Fortinet white logo
Fortinet white logo

Administration Guide

Using SNMP to monitor health check

Using SNMP to monitor health check

You can monitor SD-WAN health check related statistics using SNMP. The MIB file can be downloaded by going to System > SNMP and clicking Download FortiGate MIB File.

The following OIDs can be monitored:

Name

OID

Description

fgVWLHealthCheckLinkNumber

.1.3.6.1.4.1.12356.101.4.9.1

The number of health check links in fgVWLHealthCheckLinkTable

fgVWLHealthCheckLinkTable

.1.3.6.1.4.1.12356.101.4.9.2

SD-WAN health check statistics table.

This table has a dependent expansion relationship with fgVdTable.Only health checks with a configured member link are present in this table.

fgVWLHealthCheckLinkTableEntry

.1.3.6.1.4.1.12356.101.4.9.2.1

SD-WAN health check statistics on a virtual domain.

fgVWLHealthCheckLinkID

.1.3.6.1.4.1.12356.101.4.9.2.1.1

SD-WAN health check link ID.

Only health checks with configured member link are present in this table. Virtual‑wan‑link health check link IDs are only unique within a virtual domain.

fgVWLHealthCheckLinkName

.1.3.6.1.4.1.12356.101.4.9.2.1.2

Health check name.

fgVWLHealthCheckLinkSeq

.1.3.6.1.4.1.12356.101.4.9.2.1.3

SD-WAN member link sequence.

fgVWLHealthCheckLinkState

.1.3.6.1.4.1.12356.101.4.9.2.1.4

Health check state on a specific member link.

fgVWLHealthCheckLinkLatency

.1.3.6.1.4.1.12356.101.4.9.2.1.5

The average latency of a health check on a specific member link within last 30 probes, in float number.

fgVWLHealthCheckLinkJitter

.1.3.6.1.4.1.12356.101.4.9.2.1.6

The average jitter of a health check on a specific member link within last 30 probes, in float number.

fgVWLHealthCheckLinkPacketSend

.1.3.6.1.4.1.12356.101.4.9.2.1.7

The total number of packets sent by a health check on a specific member link.

fgVWLHealthCheckLinkPacketRecv

.1.3.6.1.4.1.12356.101.4.9.2.1.8

The total number of packets received by a health check on a specific member link.

fgVWLHealthCheckLinkPacketLoss

.1.3.6.1.4.1.12356.101.4.9.2.1.9

The packet loss percentage of a health check on a specific member link within last 30 probes, in float number.

fgVWLHealthCheckLinkVdom

.1.3.6.1.4.1.12356.101.4.9.2.1.10

The VDOM that the link monitor entry exists in.

This name corresponds to the fgVdEntName used in fgVdTable.

fgVWLHealthCheckLinkBandwidthIn

.1.3.6.1.4.1.12356.101.4.9.2.1.11

The available bandwidth of incoming traffic detected by a health check on a specific member link, in Mbps,

fgVWLHealthCheckLinkBandwidthOut

.1.3.6.1.4.1.12356.101.4.9.2.1.12

The available bandwidth of outgoing traffic detected by a health check on a specific member link, in Mbps.

fgVWLHealthCheckLinkBandwidthBi

.1.3.6.1.4.1.12356.101.4.9.2.1.13

The available bandwidth of bi-direction traffic detected by a health check on a specific member link, in Mbps.

fgVWLHealthCheckLinkIfName

.1.3.6.1.4.1.12356.101.4.9.2.1.14

SD-WAN member interface name.

Example

This example shows a SD-WAN health check configuration and its collected statistics.

