community XX.XX.XX.XX .1.3.6.1.2.1.31.1.1.1.18

IF-MIB::ifAlias.1 = STRING:

IF-MIB::ifAlias.2 = STRING: internet

IF-MIB::ifAlias.3 = STRING:

IF-MIB::ifAlias.4 = STRING:

IF-MIB::ifAlias.5 = STRING: sslvpn tunnel interface

IF-MIB::ifAlias.6 = STRING:

IF-MIB::ifAlias.7 = STRING:

IF-MIB::ifAlias.8 = STRING:

IF-MIB::ifAlias.9 = STRING: admin

IF-MIB::ifAlias.10 = STRING: peda

If no name is found then the interface number is used.

.1.3.6.1.2.1.31.1.1.1.1 is not used inside the interface checks

.1.3.6.1.2.1.2.2.1.2 is used if you select description as interface name

For myself it looks like the firmware removed all description inside the 16bit MIB tree.

Firmware Bug

Your only option is a own interface check für this type of network devices if it is not possible to change the behavior.

Best regards

Andreas

···

Am Di., 4. Dez. 2018 um 09:15 Uhr schrieb Jonathan Chatriot jonathan.chatriot@ac-lille.fr:

Hi,

my problem is still present with the interface inventory on fortigate.

How can I force the interface inventory with the ifName ?

Here is the snmpwalk result :

snmpwalk -v 2c -c community XX.XX.XX.XX .1.3.6.1.2.1.31.1.1.1.1

IF-MIB::ifName.1 = STRING: dmz

IF-MIB::ifName.2 = STRING: wan1

IF-MIB::ifName.3 = STRING: wan2

IF-MIB::ifName.4 = STRING: modem

IF-MIB::ifName.5 = STRING: ssl.root

IF-MIB::ifName.6 = STRING: mgmt

IF-MIB::ifName.7 = STRING: ha1

IF-MIB::ifName.8 = STRING: ha2

IF-MIB::ifName.9 = STRING: port1

IF-MIB::ifName.10 = STRING: port2

IF-MIB::ifName.11 = STRING: port3

IF-MIB::ifName.12 = STRING: port4

IF-MIB::ifName.13 = STRING: port5

IF-MIB::ifName.14 = STRING: port6

IF-MIB::ifName.15 = STRING: port7

IF-MIB::ifName.16 = STRING: port8

IF-MIB::ifName.17 = STRING: port9

IF-MIB::ifName.18 = STRING: port10

IF-MIB::ifName.19 = STRING: port11

IF-MIB::ifName.20 = STRING: port12

IF-MIB::ifName.21 = STRING: port13

IF-MIB::ifName.22 = STRING: port14

IF-MIB::ifName.23 = STRING: port15

IF-MIB::ifName.24 = STRING: port16

snmpwalk -v 2c -c community XX.XX.XX.XX .1.3.6.1.2.1.2.2.1.2

IF-MIB::ifDescr.1 = STRING:

IF-MIB::ifDescr.2 = STRING:

IF-MIB::ifDescr.3 = STRING:

IF-MIB::ifDescr.4 = STRING:

IF-MIB::ifDescr.5 = STRING:

IF-MIB::ifDescr.6 = STRING:

IF-MIB::ifDescr.7 = STRING:

IF-MIB::ifDescr.8 = STRING:

IF-MIB::ifDescr.9 = STRING:

IF-MIB::ifDescr.10 = STRING:

IF-MIB::ifDescr.11 = STRING:

IF-MIB::ifDescr.12 = STRING:

IF-MIB::ifDescr.13 = STRING:

IF-MIB::ifDescr.14 = STRING:

IF-MIB::ifDescr.15 = STRING:

IF-MIB::ifDescr.16 = STRING:

IF-MIB::ifDescr.17 = STRING:

IF-MIB::ifDescr.18 = STRING:

IF-MIB::ifDescr.19 = STRING:

IF-MIB::ifDescr.20 = STRING:

IF-MIB::ifDescr.21 = STRING:

IF-MIB::ifDescr.22 = STRING:

IF-MIB::ifDescr.23 = STRING:

IF-MIB::ifDescr.24 = STRING:

snmpwalk -v 2c -c community XX.XX.XX.XX .1.3.6.1.2.1.31.1.1.1.18

IF-MIB::ifAlias.1 = STRING:

