config system : config system snmp user
 
config system snmp user
Use this command to manage SNMP settings.
Before you begin:
You must have read-write permission for system settings.
Syntax
config system snmp user
edit <name>
set query-status {enable|disable}
set queryport <integer>
set security-level {authnopriv | authpriv | noauthnopriv}
set auth-proto {sha1|md5}
set auth-pwd <passwd>
set priv-proto {aes|des}
set priv-pwd <passwd>
set status {enable|disable}
set trap-status {enable|disable}
set trapevent {cpu ha ip-change logdisk mem raid remote-storage system}
set trapport-local <integer>
set trapport-remote <integer>
config host
edit <name>
set ip <class_ip>
next
end
next
end
query-status
Enable/disable SNMP queries.
queryport
Port number on which the system listens for SNMP queries from the SNMP managers in this community. The default is 161.
security-level
authnopriv—Authenticated but unencrypted.
authpriv—Authenticated and encrypted.
noauthnopriv—Unauthenticated and unencrypted.
auth-proto
SHA1
MD5
auth-pwd
Passphrase used to generate the key.
priv-proto
AES
DES
priv-pwd
Passphrase used to generate the key.
status
Enable/disable the user configuration.
trap-status
Enable/disable SNMP traps.
trapevent
Specify trap events:
CPU—CPU usage has exceeded 80%.
Memory—Memory (RAM) usage has exceeded 80%.
Log disk usage—Disk space usage for the log partition or disk has exceeded 90%.
System—System events.
RAID—
HA—HA events.
Remote-Storage—
trapport-local
Source (Local) port number for trap packets sent to SNMP managers in this community. The default is 162.
trapport-remote
Destination (Remote) port number for trap packets sent to SNMP managers in this community. The default is 162.
config host
ip
IP address of the SNMP manager to receive traps and be permitted to query the FortiADC system.
SNMP managers have read-only access. You can add up to 8 SNMP managers to each community.
To allow any IP address using this SNMP community name to query the FortiADC system, enter 0.0.0.0. For security best practice reasons, however, this is not recommended.
Caution: The system sends security-sensitive traps, which should be sent only over a trusted network, and only to administrative equipment.
Note: If there are no other host IP entries, entering only 0.0.0.0 effectively disables traps because there is no specific destination for trap packets. If you do not want to disable traps, you must add at least one other entry that specifies the IP address of an SNMP manager.
Example
FortiADC-VM # config system snmp user
 
FortiADC-VM (user) # edit docs
Add new entry 'docs' for node 1152
FortiADC-VM (docs) # set status enable
FortiADC-VM (docs) # end
 
FortiADC-VM # get system snmp user docs
status : enable
security-level :
query-status : disable
queryport : 161
trap-status : disable
trapport-local : 162
trapport-remote : 162
trapevent : cpu mem logdisk system raid ha remote-storage