FortiGate Administration Guide - FirewallShop.com

System Config
SNMP
FortiGate traps
The FortiGate agent can send traps to SNMP managers that you have added to
SNMP communities. To receive traps, you must load and compile the Fortinet 3.0
MIB into the SNMP manager.
All traps include the trap message as well as the FortiGate unit serial number and
hostname.
Table 9: Generic FortiGate traps
Trap message
ColdStart
WarmStart
LinkUp
LinkDown
Description
Standard traps as described in RFC 1215.
Table 10: FortiGate system traps
Trap message
CPU usage high
(fnTrapCpuHigh)
Memory low
(fnTrapMemLow)
Interface IP change
(fnTrapIfChange)
Temperature too high
(fnTrapTempHigh)
Voltage out of range
(fnTrapVoltageOutOfRange)
(fnFMTrapIfChange)
(fnFMTrapConfChange)
Description
CPU usage exceeds 90%. This threshold can be set in the
CLI using config system global.
Memory usage exceeds 90%. This threshold can be set in
the CLI using config system global.
Change of IP address on a FortiGate interface. The trap
message includes the name of the interface, the new IP
address and the serial number of the FortiGate unit. You
can use this trap to track interface IP address changes for
interfaces with dynamic IP addresses set using DHCP or
PPPoE.
Hardware sensor detects high temperature.
This is available only for FortiGate 5001.
Hardware sensor detects abnormal power levels.
This is available only for FortiGate 5001.
No message. Interface changes IP. Only sent to monitoring
FortiManager.
Any configuration changes made to FortiGate unit,
excluding any changes made by a connected FortiManager
unit.
Table 11: FortiGate VPN traps
Trap message
VPN tunnel is up
(fnTrapVpnTunUp)
VPN tunnel down
(fnTrapVpnTunDown)
Description
An IPSec VPN tunnel started.
An IPSec VPN tunnel shuts down.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 147