IF-MIB::ifAlias.2 = STRING: internet

IF-MIB::ifAlias.3 = STRING:

IF-MIB::ifAlias.4 = STRING:

IF-MIB::ifAlias.5 = STRING: sslvpn tunnel interface

IF-MIB::ifAlias.6 = STRING:

IF-MIB::ifAlias.7 = STRING:

IF-MIB::ifAlias.8 = STRING:

IF-MIB::ifAlias.9 = STRING: admin

IF-MIB::ifAlias.10 = STRING: peda

IF-MIB::ifAlias.11 = STRING: col

IF-MIB::ifAlias.12 = STRING: dmz

IF-MIB::ifAlias.13 = STRING: interco

IF-MIB::ifAlias.14 = STRING: dmzi

IF-MIB::ifAlias.15 = STRING: securite

IF-MIB::ifAlias.16 = STRING:

IF-MIB::ifAlias.17 = STRING:

IF-MIB::ifAlias.18 = STRING:

IF-MIB::ifAlias.19 = STRING:

IF-MIB::ifAlias.20 = STRING:

IF-MIB::ifAlias.21 = STRING:

IF-MIB::ifAlias.22 = STRING:

IF-MIB::ifAlias.23 = STRING:

IF-MIB::ifAlias.24 = STRING:

IF-MIB::ifAlias.25 = STRING:

Any suggestions are more then welcome!

Best regards,

Jonathan

Le 27/11/2018 à 15:39, Jonathan Chatriot a écrit :

Hello,

I have about 350 fortigate unit in my check_mk.

I am currently upgrading the firmware of my firewall, and I sax a

little change with the interface inventory.

With firmware 5.2.13, the interface are inventoried like :

Interface port1 detail : [Alias]

With firmware 5.4.10, the interface are inventoried like :

Interface 00X detail : [Alias]

I have tested with the different option in main.mk (

if_inventory_uses_alias, or if_inventory_uses_description), but I

can’t obtain the same result as the firmware 5.1.13.

The name interface 00X is not helpful.

Is there a way to obtain the interface inventory like : Interface

port1 detail : [Alias] ?

I am using check_mk 1.5.0p8.

Thanks for your help

Jonathan

checkmk-en mailing list

checkmk-en@lists.mathias-kettner.de

Manage your subscription or unsubscribe

https://lists.mathias-kettner.de/cgi-bin/mailman/listinfo/checkmk-en

checkmk-en mailing list

checkmk-en@lists.mathias-kettner.de

Manage your subscription or unsubscribe

https://lists.mathias-kettner.de/cgi-bin/mailman/listinfo/checkmk-en

andreas-doehler · December 5, 2018, 5:42pm

Hi Jonathan,

please create the rules with WATO - the syntax you used is deprecated.
It works but not every time

To your problem - after your firmware update the switch has no
description on it's ports anymore. That is the problem not the
inventory rule.
If you compare the SNMPwalk between old and new firmware you should
see the difference.
I think that the IF-MIB::ifDescr was used before you updated also with
the same value you only find inside IF-MIB::ifName.

If nothing helps it will be the only solution to modify the if check
that it uses the ifName instead of ifDescr.

But then all your network devices must support the
.1.3.6.1.2.1.31.1.1.1 part of the IFMIB (old devices do not and also
SNMPv1 devices)

Best regards
Andreas

···

Am Mi., 5. Dez. 2018 um 09:34 Uhr schrieb Jonathan Chatriot <jonathan.chatriot@ac-lille.fr>:

Hi Andreas,

thanks for your help.

I don't use Wato to configure rules. I have tested with change in my main.mk.

With parameters :

if_inventory_uses_alias = [ False ]
if_inventory_uses_description = [ True ]

With parameters :

if_inventory_uses_alias = [ True ]
if_inventory_uses_description = [ False ]

If I comment this two lines :

#if_inventory_uses_alias = [ True ]
#if_inventory_uses_description = [ False ]

with alias commented :
#if_inventory_uses_alias = [ True ]
if_inventory_uses_description = [ True ]

with description commented :
if_inventory_uses_alias = [ True ]
#if_inventory_uses_description = [ True ]

I have tested with a 6.0.3 firmware, same problem.

I have retested with a 5.2.13 firmware, and I have the correct result :
#if_inventory_uses_alias = [ True ]
if_inventory_uses_description = True

How can I find the same result ?

