Fortinet 100A - Manual (Page 102)

102
01-28007-0068-20041203 Fortinet Inc.
FortiGate traps System config
FortiGate traps
The FortiGate agent can send traps to SNMP managers that you have added to
SNMP communities. For SNMP managers to receive traps, you must load and
compile the Fortinet trap MIB (file name fortinet.trap.2.80.mib) onto the SNMP
manager.
All traps include the trap message as well as the FortiGate unit serial number.
Table 7: Generic FortiGate traps
Trap message Description
ColdStart
WarmStart
LinkUp
LinkDown Standard traps as described in RFC 1215.
Table 8: FortiGate system traps
Trap message Description
CPU usage high
(SysCpuHigh)
CPU usage exceeds 90%.
Disk low On a FortiGate unit with a hard drive, hard drive usage exceeds
90%.
<FortiGate_serial_no>
<interface_name>
The configuration of an interface of a FortiGate unit changes. The
trap message includes the name of the interface and the serial
number of the FortiGate unit.
HA state HA state changes. The trap message includes the previous state, the
new state and a flag indicating whether the unit is the master.
HA switch The primary unit in an HA cluster fails and is replaced with a new
primary unit.
Memory low
(SysMemLow)
Memory usage exceeds 90%.
The <interface_name>
Interface IP is changed
to <new_IP>
(Serial No.:
<FortiGate_serial_no>)
(IntfIpChange)
The IP address of an interface of a FortiGate unit changes. The trap
message includes the name of the interface, the new IP address of
the interface, and the serial number of the FortiGate unit. This trap
can be used to track interface IP address changes for interfaces
configured with dynamic IP addresses set using DHCP or PPPoE.
Table 9: FortiGate VPN traps
Trap message Description
VPN tunnel is up
(VpnTunnelUp)
An IPSec VPN tunnel starts up and begins processing network
traffic.
VPN tunnel down
(VpnTunnelDown)
An IPSec VPN tunnel shuts down.