diff --git a/mibs/FORTINET-FORTIGATE-MIB.mib b/mibs/FORTINET-FORTIGATE-MIB.mib index 3f2299395..bf920d77d 100644 --- a/mibs/FORTINET-FORTIGATE-MIB.mib +++ b/mibs/FORTINET-FORTIGATE-MIB.mib @@ -26,11 +26,11 @@ IMPORTS FROM SNMPv2-SMI CounterBasedGauge64 FROM HCNUM-TC - DisplayString, TEXTUAL-CONVENTION, AutonomousType + DisplayString, TEXTUAL-CONVENTION, AutonomousType, DateAndTime FROM SNMPv2-TC; fnFortiGateMib MODULE-IDENTITY - LAST-UPDATED "201101100000Z" + LAST-UPDATED "201211290000Z" ORGANIZATION "Fortinet Technologies, Inc." CONTACT-INFO @@ -38,6 +38,21 @@ fnFortiGateMib MODULE-IDENTITY Technical Support email: support@fortinet.com http://www.fortinet.com" + DESCRIPTION + "Added fgVpnTrapPhase1Name OID in VPN traps" + REVISION "201211290000Z" + DESCRIPTION + "Added OID for 64-bit sysUpTime" + REVISION "201207100000Z" + DESCRIPTION + "Added OID for a virtual domain's HA cluster member state." + REVISION "201205160000Z" + DESCRIPTION + "Added OIDs for advanced system info and NP4/NP2 processors." + REVISION "201202060000Z" + DESCRIPTION + "Added OIDs for IPv6 statistics." + REVISION "201109120000Z" DESCRIPTION "MIB module for Fortinet FortiGate devices." REVISION "201101100000Z" @@ -92,6 +107,12 @@ FgHaMode ::= TEXTUAL-CONVENTION SYNTAX INTEGER { standalone(1), activeActive(2), activePassive(3) } +FgHaState ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "enumerated type for HA cluster member state" + SYNTAX INTEGER { master(1), backup(2), standalone(3) } + FgHaLBSchedule ::= TEXTUAL-CONVENTION STATUS current DESCRIPTION @@ -150,97 +171,113 @@ FgWanOptHistPeriods ::= TEXTUAL-CONVENTION SYNTAX INTEGER { last10Min(1), lastHour(2), lastDay(3), lastMonth(4) } +FgHaStatsSyncStatusType ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "Current HA Sync status types" + SYNTAX INTEGER { Not-Synchronized(0), Synchronized(1) } + -- -- fortinet.fnFortiGateMib.fgModel -- fgModel OBJECT IDENTIFIER ::= { fnFortiGateMib 1 } -fwf20C OBJECT IDENTIFIER ::= { fgModel 210 } -fgt20C OBJECT IDENTIFIER ::= { fgModel 212 } -fgt30B OBJECT IDENTIFIER ::= { fgModel 302 } -fwf30B OBJECT IDENTIFIER ::= { fgModel 310 } -fgt40C OBJECT IDENTIFIER ::= { fgModel 410 } -fwf40C OBJECT IDENTIFIER ::= { fgModel 411 } -fgt50A OBJECT IDENTIFIER ::= { fgModel 500 } -fgt50AM OBJECT IDENTIFIER ::= { fgModel 501 } -fgt50B OBJECT IDENTIFIER ::= { fgModel 502 } -fgt51B OBJECT IDENTIFIER ::= { fgModel 504 } -fwf50B OBJECT IDENTIFIER ::= { fgModel 510 } -fgt60 OBJECT IDENTIFIER ::= { fgModel 600 } -fgt60M OBJECT IDENTIFIER ::= { fgModel 601 } -fgt60ADSL OBJECT IDENTIFIER ::= { fgModel 602 } -fgt60B OBJECT IDENTIFIER ::= { fgModel 603 } -fgt60C OBJECT IDENTIFIER ::= { fgModel 605 } -fwf60 OBJECT IDENTIFIER ::= { fgModel 610 } -fwf60A OBJECT IDENTIFIER ::= { fgModel 611 } -fwf60AM OBJECT IDENTIFIER ::= { fgModel 612 } -fwf60B OBJECT IDENTIFIER ::= { fgModel 613 } -fwf60C OBJECT IDENTIFIER ::= { fgModel 615 } -fw60CM OBJECT IDENTIFIER ::= { fgModel 616 } -fw60CA OBJECT IDENTIFIER ::= { fgModel 618 } -fw60CB OBJECT IDENTIFIER ::= { fgModel 617 } -fw6XMB OBJECT IDENTIFIER ::= { fgModel 619 } -fgt80C OBJECT IDENTIFIER ::= { fgModel 800 } -fgt80CM OBJECT IDENTIFIER ::= { fgModel 801 } -fgt82C OBJECT IDENTIFIER ::= { fgModel 802 } -fwf80CM OBJECT IDENTIFIER ::= { fgModel 810 } -fwf81CM OBJECT IDENTIFIER ::= { fgModel 811 } -fgt100 OBJECT IDENTIFIER ::= { fgModel 1000 } -fgt100A OBJECT IDENTIFIER ::= { fgModel 1001 } -fgt110C OBJECT IDENTIFIER ::= { fgModel 1002 } -fgt111C OBJECT IDENTIFIER ::= { fgModel 1003 } -fgt200 OBJECT IDENTIFIER ::= { fgModel 2000 } -fgt200A OBJECT IDENTIFIER ::= { fgModel 2001 } -fgt224B OBJECT IDENTIFIER ::= { fgModel 2002 } -fgt200B OBJECT IDENTIFIER ::= { fgModel 2003 } -fgt200BPOE OBJECT IDENTIFIER ::= { fgModel 2004 } -fgt300 OBJECT IDENTIFIER ::= { fgModel 3000 } -fgt300A OBJECT IDENTIFIER ::= { fgModel 3001 } -fgt310B OBJECT IDENTIFIER ::= { fgModel 3002 } -fgt300D OBJECT IDENTIFIER ::= { fgModel 3003 } -fgt311B OBJECT IDENTIFIER ::= { fgModel 3004 } -fgt300C OBJECT IDENTIFIER ::= { fgModel 3005 } -fgt400 OBJECT IDENTIFIER ::= { fgModel 4000 } -fgt400A OBJECT IDENTIFIER ::= { fgModel 