Best regards,

Jonathan

Le 04/12/2018 à 23:03, Andreas Döhler a écrit :

Hi Jonathan,

take a look at the "Network Interface and Switch Port Discovery" rule.
Test one switch with the settings -->
"Description as service name for network interface checks" -> "Use description"
and
"Alias as service name for network interface checks" -> "Do not use alias"

A second switch you should configure with the exact opposite rule and inspect booth results.
One should show you the desired result.

The following data from your post is used for the alias names.
snmpwalk -v 2c -c community XX.XX.XX.XX .1.3.6.1.2.1.31.1.1.1.18
IF-MIB::ifAlias.1 = STRING:
IF-MIB::ifAlias.2 = STRING: internet
IF-MIB::ifAlias.3 = STRING:
IF-MIB::ifAlias.4 = STRING:
IF-MIB::ifAlias.5 = STRING: sslvpn tunnel interface
IF-MIB::ifAlias.6 = STRING:
IF-MIB::ifAlias.7 = STRING:
IF-MIB::ifAlias.8 = STRING:
IF-MIB::ifAlias.9 = STRING: admin
IF-MIB::ifAlias.10 = STRING: peda

If no name is found then the interface number is used.

.1.3.6.1.2.1.31.1.1.1.1 is not used inside the interface checks

.1.3.6.1.2.1.2.2.1.2 is used if you select description as interface name

For myself it looks like the firmware removed all description inside the 16bit MIB tree.
Firmware Bug

Your only option is a own interface check für this type of network devices if it is not possible to change the behavior.

Best regards
Andreas

Am Di., 4. Dez. 2018 um 09:15 Uhr schrieb Jonathan Chatriot <jonathan.chatriot@ac-lille.fr>:

Hi,

my problem is still present with the interface inventory on fortigate.

How can I force the interface inventory with the ifName ?

Here is the snmpwalk result :

snmpwalk -v 2c -c community XX.XX.XX.XX .1.3.6.1.2.1.31.1.1.1.1
IF-MIB::ifName.1 = STRING: dmz
IF-MIB::ifName.2 = STRING: wan1
IF-MIB::ifName.3 = STRING: wan2
IF-MIB::ifName.4 = STRING: modem
IF-MIB::ifName.5 = STRING: ssl.root
IF-MIB::ifName.6 = STRING: mgmt
IF-MIB::ifName.7 = STRING: ha1
IF-MIB::ifName.8 = STRING: ha2
IF-MIB::ifName.9 = STRING: port1
IF-MIB::ifName.10 = STRING: port2
IF-MIB::ifName.11 = STRING: port3
IF-MIB::ifName.12 = STRING: port4
IF-MIB::ifName.13 = STRING: port5
IF-MIB::ifName.14 = STRING: port6
IF-MIB::ifName.15 = STRING: port7
IF-MIB::ifName.16 = STRING: port8
IF-MIB::ifName.17 = STRING: port9
IF-MIB::ifName.18 = STRING: port10
IF-MIB::ifName.19 = STRING: port11
IF-MIB::ifName.20 = STRING: port12
IF-MIB::ifName.21 = STRING: port13
IF-MIB::ifName.22 = STRING: port14
IF-MIB::ifName.23 = STRING: port15
IF-MIB::ifName.24 = STRING: port16

snmpwalk -v 2c -c community XX.XX.XX.XX .1.3.6.1.2.1.2.2.1.2
IF-MIB::ifDescr.1 = STRING:
IF-MIB::ifDescr.2 = STRING:
IF-MIB::ifDescr.3 = STRING:
IF-MIB::ifDescr.4 = STRING:
IF-MIB::ifDescr.5 = STRING:
IF-MIB::ifDescr.6 = STRING:
IF-MIB::ifDescr.7 = STRING:
IF-MIB::ifDescr.8 = STRING:
IF-MIB::ifDescr.9 = STRING:
IF-MIB::ifDescr.10 = STRING:
IF-MIB::ifDescr.11 = STRING:
IF-MIB::ifDescr.12 = STRING:
IF-MIB::ifDescr.13 = STRING:
IF-MIB::ifDescr.14 = STRING:
IF-MIB::ifDescr.15 = STRING:
IF-MIB::ifDescr.16 = STRING:
IF-MIB::ifDescr.17 = STRING:
IF-MIB::ifDescr.18 = STRING:
IF-MIB::ifDescr.19 = STRING:
IF-MIB::ifDescr.20 = STRING:
IF-MIB::ifDescr.21 = STRING:
IF-MIB::ifDescr.22 = STRING:
IF-MIB::ifDescr.23 = STRING:
IF-MIB::ifDescr.24 = STRING:

snmpwalk -v 2c -c community XX.XX.XX.XX .1.3.6.1.2.1.31.1.1.1.18
IF-MIB::ifAlias.1 = STRING:
IF-MIB::ifAlias.2 = STRING: internet
IF-MIB::ifAlias.3 = STRING:
IF-MIB::ifAlias.4 = STRING:
IF-MIB::ifAlias.5 = STRING: sslvpn tunnel interface
IF-MIB::ifAlias.6 = STRING:
IF-MIB::ifAlias.7 = STRING:
IF-MIB::ifAlias.8 = STRING:
IF-MIB::ifAlias.9 = STRING: admin
IF-MIB::ifAlias.10 = STRING: peda
IF-MIB::ifAlias.11 = STRING: col
IF-MIB::ifAlias.12 = STRING: dmz
IF-MIB::ifAlias.13 = STRING: interco
IF-MIB::ifAlias.14 = STRING: dmzi
IF-MIB::ifAlias.15 = STRING: securite
IF-MIB::ifAlias.16 = STRING:
IF-MIB::ifAlias.17 = STRING:
IF-MIB::ifAlias.18 = STRING:
IF-MIB::ifAlias.19 = STRING:
IF-MIB::ifAlias.20 = STRING:
IF-MIB::ifAlias.21 = STRING:
IF-MIB::ifAlias.22 = STRING:
IF-MIB::ifAlias.23 = STRING:
IF-MIB::ifAlias.24 = STRING:
IF-MIB::ifAlias.25 = STRING:

Any suggestions are more then welcome!

Best regards,

Jonathan

Le 27/11/2018 à 15:39, Jonathan Chatriot a écrit :
> Hello,
>
> I have about 350 fortigate unit in my check_mk.
>
> I am currently upgrading the firmware of my firewall, and I sax a
> little change with the interface inventory.
>
> With firmware 5.2.13, the interface are inventoried like :
>
> Interface port1 detail : [Alias]
>
>
> With firmware 5.4.10, the interface are inventoried like :
>
> Interface 00X detail : [Alias]
>
>
> I have tested with the different option in main.mk (
> if_inventory_uses_alias, or if_inventory_uses_description), but I
> can't obtain the same result as the firmware 5.1.13.
>
> The name interface 00X is not helpful.
>
>
> Is there a way to obtain the interface inventory like : Interface
> port1 detail : [Alias] ?
>
> I am using check_mk 1.5.0p8.
>
> Thanks for your help
>
> Jonathan
>
> _______________________________________________
> checkmk-en mailing list
> checkmk-en@lists.mathias-kettner.de
> Manage your subscription or unsubscribe
> https://lists.mathias-kettner.de/cgi-bin/mailman/listinfo/checkmk-en
_______________________________________________
checkmk-en mailing list
checkmk-en@lists.mathias-kettner.de
Manage your subscription or unsubscribe
https://lists.mathias-kettner.de/cgi-bin/mailman/listinfo/checkmk-en

Jonathan_Chatriot · December 6, 2018, 7:15am

Hi andreas,

many thanks for your help.

By creating rules with wato, the problem is the same.
But you are right, the problem is the description on the port.

As suggested, I compare the snmpwalk, and after the firmware upgrade, ifDescr is empty.en modifiant

By modifying the if_fortigate check, it works perfectly. And I am lucky, because all my network device support this part of the IFMIB.

I will be vigilant during the next check_mk updates.

Thanks again,

Jonathan

···

Le 05/12/2018 à 18:42, Andreas Döhler a écrit :

Hi Jonathan,

please create the rules with WATO - the syntax you used is deprecated.
It works but not every time

To your problem - after your firmware update the switch has no
description on it's ports anymore. That is the problem not the
inventory rule.
If you compare the SNMPwalk between old and new firmware you should
see the difference.
I think that the IF-MIB::ifDescr was used before you updated also with
the same value you only find inside IF-MIB::ifName.

If nothing helps it will be the only solution to modify the if check
that it uses the ifName instead of ifDescr.

