Cacti Monitor Firewall Port Traffice

ahtshun83 · Post by **ahtshun83** » Tue Sep 15, 2009 5:07 am

hi all,

I'm using Cacti 0.8.7d ....i would like to monitor Fortinet Firewall..i want to monitor a specify port for the traffic out and in..

anyone can assist me? Can i use the default template in Cacti?

thank you

engeishi · Post by **engeishi** » Tue Sep 15, 2009 5:50 am

Let us know WHAT is your problem.
Fortinet Firewall support SNMP, so you can use built in DATA Query "SNMP - Interface Statistics" to monitor your device traffic.

ahtshun83 · Post by **ahtshun83** » Wed Sep 16, 2009 2:38 am

can the template monitor a specify port?

My fortinet gots 6 LAN ports....i just need to monitor port 1 for example..

engeishi · Post by **engeishi** » Wed Sep 16, 2009 3:35 am

YES. Just try it! To see is to believe.

ahtshun83 · Post by **ahtshun83** » Tue Sep 22, 2009 4:10 am

engeishi wrote:YES. Just try it! To see is to believe.

Hi,

I have enabled snmp on my fortinet firewall 310b..i created a new device in cacti to monitor however,i received an error "SNMP error"

I have allowed from dmz(cacti) to any interface with SNMP and ICMP services.

do i need to allow dmz to firewall IP?

pls assist!

Post by **gandalf** » Tue Sep 22, 2009 3:43 pm

Please see 2nd link of my sig for debugging. The firewall must pass cacti snmp requests, that's for sure
Reinhard

ahtshun83 · Post by **ahtshun83** » Tue Sep 22, 2009 10:00 pm

gandalf wrote:Please see 2nd link of my sig for debugging. The firewall must pass cacti snmp requests, that's for sure
Reinhard

hi reinhard,

how do i debug whether my firewall pass the snmp request?

Post by **TheWitness** » Thu Sep 24, 2009 7:35 am

From the Cacti box.

Code: Select all

snmpwalk -c <your_community> -v 1 (or 2c) <your_host> .1.3

Post output.

TheWitness

ahtshun83 · Post by **ahtshun83** » Sun Sep 27, 2009 11:03 pm

TheWitness wrote:From the Cacti box.
Code: Select all
snmpwalk -c <your_community> -v 1 (or 2c) <your_host> .1.3
Post output.

TheWitness

i got the output " Timeout: No response from <my host> .

i able to ping from my cacti to the firewall device..

pls assist.

Post by **gandalf** » Tue Sep 29, 2009 12:49 pm

Then it is very likely, that <my host> does not respond to snmp either
- because SNMP is not enabled or
- because SNMP packets are dropped
Please verify <my host>. As long as SNMP via cli fails, Cacti will fail as well
Reinhard

xminos · Post by **xminos** » Thu Oct 08, 2009 9:13 am

My advice.. return the fortinet and buy a real firewall such as a juniper

But since you've already bought it SNMP must be configured as an allowed service on that interface (and policy if you're going THROUGH the firewall first)

You also need to permit the subnet to be able to manage the device. SNMP is considered management traffic on most firewalls (vs ICMP).

If this were a netscreen I could tell you with ease how to configure this stuff.. but since its a fortinet perhaps you can take some of that $$ you saved and call their tech support

mcutting · Post by **mcutting** » Thu Oct 08, 2009 11:11 am

i hope you won't be offended, but I saw this:
http://docs.google.com/gview?a=v&q=cach ... xRCH1_kQVA

Cacti Monitor Firewall Port Traffice

Cacti Monitor Firewall Port Traffice

Who is online