4001 } -fgt500 OBJECT IDENTIFIER ::= { fgModel 5000 } -fgt500A OBJECT IDENTIFIER ::= { fgModel 5001 } -fgt620B OBJECT IDENTIFIER ::= { fgModel 6200 } -fgt621B OBJECT IDENTIFIER ::= { fgModel 6210 } -fgt600D OBJECT IDENTIFIER ::= { fgModel 6201 } -fgt600C OBJECT IDENTIFIER ::= { fgModel 6003 } -fgt800 OBJECT IDENTIFIER ::= { fgModel 8000 } -fgt800F OBJECT IDENTIFIER ::= { fgModel 8001 } -fgt1000 OBJECT IDENTIFIER ::= { fgModel 10000 } -fgt1000A OBJECT IDENTIFIER ::= { fgModel 10001 } -fgt1000AFA2 OBJECT IDENTIFIER ::= { fgModel 10002 } -fgt1000ALENC OBJECT IDENTIFIER ::= { fgModel 10003 } -fgt1000C OBJECT IDENTIFIER ::= { fgModel 10004 } -fgt1240B OBJECT IDENTIFIER ::= { fgModel 12400 } -fgt2000 OBJECT IDENTIFIER ::= { fgModel 20000 } -fgt3000 OBJECT IDENTIFIER ::= { fgModel 30000 } -fgt3016B OBJECT IDENTIFIER ::= { fgModel 30160 } -fgtONE OBJECT IDENTIFIER ::= { fgModel 10 } -fgtVM OBJECT IDENTIFIER ::= { fgModel 20 } -fgtVM64 OBJECT IDENTIFIER ::= { fgModel 30 } -fgt3040B OBJECT IDENTIFIER ::= { fgModel 30400 } -fgt3140B OBJECT IDENTIFIER ::= { fgModel 30401 } -fgt3600 OBJECT IDENTIFIER ::= { fgModel 36000 } -fgt3600A OBJECT IDENTIFIER ::= { fgModel 36003 } -fgt3810A OBJECT IDENTIFIER ::= { fgModel 38100 } -fgt3950B OBJECT IDENTIFIER ::= { fgModel 39500 } -fgt3951B OBJECT IDENTIFIER ::= { fgModel 39501 } -fgt4000 OBJECT IDENTIFIER ::= { fgModel 40000 } -fgt5000 OBJECT IDENTIFIER ::= { fgModel 50000 } -fgt5001 OBJECT IDENTIFIER ::= { fgModel 50010 } -fgt5001A OBJECT IDENTIFIER ::= { fgModel 50011 } -fgt5001FA2 OBJECT IDENTIFIER ::= { fgModel 50012 } -fgt5001B OBJECT IDENTIFIER ::= { fgModel 50013 } -fgt5002A OBJECT IDENTIFIER ::= { fgModel 50021 } -fgt5002FB2 OBJECT IDENTIFIER ::= { fgModel 50001 } -fgt5004 OBJECT IDENTIFIER ::= { fgModel 50040 } -fgt5005 OBJECT IDENTIFIER ::= { fgModel 50050 } -fgt5005FA2 OBJECT IDENTIFIER ::= { fgModel 50051 } +-- fgModel start + +fg20CA OBJECT IDENTIFIER ::= { fgModel 214 } +fgt100 OBJECT IDENTIFIER ::= { fgModel 1000 } +fgt1000 OBJECT IDENTIFIER ::= { fgModel 10000 } +fgt1000A OBJECT IDENTIFIER ::= { fgModel 10001 } +fgt1000AFA2 OBJECT IDENTIFIER ::= { fgModel 10002 } +fgt1000ALENC OBJECT IDENTIFIER ::= { fgModel 10003 } +fgt1000C OBJECT IDENTIFIER ::= { fgModel 10004 } +fgt100A OBJECT IDENTIFIER ::= { fgModel 1001 } +fgt100D OBJECT IDENTIFIER ::= { fgModel 1004 } +fgt110C OBJECT IDENTIFIER ::= { fgModel 1002 } +fgt111C OBJECT IDENTIFIER ::= { fgModel 1003 } +fgt1240B OBJECT IDENTIFIER ::= { fgModel 12400 } +fgt200 OBJECT IDENTIFIER ::= { fgModel 2000 } +fgt200A OBJECT IDENTIFIER ::= { fgModel 2001 } +fgt200B OBJECT IDENTIFIER ::= { fgModel 2003 } +fgt200BPOE OBJECT IDENTIFIER ::= { fgModel 2004 } +fgt20C OBJECT IDENTIFIER ::= { fgModel 212 } +fgt224B OBJECT IDENTIFIER ::= { fgModel 2002 } +fgt300 OBJECT IDENTIFIER ::= { fgModel 3000 } +fgt3000 OBJECT IDENTIFIER ::= { fgModel 30000 } +fgt300A OBJECT IDENTIFIER ::= { fgModel 3001 } +fgt300C OBJECT IDENTIFIER ::= { fgModel 3005 } +fgt300D OBJECT IDENTIFIER ::= { fgModel 3003 } +fgt3016B OBJECT IDENTIFIER ::= { fgModel 30160 } +fgt3040B OBJECT IDENTIFIER ::= { fgModel 30400 } +fgt30B OBJECT IDENTIFIER ::= { fgModel 302 } +fgt310B OBJECT IDENTIFIER ::= { fgModel 3002 } +fgt311B OBJECT IDENTIFIER ::= { fgModel 3004 } +fgt3140B OBJECT IDENTIFIER ::= { fgModel 30401 } +fgt3240C OBJECT IDENTIFIER ::= { fgModel 32401 } +fgt3600 OBJECT IDENTIFIER ::= { fgModel 36000 } +fgt3600A OBJECT IDENTIFIER ::= { fgModel 36003 } +fgt3810A OBJECT IDENTIFIER ::= { fgModel 38100 } +fgt3950B OBJECT IDENTIFIER ::= { fgModel 39500 } +fgt3951B OBJECT IDENTIFIER ::= { fgModel 39501 } +fgt400 OBJECT IDENTIFIER ::= { fgModel 4000 } +fgt400A OBJECT IDENTIFIER ::= { fgModel 4001 } +fgt40C OBJECT IDENTIFIER ::= { fgModel 410 } +fgt500 OBJECT IDENTIFIER ::= { fgModel 5000 } +fgt5001 OBJECT IDENTIFIER ::= { fgModel 50010 } +fgt5001A OBJECT IDENTIFIER ::= { fgModel 50011 } +fgt5001B OBJECT IDENTIFIER ::= { fgModel 50013 } +fgt5001C OBJECT IDENTIFIER ::= { fgModel 50014 } +fgt5001FA2 OBJECT IDENTIFIER ::= { fgModel 50012 } +fgt5002FB2 OBJECT IDENTIFIER ::= { fgModel 50001 } +fgt5005FA2 OBJECT IDENTIFIER ::= { fgModel 