But then all your network devices must support the
.1.3.6.1.2.1.31.1.1.1 part of the IFMIB (old devices do not and also
SNMPv1 devices)

Best regards
Andreas

Am Mi., 5. Dez. 2018 um 09:34 Uhr schrieb Jonathan Chatriot > <jonathan.chatriot@ac-lille.fr>:

Hi Andreas,

thanks for your help.

I don't use Wato to configure rules. I have tested with change in my main.mk.

With parameters :

if_inventory_uses_alias = [ False ]
if_inventory_uses_description = [ True ]

With parameters :

if_inventory_uses_alias = [ True ]
if_inventory_uses_description = [ False ]

If I comment this two lines :

#if_inventory_uses_alias = [ True ]
#if_inventory_uses_description = [ False ]

with alias commented :
#if_inventory_uses_alias = [ True ]
if_inventory_uses_description = [ True ]

with description commented :
if_inventory_uses_alias = [ True ]
#if_inventory_uses_description = [ True ]

I have tested with a 6.0.3 firmware, same problem.

I have retested with a 5.2.13 firmware, and I have the correct result :
#if_inventory_uses_alias = [ True ]
if_inventory_uses_description = True

How can I find the same result ?

Best regards,

Jonathan

Le 04/12/2018 à 23:03, Andreas Döhler a écrit :

Hi Jonathan,

take a look at the "Network Interface and Switch Port Discovery" rule.
Test one switch with the settings -->
"Description as service name for network interface checks" -> "Use description"
and
"Alias as service name for network interface checks" -> "Do not use alias"

A second switch you should configure with the exact opposite rule and inspect booth results.
One should show you the desired result.

The following data from your post is used for the alias names.
snmpwalk -v 2c -c community XX.XX.XX.XX .1.3.6.1.2.1.31.1.1.1.18
IF-MIB::ifAlias.1 = STRING:
IF-MIB::ifAlias.2 = STRING: internet
IF-MIB::ifAlias.3 = STRING:
IF-MIB::ifAlias.4 = STRING:
IF-MIB::ifAlias.5 = STRING: sslvpn tunnel interface
IF-MIB::ifAlias.6 = STRING:
IF-MIB::ifAlias.7 = STRING:
IF-MIB::ifAlias.8 = STRING:
IF-MIB::ifAlias.9 = STRING: admin
IF-MIB::ifAlias.10 = STRING: peda

If no name is found then the interface number is used.

.1.3.6.1.2.1.31.1.1.1.1 is not used inside the interface checks

.1.3.6.1.2.1.2.2.1.2 is used if you select description as interface name

For myself it looks like the firmware removed all description inside the 16bit MIB tree.
Firmware Bug

Your only option is a own interface check für this type of network devices if it is not possible to change the behavior.

Best regards
Andreas

Am Di., 4. Dez. 2018 um 09:15 Uhr schrieb Jonathan Chatriot <jonathan.chatriot@ac-lille.fr>:

Hi,

my problem is still present with the interface inventory on fortigate.

How can I force the interface inventory with the ifName ?

Here is the snmpwalk result :

snmpwalk -v 2c -c community XX.XX.XX.XX .1.3.6.1.2.1.31.1.1.1.1
IF-MIB::ifName.1 = STRING: dmz
IF-MIB::ifName.2 = STRING: wan1
IF-MIB::ifName.3 = STRING: wan2
IF-MIB::ifName.4 = STRING: modem
IF-MIB::ifName.5 = STRING: ssl.root
IF-MIB::ifName.6 = STRING: mgmt
IF-MIB::ifName.7 = STRING: ha1
IF-MIB::ifName.8 = STRING: ha2
IF-MIB::ifName.9 = STRING: port1
IF-MIB::ifName.10 = STRING: port2
IF-MIB::ifName.11 = STRING: port3
IF-MIB::ifName.12 = STRING: port4
IF-MIB::ifName.13 = STRING: port5
IF-MIB::ifName.14 = STRING: port6
IF-MIB::ifName.15 = STRING: port7
IF-MIB::ifName.16 = STRING: port8
IF-MIB::ifName.17 = STRING: port9
IF-MIB::ifName.18 = STRING: port10
IF-MIB::ifName.19 = STRING: port11
IF-MIB::ifName.20 = STRING: port12
IF-MIB::ifName.21 = STRING: port13
IF-MIB::ifName.22 = STRING: port14
IF-MIB::ifName.23 = STRING: port15
IF-MIB::ifName.24 = STRING: port16

