SNMP Fortigate Firewall VPN IPSec Tunnels, only 10?

Troubleshooting
1

CMK version: current version, RAW Edition
OS version: Debian

The SNMP connection to our Fortigate Firewall works, but we can only resolve 10 VPN IPSec tunnels. is there any limit in the RAW version? Are there more settings I don’t know?

thx for your help :slight_smile:

image
image734×42 6.5 KB

2

Hi, nah there is no such limit.
The Plugin uses the OIDs “.1.3.6.1.4.1.12356.101.12.2.2.1.3” for the Tunnel Name and “.1.3.6.1.4.1.12356.101.12.2.2.1.20” for the tunnel state.
You can do an SNMP Walk on thse OIDs and see what you get back.

3

Hi Janncek,
thx for the answer.
If I make a SNMP Walk with 1.3.6.1.4.1.12356.101.12.2.2.1.3 I got 10 VPN tunnels.
The missing VPN tunnels I get with the OID 1.3.6.1.4.1.12356.101.12.4.1.1.16, which is not listed in CheckMk.
In the Fortigate docs I can see following differences:
FortiGate VPN MIBs | FortiGate / FortiOS 7.6.0 | Fortinet Document Library

fgVpnTables
1.3.6.1.4.1.12356.101.12.2

fgVpn2Tables
1.3.6.1.4.1.12356.101.12.4

So seems that fgVpn2Tables is missing in CheckMK or do I miss anything?