50051 } +fgt500A OBJECT IDENTIFIER ::= { fgModel 5001 } +fgt50A OBJECT IDENTIFIER ::= { fgModel 500 } +fgt50B OBJECT IDENTIFIER ::= { fgModel 502 } +fgt5101C OBJECT IDENTIFIER ::= { fgModel 51010 } +fgt51B OBJECT IDENTIFIER ::= { fgModel 504 } +fgt60 OBJECT IDENTIFIER ::= { fgModel 600 } +fgt600C OBJECT IDENTIFIER ::= { fgModel 6003 } +fgt600D OBJECT IDENTIFIER ::= { fgModel 6201 } +fgt60ADSL OBJECT IDENTIFIER ::= { fgModel 602 } +fgt60B OBJECT IDENTIFIER ::= { fgModel 603 } +fgt60C OBJECT IDENTIFIER ::= { fgModel 615 } +fgt60CP OBJECT IDENTIFIER ::= { fgModel 621 } +fgt60M OBJECT IDENTIFIER ::= { fgModel 601 } +fgt620B OBJECT IDENTIFIER ::= { fgModel 6200 } +fgt621B OBJECT IDENTIFIER ::= { fgModel 6210 } +fgt800 OBJECT IDENTIFIER ::= { fgModel 8000 } +fgt800C OBJECT IDENTIFIER ::= { fgModel 8003 } +fgt800F OBJECT IDENTIFIER ::= { fgModel 8001 } +fgt80C OBJECT IDENTIFIER ::= { fgModel 800 } +fgt80CM OBJECT IDENTIFIER ::= { fgModel 801 } +fgt82C OBJECT IDENTIFIER ::= { fgModel 802 } +fgtONE OBJECT IDENTIFIER ::= { fgModel 10 } +fgtVM OBJECT IDENTIFIER ::= { fgModel 20 } +fgtVM OBJECT IDENTIFIER ::= { fgModel 20 } +fgtVM OBJECT IDENTIFIER ::= { fgModel 20 } +fgtVM OBJECT IDENTIFIER ::= { fgModel 20 } +fgtVM OBJECT IDENTIFIER ::= { fgModel 20 } +fgtVM64 OBJECT IDENTIFIER ::= { fgModel 30 } +fgtVM64 OBJECT IDENTIFIER ::= { fgModel 30 } +fsw5203B OBJECT IDENTIFIER ::= { fgModel 50023 } +fw20CA OBJECT IDENTIFIER ::= { fgModel 213 } +fw60CA OBJECT IDENTIFIER ::= { fgModel 618 } +fw60CM OBJECT IDENTIFIER ::= { fgModel 617 } +fw6XMB OBJECT IDENTIFIER ::= { fgModel 619 } +fwf20C OBJECT IDENTIFIER ::= { fgModel 210 } +fwf30B OBJECT IDENTIFIER ::= { fgModel 310 } +fwf40C OBJECT IDENTIFIER ::= { fgModel 411 } +fwf50B OBJECT IDENTIFIER ::= { fgModel 510 } +fwf60 OBJECT IDENTIFIER ::= { fgModel 610 } +fwf60A OBJECT IDENTIFIER ::= { fgModel 611 } +fwf60AM OBJECT IDENTIFIER ::= { fgModel 612 } +fwf60B OBJECT IDENTIFIER ::= { fgModel 613 } +fwf60C OBJECT IDENTIFIER ::= { fgModel 616 } +fwf80CM OBJECT IDENTIFIER ::= { fgModel 810 } +fwf81CM OBJECT IDENTIFIER ::= { fgModel 811 } + +-- fgModel end -- -- fortinet.fnFortiGateMib.fgTraps @@ -322,7 +359,8 @@ fgVdEntry OBJECT-TYPE FgVdEntry ::= SEQUENCE { fgVdEntIndex FgVdIndex, fgVdEntName DisplayString, - fgVdEntOpMode FgOpMode + fgVdEntOpMode FgOpMode, + fgVdEntHaState FgHaState } fgVdEntIndex OBJECT-TYPE @@ -349,6 +387,15 @@ fgVdEntOpMode OBJECT-TYPE "Operation mode of the virtual domain (NAT or Transparent)" ::= { fgVdEntry 3 } +fgVdEntHaState OBJECT-TYPE + SYNTAX FgHaState + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "HA cluster member state of the virtual domain on this device + (master, backup or standalone)" + ::= { fgVdEntry 4 } + -- -- fortinet.fnFortiGateMib.fgVirtualDomain.fgVdTables.fgVdTpTable -- @@ -536,6 +583,59 @@ fgSysSesRate60 OBJECT-TYPE "The average session setup rate over the past 60 minutes." ::= { fgSystemInfo 14 } +fgSysSes6Count OBJECT-TYPE + SYNTAX Gauge32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of active ipv6 sessions on the device" + ::= { fgSystemInfo 15 } + +fgSysSes6Rate1 OBJECT-TYPE + SYNTAX Gauge32 + UNITS "Sessions Per Second" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The average ipv6 session setup rate over the past minute." + ::= { fgSystemInfo 16 } + +fgSysSes6Rate10 OBJECT-TYPE + SYNTAX Gauge32 + UNITS "Sessions Per Second" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The average ipv6 session setup rate over the past 10 minutes." + ::= { fgSystemInfo 17 } + +fgSysSes6Rate30 OBJECT-TYPE + SYNTAX Gauge32 + UNITS "Sessions Per Second" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The average ipv6 session setup rate over the past 30 minutes." + ::= { fgSystemInfo 18 } + +fgSysSes6Rate60 OBJECT-TYPE + SYNTAX Gauge32 + UNITS "Sessions Per Second" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The average ipv6 session setup rate over the past 60 minutes." + ::= { fgSystemInfo 19 } + +fgSysUpTime OBJECT-TYPE + SYNTAX Counter64 + UNITS "hundredths of a second" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The 64bit time (in hundredths of a second) since