To configure the SD-WAN health check:
config system sdwan
    set status enable
    config zone
        edit "virtual-wan-link"
        next
    end
    config members
        edit 1
            set interface "port1"
            set gateway 192.168.2.1
        next
        edit 2
            set interface "MPLS"
            set zone "SD-Zone2"
            set cost 20
        next
        edit 3
            set interface "port2"
        next
    end
    config health-check
        edit "pingserver"
            set server "8.8.8.8"
            set sla-fail-log-period 10
            set sla-pass-log-period 20
            set members 2 1 3
            config sla
                edit 1
                    set link-cost-factor jitter packet-loss
                    set packetloss-threshold 2
                next
            end
        next
    end
end
The collected statistics:

fgVWLHealthCheckLinkID

.1.3.6.1.4.1.12356.101.4.9.2.1.1

1

2

3

fgVWLHealthCheckLinkName

.1.3.6.1.4.1.12356.101.4.9.2.1.2

pingserver

pingserver

pingserver

fgVWLHealthCheckLinkSeq

.1.3.6.1.4.1.12356.101.4.9.2.1.3

2

1

3

fgVWLHealthCheckLinkState

.1.3.6.1.4.1.12356.101.4.9.2.1.4

0

0

0

fgVWLHealthCheckLinkLatency

.1.3.6.1.4.1.12356.101.4.9.2.1.5

39.302

43.124

44.348

fgVWLHealthCheckLinkJitter

.1.3.6.1.4.1.12356.101.4.9.2.1.6

4.346

3.951

5.05

fgVWLHealthCheckLinkPacketSend

.1.3.6.1.4.1.12356.101.4.9.2.1.7

3657689

3657689

3657689

fgVWLHealthCheckLinkPacketRecv

.1.3.6.1.4.1.12356.101.4.9.2.1.8

3196258

3220258

3219466

fgVWLHealthCheckLinkPacketLoss

.1.3.6.1.4.1.12356.101.4.9.2.1.9

0

0

0

fgVWLHealthCheckLinkVdom

.1.3.6.1.4.1.12356.101.4.9.2.1.10

root

root

root

fgVWLHealthCheckLinkBandwidthIn

.1.3.6.1.4.1.12356.101.4.9.2.1.11

9999963

9999937

9999999

fgVWLHealthCheckLinkBandwidthOut

.1.3.6.1.4.1.12356.101.4.9.2.1.12

9999981

9999953

9999998

fgVWLHealthCheckLinkBandwidthBi

.1.3.6.1.4.1.12356.101.4.9.2.1.13

19999944

19999890

19999997

fgVWLHealthCheckLinkIfName

.1.3.6.1.4.1.12356.101.4.9.2.1.14

MPLS

port1

port2

Using SNMP to monitor health check

Using SNMP to monitor health check

You can monitor SD-WAN health check related statistics using SNMP. The MIB file can be downloaded by going to System > SNMP and clicking Download FortiGate MIB File.

The following OIDs can be monitored:

Name

OID

Description

fgVWLHealthCheckLinkNumber

.1.3.6.1.4.1.12356.101.4.9.1

The number of health check links in fgVWLHealthCheckLinkTable

fgVWLHealthCheckLinkTable

.1.3.6.1.4.1.12356.101.4.9.2

SD-WAN health check statistics table.

This table has a dependent expansion relationship with fgVdTable.Only health checks with a configured member link are present in this table.

fgVWLHealthCheckLinkTableEntry

.1.3.6.1.4.1.12356.101.4.9.2.1

SD-WAN health check statistics on a virtual domain.

fgVWLHealthCheckLinkID

.1.3.6.1.4.1.12356.101.4.9.2.1.1

SD-WAN health check link ID.

Only health checks with configured member link are present in this table. Virtual‑wan‑link health check link IDs are only unique within a virtual domain.

fgVWLHealthCheckLinkName

.1.3.6.1.4.1.12356.101.4.9.2.1.2

Health check name.

fgVWLHealthCheckLinkSeq

.1.3.6.1.4.1.12356.101.4.9.2.1.3

SD-WAN member link sequence.

fgVWLHealthCheckLinkState

.1.3.6.1.4.1.12356.101.4.9.2.1.4

Health check state on a specific member link.

fgVWLHealthCheckLinkLatency

.1.3.6.1.4.1.12356.101.4.9.2.1.5

The average latency of a health check on a specific member link within last 30 probes, in float number.

fgVWLHealthCheckLinkJitter

.1.3.6.1.4.1.12356.101.4.9.2.1.6

The average jitter of a health check on a specific member link within last 30 probes, in float number.

fgVWLHealthCheckLinkPacketSend

.1.3.6.1.4.1.12356.101.4.9.2.1.7

The total number of packets sent by a health check on a specific member link.

fgVWLHealthCheckLinkPacketRecv

.1.3.6.1.4.1.12356.101.4.9.2.1.8

The total number of packets received by a health check on a specific member link.

fgVWLHealthCheckLinkPacketLoss

.1.3.6.1.4.1.12356.101.4.9.2.1.9

The packet loss percentage of a health check on a specific member link within last 30 probes, in float number.

fgVWLHealthCheckLinkVdom

.1.3.6.1.4.1.12356.101.4.9.2.1.10

The VDOM that the link monitor entry exists in.

