SNMPv3 Traps with Fortigate not working

CMK version:2.1.0p33 cfe

Good evening
I use CheckmMK 2.1.0p33
I have the problem that I can not receive SNMPv3 traps from the Fortigate with CheckMK.
I also have 2 switches with which I can receive SNMPv3 traps.
However SNMPv2 traps work from the Fortigate to CheckMK.
So from CheckMK side there can be no error.

Here is my config in the FortiGate unit

set status enable
set engine-id-type text
set engine-id "800022340354a"
set description "xxxxx"
set contact-info "xxxx"
set location "xxxxx"
set trap-high-cpu-threshold 80
set trap-low-memory-threshold 80
set trap-log-full-threshold 90




    set status enable
    set trap-status enable
    set trap-lport 162
    set trap-rport 162
    set queries enable
    set query-port 161
    set notify-hosts "CheckMK Address"
    set source-ip "FortiGate IP"
    set source-ipv6 ::
    set ha-direct disable
    set events cpu-high mem-low log-full intf-ip vpn-tun-up vpn-tun-down ha-switch ha-hb-failure ips-signature ips-anomaly av-virus av-oversize av-pattern av-fragmented fm-if-change fm-conf-change bgp-established bgp-backward-transition ha-member-up ha-member-down ent-conf-change av-conserve av-bypass av-oversize-passed av-oversize-blocked ips-pkg-update ips-fail-open temperature-high voltage-alert power-supply-failure faz-disconnect wc-ap-up wc-ap-down fswctl-session-up fswctl-session-down load-balance-real-server-down device-new per-cpu-high dhcp pool-usage ospf-nbr-state-change ospf-virtnbr-state-change
    set mib-view ''
    set security-level auth-priv
    set auth-proto sha512
    set auth-pwd ENC xxxxxxxxxxxxxx
    set priv-proto aes
    set priv-pwd ENC xxxxxxxxxxxxxxxxxxxxx

Maybe someone can help me.
Because the problem exists with not only one Fortigate.

Thanks in advance

Hey @Schmaex,

can you verify whether or not the SNMPv3 traps are sent by the FortiGate or not? I mean: Are they really sent out (proof?) but checkmk does not receive them, or aren’t they sent out at all? Maybe you can do a packet capture on the Forti to prove that the traps are really sent out?

Hey @webernetz
Sorry I forgot to write that.
I can see in the Trafic sniffing the SNMPv3 trap packets that the Fortigate sends to the CheckMK.

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed. Contact an admin if you think this should be re-opened.