the network management portion of the system was last re-initialized." + ::= { fgSystemInfo 20 } + -- -- fortinet.fnFortiGateMib.fgSystem.fgSoftware -- @@ -670,7 +770,9 @@ FgProcessorEntry ::= SEQUENCE { fgProcessorContainedIn FnIndex, fgProcessorPktRxCount Counter64, fgProcessorPktTxCount Counter64, - fgProcessorPktDroppedCount Counter64 + fgProcessorPktDroppedCount Counter64, + fgProcessorUserUsage Gauge32, + fgProcessorSysUsage Gauge32 } fgProcessorEntIndex OBJECT-TYPE @@ -682,21 +784,25 @@ fgProcessorEntIndex OBJECT-TYPE ::= { fgProcessorEntry 1 } fgProcessorUsage OBJECT-TYPE - SYNTAX Gauge32 + SYNTAX Gauge32 (0..100) + UNITS "%" MAX-ACCESS read-only STATUS current DESCRIPTION "The processor's CPU usage (percentage), which is an average - calculated over the last minute." + calculated over the last minute. + (only valid for processors types that support this statistic)." ::= { fgProcessorEntry 2 } fgProcessorUsage5sec OBJECT-TYPE - SYNTAX Gauge32 + SYNTAX Gauge32 (0..100) + UNITS "%" MAX-ACCESS read-only STATUS current DESCRIPTION "The processor's CPU usage (percentage), which is an average - calculated over the last 5 sec." + calculated over the last 5 sec. + (only valid for processors types that support this statistic)." ::= { fgProcessorEntry 3 } fgProcessorType OBJECT-TYPE @@ -744,6 +850,28 @@ fgProcessorPktDroppedCount OBJECT-TYPE (only valid for processors types that support this statistic)." ::= { fgProcessorEntry 8 } +fgProcessorUserUsage OBJECT-TYPE + SYNTAX Gauge32 (0..100) + UNITS "%" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The processor's CPU user space usage, which is an average + calculated over the last minute. + (only valid for processors types that support this statistic)." + ::= { fgProcessorEntry 9 } + +fgProcessorSysUsage OBJECT-TYPE + SYNTAX Gauge32 (0..100) + UNITS "%" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The processor's CPU system space usage, which is an average + calculated over the last minute. + (only valid for processors types that support this statistic)." + ::= { fgProcessorEntry 10 } + -- -- Registrations for processor types, for use with fgProcessorType -- @@ -781,6 +909,17 @@ fgProcessorFnSoc OBJECT-IDENTITY "The processor type identifier used for Fortinet FortiSoc processor." ::= { fgProcessorTypes 5 } +fgProcessorFnNP2 OBJECT-IDENTITY + STATUS current + DESCRIPTION + "The processor type identifier used for Fortinet NP2 security processor." + ::= { fgProcessorTypes 6 } + +fgProcessorFnNP4 OBJECT-IDENTITY + STATUS current + DESCRIPTION + "The processor type identifier used for Fortinet NP4 security processor." + ::= { fgProcessorTypes 7 } -- -- fortinet.fnFortiGateMib.fgSystem.fgProcessorModules @@ -837,6 +976,61 @@ fgProcModFnXG2 OBJECT-IDENTITY Fortinet FMC module FMC-XG2." ::= { fgProcessorModuleTypes 6 } +fgProcModIntegratedNPU OBJECT-IDENTITY + STATUS current + DESCRIPTION + "The processor module type identifier used for the NPU(s) + built in the device." + ::= { fgProcessorModuleTypes 7 } + +fgProcModFnXD2 OBJECT-IDENTITY + STATUS current + DESCRIPTION + "The processor module type identifier used for + Fortinet FMC module FMC-XD2." + ::= { fgProcessorModuleTypes 8 } + +fgProcModFnF20 OBJECT-IDENTITY + STATUS current + DESCRIPTION + "The processor module type identifier used for + Fortinet FMC module FMC-F20." + ::= { fgProcessorModuleTypes 9 } + +fgProcModFnC20 OBJECT-IDENTITY + STATUS current + DESCRIPTION + "The processor module type identifier used for + Fortinet FMC module FMC-C20." + ::= { fgProcessorModuleTypes 10 } + +fgProcModFnXD4 OBJECT-IDENTITY + STATUS current + DESCRIPTION + "The processor module type identifier used for + Fortinet AMC module ADM-XD4." + ::= { fgProcessorModuleTypes 11 } + +fgProcModFnFB4 OBJECT-IDENTITY + STATUS current + DESCRIPTION + "The processor module type identifier used for + Fortinet AMC module ASM-FB4." + ::= { fgProcessorModuleTypes 12 } + +fgProcModFnFB8 OBJECT-IDENTITY + STATUS current + DESCRIPTION + "The processor module type identifier used for + Fortinet AMC module ADM-FB8." + ::= { fgProcessorModuleTypes 13 } + +fgProcModFnXB2 OBJECT-IDENTITY + STATUS current + DESCRIPTION + "The processor module type identifier used for + Fortinet AMC module ADM-XB2." + ::= { fgProcessorModuleTypes 14 } fgProcessorModuleCount OBJECT-TYPE SYNTAX Integer32 @@ -951,6 +1145,163 @@ fgProcModSACount OBJECT-TYPE (only valid for processors types that support this statistic)." ::= { fgProcessorModuleEntry 9} +-- +-- fortinet.fnFortiGateMib.fgSystem.fgSystemInfoAdvanced +-- + +fgSystemInfoAdvanced OBJECT IDENTIFIER + ::= { fgSystem 6 } + +-- +-- fortinet.fnFortiGateMib.fgSystem.fgSystemInfoAdvanced.fgSysInfoAdvMem +-- + +fgSysInfoAdvMem OBJECT IDENTIFIER + ::= { fgSystemInfoAdvanced 1 } + +fgSIAdvMemPageCache OBJECT-TYPE + SYNTAX Gauge32 + UNITS "KB" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The amount of physical RAM used as cache memory for files read from + the disk (the page cache)." + ::= { fgSysInfoAdvMem 1 } + +fgSIAdvMemCacheActive OBJECT-TYPE + SYNTAX Gauge32 + UNITS "KB" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The toal amount of buffer or page cache memory that are active. + This part of the memory is used recently and usually not reclaimed + unless absolutely necessary." + ::= { fgSysInfoAdvMem 2 } + +fgSIAdvMemCacheInactive OBJECT-TYPE + SYNTAX Gauge32 + UNITS "KB" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total amount of buffer or page cache memory that are free and + available. This is memory that has not been recently used and can be + reclaimed for other purposes by the paging algorithm." + ::= { fgSysInfoAdvMem 3 } + +fgSIAdvMemBuffer OBJECT-TYPE + SYNTAX Gauge32 + UNITS "KB" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The amount of physical RAM used for filesystem buffers." + ::= { fgSysInfoAdvMem 4 } + +fgSIAdvMemEnterKerConsThrsh OBJECT-TYPE + SYNTAX Gauge32 + UNITS "KB" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Current memory threshold level to enter kernel conserve mode." + ::= { fgSysInfoAdvMem 5 } + +fgSIAdvMemLeaveKerConsThrsh OBJECT-TYPE + SYNTAX Gauge32 + UNITS "KB" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Current memory threshold level to leave kernel conserve mode." + ::= { fgSysInfoAdvMem 6 } + +fgSIAdvMemEnterProxyConsThrsh OBJECT-TYPE + SYNTAX Gauge32 + UNITS "KB" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Current memory threshold level to enter proxy conserve mode." + ::= { fgSysInfoAdvMem 7 } + +fgSIAdvMemLeaveProxyConsThrsh OBJECT-TYPE + SYNTAX Gauge32 + UNITS "KB" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Current memory threshold level to leave proxy conserve mode." + ::= { fgSysInfoAdvMem 8 } + +-- +-- fortinet.fnFortiGateMib.fgSystem.fgSystemInfoAdvanced.fgSysInfoAdvSessions +-- + +fgSysInfoAdvSessions OBJECT IDENTIFIER + ::= { fgSystemInfoAdvanced 2 } + +fgSIAdvSesEphemeralCount OBJECT-TYPE + SYNTAX Gauge32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The current number of ephemeral sessions on the device." + ::= { fgSysInfoAdvSessions 1 } + +fgSIAdvSesEphemeralLimit OBJECT-TYPE + SYNTAX Gauge32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The limit number of allowed ephemeral sessions on the device." + ::= { fgSysInfoAdvSessions 2 } + +fgSIAdvSesClashCount OBJECT-TYPE + SYNTAX Gauge32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of new sessions which have collision with existing sessions. + This generally highlights a shortage of ports or IP in ip-pool during + source natting (PNAT)." + ::= { fgSysInfoAdvSessions 3 } + +fgSIAdvSesExpCount OBJECT-TYPE + SYNTAX Gauge32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of current expectation sessions." + ::= { fgSysInfoAdvSessions 4 } + +fgSIAdvSesSyncQFCount OBJECT-TYPE + SYNTAX Gauge32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The sync queue full counter, reflecting bursts on the sync queue." + ::= { fgSysInfoAdvSessions 5 } + +fgSIAdvSesAcceptQFCount OBJECT-TYPE + SYNTAX Gauge32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The accept queue full counter, reflecting bursts on the accept queue." + ::= { fgSysInfoAdvSessions 6 } + +fgSIAdvSesNoListenerCount OBJECT-TYPE + SYNTAX Gauge32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of