This name corresponds to the fgVdEntName used in fgVdTable.

fgVWLHealthCheckLinkBandwidthIn

.1.3.6.1.4.1.12356.101.4.9.2.1.11

The available bandwidth of incoming traffic detected by a health check on a specific member link, in Mbps,

fgVWLHealthCheckLinkBandwidthOut

.1.3.6.1.4.1.12356.101.4.9.2.1.12

The available bandwidth of outgoing traffic detected by a health check on a specific member link, in Mbps.

fgVWLHealthCheckLinkBandwidthBi

.1.3.6.1.4.1.12356.101.4.9.2.1.13

The available bandwidth of bi-direction traffic detected by a health check on a specific member link, in Mbps.

fgVWLHealthCheckLinkIfName

.1.3.6.1.4.1.12356.101.4.9.2.1.14

SD-WAN member interface name.

Example

This example shows a SD-WAN health check configuration and its collected statistics.

To configure the SD-WAN health check:
config system sdwan
    set status enable
    config zone
        edit "virtual-wan-link"
        next
    end
    config members
        edit 1
            set interface "port1"
            set gateway 192.168.2.1
        next
        edit 2
            set interface "MPLS"
            set zone "SD-Zone2"
            set cost 20
        next
        edit 3
            set interface "port2"
        next
    end
    config health-check
        edit "pingserver"
            set server "8.8.8.8"
            set sla-fail-log-period 10
            set sla-pass-log-period 20
            set members 2 1 3
            config sla
                edit 1
                    set link-cost-factor jitter packet-loss
                    set packetloss-threshold 2
                next
            end
        next
    end
end
The collected statistics:

fgVWLHealthCheckLinkID

.1.3.6.1.4.1.12356.101.4.9.2.1.1

1

2

3

fgVWLHealthCheckLinkName

.1.3.6.1.4.1.12356.101.4.9.2.1.2

pingserver

pingserver

pingserver

fgVWLHealthCheckLinkSeq

.1.3.6.1.4.1.12356.101.4.9.2.1.3

2

1

3

fgVWLHealthCheckLinkState

.1.3.6.1.4.1.12356.101.4.9.2.1.4

0

0

0

fgVWLHealthCheckLinkLatency

.1.3.6.1.4.1.12356.101.4.9.2.1.5

39.302

43.124

44.348

fgVWLHealthCheckLinkJitter

.1.3.6.1.4.1.12356.101.4.9.2.1.6

4.346

3.951

5.05

fgVWLHealthCheckLinkPacketSend

.1.3.6.1.4.1.12356.101.4.9.2.1.7

3657689

3657689

3657689

fgVWLHealthCheckLinkPacketRecv

.1.3.6.1.4.1.12356.101.4.9.2.1.8

3196258

3220258

3219466

fgVWLHealthCheckLinkPacketLoss

.1.3.6.1.4.1.12356.101.4.9.2.1.9

0

0

0

fgVWLHealthCheckLinkVdom

.1.3.6.1.4.1.12356.101.4.9.2.1.10

root

root

root

fgVWLHealthCheckLinkBandwidthIn

.1.3.6.1.4.1.12356.101.4.9.2.1.11

9999963

9999937

9999999

fgVWLHealthCheckLinkBandwidthOut

.1.3.6.1.4.1.12356.101.4.9.2.1.12

9999981

9999953

9999998

fgVWLHealthCheckLinkBandwidthBi

.1.3.6.1.4.1.12356.101.4.9.2.1.13

19999944

19999890

19999997

fgVWLHealthCheckLinkIfName

.1.3.6.1.4.1.12356.101.4.9.2.1.14

MPLS

port1

port2