snmpwalk -v 2c -c community XX.XX.XX.XX .1.3.6.1.2.1.2.2.1.2
IF-MIB::ifDescr.1 = STRING:
IF-MIB::ifDescr.2 = STRING:
IF-MIB::ifDescr.3 = STRING:
IF-MIB::ifDescr.4 = STRING:
IF-MIB::ifDescr.5 = STRING:
IF-MIB::ifDescr.6 = STRING:
IF-MIB::ifDescr.7 = STRING:
IF-MIB::ifDescr.8 = STRING:
IF-MIB::ifDescr.9 = STRING:
IF-MIB::ifDescr.10 = STRING:
IF-MIB::ifDescr.11 = STRING:
IF-MIB::ifDescr.12 = STRING:
IF-MIB::ifDescr.13 = STRING:
IF-MIB::ifDescr.14 = STRING:
IF-MIB::ifDescr.15 = STRING:
IF-MIB::ifDescr.16 = STRING:
IF-MIB::ifDescr.17 = STRING:
IF-MIB::ifDescr.18 = STRING:
IF-MIB::ifDescr.19 = STRING:
IF-MIB::ifDescr.20 = STRING:
IF-MIB::ifDescr.21 = STRING:
IF-MIB::ifDescr.22 = STRING:
IF-MIB::ifDescr.23 = STRING:
IF-MIB::ifDescr.24 = STRING:

snmpwalk -v 2c -c community XX.XX.XX.XX .1.3.6.1.2.1.31.1.1.1.18
IF-MIB::ifAlias.1 = STRING:
IF-MIB::ifAlias.2 = STRING: internet
IF-MIB::ifAlias.3 = STRING:
IF-MIB::ifAlias.4 = STRING:
IF-MIB::ifAlias.5 = STRING: sslvpn tunnel interface
IF-MIB::ifAlias.6 = STRING:
IF-MIB::ifAlias.7 = STRING:
IF-MIB::ifAlias.8 = STRING:
IF-MIB::ifAlias.9 = STRING: admin
IF-MIB::ifAlias.10 = STRING: peda
IF-MIB::ifAlias.11 = STRING: col
IF-MIB::ifAlias.12 = STRING: dmz
IF-MIB::ifAlias.13 = STRING: interco
IF-MIB::ifAlias.14 = STRING: dmzi
IF-MIB::ifAlias.15 = STRING: securite
IF-MIB::ifAlias.16 = STRING:
IF-MIB::ifAlias.17 = STRING:
IF-MIB::ifAlias.18 = STRING:
IF-MIB::ifAlias.19 = STRING:
IF-MIB::ifAlias.20 = STRING:
IF-MIB::ifAlias.21 = STRING:
IF-MIB::ifAlias.22 = STRING:
IF-MIB::ifAlias.23 = STRING:
IF-MIB::ifAlias.24 = STRING:
IF-MIB::ifAlias.25 = STRING:

Any suggestions are more then welcome!

Best regards,

Jonathan

Le 27/11/2018 à 15:39, Jonathan Chatriot a écrit :

Hello,

I have about 350 fortigate unit in my check_mk.

I am currently upgrading the firmware of my firewall, and I sax a
little change with the interface inventory.

With firmware 5.2.13, the interface are inventoried like :

Interface port1 detail : [Alias]

With firmware 5.4.10, the interface are inventoried like :

Interface 00X detail : [Alias]

I have tested with the different option in main.mk (
if_inventory_uses_alias, or if_inventory_uses_description), but I
can't obtain the same result as the firmware 5.1.13.

The name interface 00X is not helpful.

Is there a way to obtain the interface inventory like : Interface
port1 detail : [Alias] ?

I am using check_mk 1.5.0p8.

Thanks for your help

Jonathan

_______________________________________________
checkmk-en mailing list
checkmk-en@lists.mathias-kettner.de
Manage your subscription or unsubscribe
https://lists.mathias-kettner.de/cgi-bin/mailman/listinfo/checkmk-en

_______________________________________________
checkmk-en mailing list
checkmk-en@lists.mathias-kettner.de
Manage your subscription or unsubscribe
https://lists.mathias-kettner.de/cgi-bin/mailman/listinfo/checkmk-en