direct requests to Fortigate local stack from external, + reflecting DOS attack towards the Fortigate." + ::= { fgSysInfoAdvSessions 7 } + -- -- fortinet.fnFortiGateMib.fgFirewall -- @@ -971,6 +1322,10 @@ fgFwPolInfo OBJECT IDENTIFIER fgFwPolTables OBJECT IDENTIFIER ::= { fgFwPolicies 2 } +-- +-- fortinet.fnFortiGateMib.fgFirewall.fgFwPolicies.fgFwPolTables.fgFwPolStatsTable +-- + fgFwPolStatsTable OBJECT-TYPE SYNTAX SEQUENCE OF FgFwPolStatsEntry MAX-ACCESS not-accessible @@ -1019,6 +1374,61 @@ fgFwPolByteCount OBJECT-TYPE "Number of bytes in packets matching the policy. See fgFwPolPktCount." ::= { fgFwPolStatsEntry 3 } +-- +-- fortinet.fnFortiGateMib.fgFirewall.fgFwPolicies.fgFwPolTables.fgFwPol6StatsTable +-- + +fgFwPol6StatsTable OBJECT-TYPE + SYNTAX SEQUENCE OF FgFwPol6StatsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Firewall policy6 statistics table. This table has a dependent + expansion relationship with fgVdTable. + Only virtual domains with enabled policies are present in this table." + ::= { fgFwPolTables 2 } + +fgFwPol6StatsEntry OBJECT-TYPE + SYNTAX FgFwPol6StatsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Firewall policy6 statistics on a virtual domain" + INDEX { fgVdEntIndex, fgFwPol6ID } + ::= { fgFwPol6StatsTable 1 } + +FgFwPol6StatsEntry ::= SEQUENCE { + fgFwPol6ID FnIndex, + fgFwPol6PktCount Counter64, + fgFwPol6ByteCount Counter64 +} + +fgFwPol6ID OBJECT-TYPE + SYNTAX FnIndex + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Firewall policy6 ID. Only enabled policies are present in this table. + Policy IDs are only unique within a virtual domain." + ::= { fgFwPol6StatsEntry 1 } + +fgFwPol6PktCount OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of packets matched to policy (passed or blocked, depending + on policy action). Count is from the time the policy became active." + ::= { fgFwPol6StatsEntry 2 } + +fgFwPol6ByteCount OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Number of bytes in packets matching the policy. See fgFwPol6PktCount." + ::= { fgFwPol6StatsEntry 3 } + -- -- fortinet.fnFortiGateMib.fgFirewall.fgFwUsers -- @@ -3642,6 +4052,40 @@ fgIpSessNumber OBJECT-TYPE "Current number of sessions on the virtual domain" ::= { fgIpSessStatsEntry 1 } +-- +-- fortinet.fnFortiGateMib.fgInetProto.fgInetProtoTables.fgIp6SessStatsTable +-- + +fgIp6SessStatsTable OBJECT-TYPE + SYNTAX SEQUENCE OF FgIp6SessStatsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "IP session statistics table" + ::= { fgInetProtoTables 3 } + +fgIp6SessStatsEntry OBJECT-TYPE + SYNTAX FgIp6SessStatsEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "IP session statistics on a virtual domain" + AUGMENTS { fgVdEntry } + ::= { fgIp6SessStatsTable 1 } + +FgIp6SessStatsEntry ::= SEQUENCE { + fgIp6SessNumber Counter32 +} + +fgIp6SessNumber OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Current number of sessions on the virtual domain" + ::= { fgIp6SessStatsEntry 1 } + + -- -- fortinet.fnFortiGateMib.fgVpn -- @@ -4212,6 +4656,15 @@ fgVpnTrapRemoteGateway OBJECT-TYPE "Remote gateway IP address. Used in VPN related traps." ::= { fgVpnTrapObjects 3 } +fgVpnTrapPhase1Name OBJECT-TYPE + SYNTAX DisplayString + MAX-ACCESS accessible-for-notify + STATUS current + DESCRIPTION + "Name of the phase 1. Used in VPN related traps." + ::= { fgVpnTrapObjects 4 } + + -- -- fortinet.fnFortiGateMib.fgHighAvailability -- @@ -4318,7 +4771,12 @@ FgHaStatsEntry ::= SEQUENCE { fgHaStatsByteCount Counter32, fgHaStatsIdsCount Counter32, fgHaStatsAvCount Counter32, - fgHaStatsHostname DisplayString + fgHaStatsHostname DisplayString, + fgHaStatsSyncStatus FgHaStatsSyncStatusType, + fgHaStatsSyncDatimeSucc DateAndTime, + fgHaStatsSyncDatimeUnsucc DateAndTime, + fgHaStatsGlobalChecksum DisplayString, + fgHaStatsMasterSerial DisplayString } fgHaStatsIndex OBJECT-TYPE @@ -4410,6 +4868,46 @@ fgHaStatsHostname OBJECT-TYPE "Host name of the specified cluster member" ::= { fgHaStatsEntry 11 } +fgHaStatsSyncStatus OBJECT-TYPE + SYNTAX FgHaStatsSyncStatusType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Current HA Sync status" + ::= { fgHaStatsEntry 12 } + +fgHaStatsSyncDatimeSucc OBJECT-TYPE + SYNTAX DateAndTime + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Date and time of last successful sync" + ::= { fgHaStatsEntry 13 } + +fgHaStatsSyncDatimeUnsucc OBJECT-TYPE + SYNTAX DateAndTime + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Date and time of last unsuccessful sync" + ::= { fgHaStatsEntry 14 } + +fgHaStatsGlobalChecksum OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..32)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Current HA global checksum value" + ::= { fgHaStatsEntry 15 } + +fgHaStatsMasterSerial OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..32)) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "Serial number of master during the last synch attempt (successful of not)" + ::= { fgHaStatsEntry 16 } + -- -- fortinet.fnFortiGateMib.fgHighAvailability.fgHaTrapObjects -- @@ -4425,6 +4923,82 @@ fgHaTrapMemberSerial OBJECT-TYPE "Serial number of an HA cluster member. Used to identify the origin of a trap when a cluster is configured." ::= { fgHaTrapObjects 1 } +-- +-- fortinet.fnFortiGateMib.fgWc +-- + +fgWc OBJECT IDENTIFIER + ::= { fnFortiGateMib 14 } + +-- +-- fortinet.fnFortiGateMib.fgWc.fgWcTrapObjects +-- + +fgWcTrapObjects OBJECT IDENTIFIER + ::= { fgWc 1 } + +fgWcApVdom OBJECT-TYPE + SYNTAX FgVdIndex + MAX-ACCESS accessible-for-notify + STATUS current + DESCRIPTION + "Virtual domain the wtp is part of" + ::= { fgWcTrapObjects 1 } + +fgWcApSerial OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..32)) + MAX-ACCESS accessible-for-notify + STATUS current + DESCRIPTION + "Serial number of the wtp" + ::= { fgWcTrapObjects 2 } + +fgWcApName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..32)) + MAX-ACCESS accessible-for-notify + STATUS current + DESCRIPTION + "Name of the wtp" + ::= { fgWcTrapObjects 3 } + +-- +-- fortinet.fnFortiGateMib.fgFc +-- + +fgFc OBJECT IDENTIFIER + ::= { fnFortiGateMib 15 } + +-- +-- fortinet.fnFortiGateMib.fgFc.fgFcTrapObjects +-- + +fgFcTrapObjects OBJECT IDENTIFIER + ::= { fgFc 1 } + +fgFcSwVdom OBJECT-TYPE + SYNTAX FgVdIndex + MAX-ACCESS accessible-for-notify + STATUS current + DESCRIPTION + "Virtual domain the switch is part of" + ::= { fgFcTrapObjects 1 } + +fgFcSwSerial OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..32)) + MAX-ACCESS accessible-for-notify + STATUS current + DESCRIPTION + "Serial number of the switch" + ::= { fgFcTrapObjects 2 } + +fgFcSwName OBJECT-TYPE + SYNTAX DisplayString (SIZE(0..32)) + MAX-ACCESS accessible-for-notify + STATUS current + DESCRIPTION + "Name of the switch" + ::= { fgFcTrapObjects 3 } + -- -- fortinet.fnFortiGateMib.fgMibConformance -- @@ -4438,7 +5012,7 @@ fgMibConformance OBJECT IDENTIFIER fgTrapVpnTunUp NOTIFICATION-TYPE OBJECTS { fnSysSerial, sysName, fgVpnTrapLocalGateway, - fgVpnTrapRemoteGateway } + fgVpnTrapRemoteGateway, fgVpnTrapPhase1Name } STATUS current DESCRIPTION "Indicates that the specified VPN tunnel has been brought up." @@ -4446,7 +5020,7 @@ fgTrapVpnTunUp NOTIFICATION-TYPE fgTrapVpnTunDown NOTIFICATION-TYPE OBJECTS { fnSysSerial, sysName, fgVpnTrapLocalGateway, - fgVpnTrapRemoteGateway } + fgVpnTrapRemoteGateway, fgVpnTrapPhase1Name } STATUS current DESCRIPTION "The specified VPN tunnel has been brought down." @@ -4573,6 +5147,34 @@ fgTrapFazDisconnect NOTIFICATION-TYPE DESCRIPTION "The device has been disconnected from the FortiAnalyzer." ::= { fgTrapPrefix 701 } + +fgTrapWcApUp NOTIFICATION-TYPE + OBJECTS { fnSysSerial, sysName, fgWcApVdom, fgWcApSerial, fgWcApName } + STATUS current + DESCRIPTION + "Indicates that the specified AP is up." + ::= { fgTrapPrefix 801 } + +fgTrapWcApDown NOTIFICATION-TYPE + OBJECTS { fnSysSerial, sysName, fgWcApVdom, fgWcApSerial, fgWcApName } + STATUS current + DESCRIPTION + "Indicates that the specified AP is down." + ::= { fgTrapPrefix 802 } + +fgTrapFcSwUp NOTIFICATION-TYPE + OBJECTS { fnSysSerial, sysName, fgFcSwVdom, fgFcSwSerial, fgFcSwName } + STATUS current + DESCRIPTION + "Indicates that the specified switch controller session is up." + ::= { fgTrapPrefix 901 } + +fgTrapFcSwDown NOTIFICATION-TYPE + OBJECTS { fnSysSerial, sysName, fgFcSwVdom, fgFcSwSerial, fgFcSwName } + STATUS current + DESCRIPTION + "Indicates that the specified switch controller session is down." + ::= { fgTrapPrefix 902 } fgFmTrapDeployComplete NOTIFICATION-TYPE OBJECTS { fnSysSerial } @@ -4635,7 +5237,10 @@ fgSystemObjectGroup OBJECT-GROUP fgSysSesCount, fgSysLowMemUsage, fgSysLowMemCapacity, fgSysSesRate1, fgSysSesRate10, fgSysSesRate30, - fgSysSesRate60 } + fgSysSesRate60, + fgSysSes6Count, fgSysSes6Rate1, + fgSysSes6Rate10, fgSysSes6Rate30, + fgSysSes6Rate60, fgSysUpTime } STATUS current DESCRIPTION "Objects pertaining to the system status of the device." @@ -4663,6 +5268,8 @@ fgHighAvailabilityObjectGroup OBJECT-GROUP fgHaStatsNetUsage, fgHaStatsSesCount, fgHaStatsPktCount, fgHaStatsByteCount, fgHaStatsIdsCount, fgHaStatsAvCount, fgHaStatsHostname, + fgHaStatsSyncStatus, fgHaStatsSyncDatimeSucc, fgHaStatsSyncDatimeUnsucc, + fgHaStatsGlobalChecksum, fgHaStatsMasterSerial, fgHaTrapMemberSerial } STATUS current DESCRIPTION @@ -4707,7 +5314,8 @@ fgFirewallObjectGroup OBJECT-GROUP fgFwUserState, fgFwUserVdom, fgIpSessProto, fgIpSessFromAddr, fgIpSessFromPort, fgIpSessToAddr, fgIpSessToPort, fgIpSessExp, fgIpSessVdom, - fgIpSessNumber } + fgIpSessNumber, fgIp6SessNumber, fgFwPol6PktCount, + fgFwPol6ByteCount } STATUS current DESCRIPTION "Objects pertaining to Firewall functionality on FortiGate devices." @@ -4783,7 +5391,7 @@ fgWebFilterObjectGroup OBJECT-GROUP fgVirtualDomainObjectGroup OBJECT-GROUP OBJECTS { fgVdNumber, fgVdMaxVdoms, fgVdEnabled, fgVdEntName, fgVdEntOpMode, fgVdTpMgmtAddrType, fgVdTpMgmtAddr, - fgVdTpMgmtMask } + fgVdTpMgmtMask, fgVdEntHaState } STATUS current DESCRIPTION "Objects pertaining to Virtual Firewall Domain services on FortiGate devices." @@ -4807,6 +5415,7 @@ fgProcessorsObjectGroup OBJECT-GROUP OBJECTS { fgProcessorCount, fgProcessorUsage, fgProcessorUsage5sec, fgProcessorType, fgProcessorContainedIn, fgProcessorPktRxCount, fgProcessorPktTxCount, fgProcessorPktDroppedCount, + fgProcessorUserUsage, fgProcessorSysUsage, fgProcessorModuleCount, fgProcModType, fgProcModName, fgProcModDescr, fgProcModProcessorCount, fgProcModMemCapacity, fgProcModMemUsage, @@ -4824,7 +5433,8 @@ fgNotificationGroup NOTIFICATION-GROUP fgTrapAvPattern, fgTrapAvFragmented, fgTrapAvEnterConserve, fgTrapAvBypass, fgTrapAvOversizePass, fgTrapAvOversizeBlock, - fgTrapFazDisconnect } + fgTrapFazDisconnect, fgTrapWcApUp, fgTrapWcApDown, + fgTrapFcSwUp, fgTrapFcSwDown } STATUS current DESCRIPTION "Notifications that can be generated from a FortiGate device." @@ -4891,6 +5501,36 @@ fgObsoleteAppServicesObjectGroup OBJECT-GROUP "Objects that have been deprecated, but may still be generated by older models." ::= { fgMibConformance 23 } +fgSystemAdvancedObjectGroup OBJECT-GROUP + OBJECTS { fgSIAdvMemPageCache, fgSIAdvMemCacheActive, + fgSIAdvMemCacheInactive, fgSIAdvMemBuffer, + fgSIAdvMemEnterKerConsThrsh, + fgSIAdvMemLeaveKerConsThrsh, + fgSIAdvMemEnterProxyConsThrsh, + fgSIAdvMemLeaveProxyConsThrsh, + fgSIAdvSesEphemeralCount, fgSIAdvSesEphemeralLimit, + fgSIAdvSesClashCount, fgSIAdvSesExpCount, + fgSIAdvSesSyncQFCount, fgSIAdvSesAcceptQFCount, + fgSIAdvSesNoListenerCount } + STATUS current + DESCRIPTION + "Objects pertaining to the system advanced status of the device." + ::= { fgMibConformance 24 } + +fgWcObjectGroup OBJECT-GROUP + OBJECTS { fgWcApVdom, fgWcApSerial, fgWcApName } + STATUS current + DESCRIPTION + "Objects pertaining to wireless controller." + ::= { fgMibConformance 25 } + +fgFcObjectGroup OBJECT-GROUP + OBJECTS { fgFcSwVdom, fgFcSwSerial, fgFcSwName } + STATUS current + DESCRIPTION + "Objects pertaining to switch controller." + ::= { fgMibConformance 26 } + fgMIBCompliance MODULE-COMPLIANCE STATUS current DESCRIPTION @@ -4983,6 +5623,18 @@ fgMIBCompliance MODULE-COMPLIANCE DESCRIPTION "Model and feature specific." + GROUP fgSystemAdvancedObjectGroup + DESCRIPTION + "Model and feature specific." + + GROUP fgWcObjectGroup + DESCRIPTION + "Model and feature specific." + + GROUP fgFcObjectGroup + DESCRIPTION + "Model and feature specific." + ::= { fgMibConformance 100 } fg300MibCompliance MODULE-COMPLIANCE