Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    Home FortiProxy 2.0.13 CLI Reference
    2.0.13
    7.6.0
    7.4.6
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.12
    7.2.11
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.0.19
    7.0.18
    7.0.17
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    2.0.13
    2.0.12
    2.0.0
    1.2.4

    config system snmp user

    config system snmp user

    SNMP user configuration.

    config system snmp user
    Description: SNMP user configuration.
    edit <name>
        set status [enable|disable]
        set trap-status [enable|disable]
        set trap-lport {integer}
        set trap-rport {integer}
        set queries [enable|disable]
        set query-port {integer}
        set notify-hosts {ipv4-address}
        set notify-hosts6 {ipv6-address}
        set source-ip {ipv4-address}
        set source-ipv6 {ipv6-address}
        set ha-direct [enable|disable]
        set events [cpu-high|mem-low|...]
        set security-level [no-auth-no-priv|auth-no-priv|...]
        set auth-proto [md5|sha]
        set auth-pwd {password}
        set priv-proto [aes|des|...]
        set priv-pwd {password}
    next
end

    config system snmp user

    Parameter

    Description

    Type

    Size

    name

    SNMP user name.

    string

    Maximum length: 32

    status

    Enable/disable this SNMP user.

    option

    -

    Option

    Description

    enable

    Enable setting.

    disable

    Disable setting.

    trap-status

    Enable/disable traps for this SNMP user.

    option

    -

    Option

    Description

    enable

    Enable setting.

    disable

    Disable setting.

    trap-lport

    SNMPv3 local trap port.

    integer

    Minimum value: 0 Maximum value: 65535

    trap-rport

    SNMPv3 trap remote port.

    integer

    Minimum value: 0 Maximum value: 65535

    queries

    Enable/disable SNMP queries for this user.

    option

    -

    Option

    Description

    enable

    Enable setting.

    disable

    Disable setting.

    query-port

    SNMPv3 query port.

    integer

    Minimum value: 0 Maximum value: 65535

    notify-hosts

    SNMP managers to send notifications (traps) to.

    ipv4-address

    Not Specified

    notify-hosts6

    IPv6 SNMP managers to send notifications (traps) to.

    ipv6-address

    Not Specified

    source-ip

    Source IP for SNMP trap.

    ipv4-address

    Not Specified

    source-ipv6

    Source IPv6 for SNMP trap.

    ipv6-address

    Not Specified

    ha-direct

    Enable/disable direct management of HA cluster members.

    option

    -

    Option

    Description

    enable

    Enable setting.

    disable

    Disable setting.

    events

    SNMP notifications (traps) to send.

    option

    -

    Option

    Description

    cpu-high

    Send a trap when CPU usage is high.

    mem-low

    Send a trap when available memory is low.

    log-full

    Send a trap when log disk space becomes low.

    intf-ip

    Send a trap when an interface IP address is changed.

    vpn-tun-up

    Send a trap when a VPN tunnel comes up.

    vpn-tun-down

    Send a trap when a VPN tunnel goes down.

    ha-switch

    Send a trap after an HA failover when the backup unit has taken over.

    ha-hb-failure

    Send a trap when HA heartbeats are not received.

    ips-signature

    Send a trap when IPS detects an attack.

    ips-anomaly

    Send a trap when IPS finds an anomaly.

    av-virus

    Send a trap when AntiVirus finds a virus.

    av-oversize

    Send a trap when AntiVirus finds an oversized file.

    av-pattern

    Send a trap when AntiVirus finds file matching pattern.

    av-fragmented

    Send a trap when AntiVirus finds a fragmented file.

    fm-if-change

    Send a trap when FortiManager interface changes. Send a FortiManager trap.

    fm-conf-change

    Send a trap when a configuration change is made by a FortiProxy administrator and the FortiProxy is managed by FortiManager.

    ha-member-up

    Send a trap when an HA cluster member goes up.

    ha-member-down

    Send a trap when an HA cluster member goes down.

    ent-conf-change

    Send a trap when an entity MIB change occurs (RFC4133).

    av-conserve

    Send a trap when the FortiProxy enters conserve mode.

    av-bypass

    Send a trap when the FortiProxy enters bypass mode.

    av-oversize-passed

    Send a trap when AntiVirus passes an oversized file.

    av-oversize-blocked

    Send a trap when AntiVirus blocks an oversized file.

    ips-pkg-update

    Send a trap when the IPS signature database or engine is updated.

    ips-fail-open

    Send a trap when the IPS network buffer is full.

    faz-disconnect

    Send a trap when a FortiAnalyzer disconnects from the FortiProxy.

    load-balance-real-server-down

    Send a trap when a server load balance real server goes down.

    device-new

    Send a trap when a new device is found.

    per-cpu-high

    Send a trap when per-CPU usage is high.

    disk-failure

    A disk has encountered a failure.

    disk-overload

    Cache storage is overloaded.

    security-level

    Security level for message authentication and encryption.

    option

    -

    Option

    Description

    no-auth-no-priv

    Message with no authentication and no privacy (encryption).

    auth-no-priv

    Message with authentication but no privacy (encryption).

    auth-priv

    Message with authentication and privacy (encryption).

    auth-proto

    Authentication protocol.

    option

    -

    Option

    Description

    md5

    HMAC-MD5-96 authentication protocol.

    sha

    HMAC-SHA-96 authentication protocol.

    auth-pwd

    Password for authentication protocol.

    password

    Not Specified

    priv-proto

    Privacy (encryption) protocol.

    option

    -

    Option

    Description

    aes

    CFB128-AES-128 symmetric encryption protocol.

    des

    CBC-DES symmetric encryption protocol.

    aes256

    CFB128-AES-256 symmetric encryption protocol.

    aes256cisco

    CFB128-AES-256 symmetric encryption protocol compatible with CISCO.

    priv-pwd

    Password for privacy (encryption) protocol.

    password

    Not Specified
    Previous
    Next

    config system snmp user

    config system snmp user

    SNMP user configuration.

    config system snmp user
    Description: SNMP user configuration.
    edit <name>
        set status [enable|disable]
        set trap-status [enable|disable]
        set trap-lport {integer}
        set trap-rport {integer}
        set queries [enable|disable]
        set query-port {integer}
        set notify-hosts {ipv4-address}
        set notify-hosts6 {ipv6-address}
        set source-ip {ipv4-address}
        set source-ipv6 {ipv6-address}
        set ha-direct [enable|disable]
        set events [cpu-high|mem-low|...]
        set security-level [no-auth-no-priv|auth-no-priv|...]
        set auth-proto [md5|sha]
        set auth-pwd {password}
        set priv-proto [aes|des|...]
        set priv-pwd {password}
    next
end

    config system snmp user

    Parameter

    Description

    Type

    Size

    name

    SNMP user name.

    string

    Maximum length: 32

    status

    Enable/disable this SNMP user.

    option

    -

    Option

    Description

    enable

    Enable setting.

    disable

    Disable setting.

    trap-status

    Enable/disable traps for this SNMP user.

    option

    -

    Option

    Description

    enable

    Enable setting.

    disable

    Disable setting.

    trap-lport

    SNMPv3 local trap port.

    integer

    Minimum value: 0 Maximum value: 65535

    trap-rport

    SNMPv3 trap remote port.

    integer

    Minimum value: 0 Maximum value: 65535

    queries

    Enable/disable SNMP queries for this user.

    option

    -

    Option

    Description

    enable

    Enable setting.

    disable

    Disable setting.

    query-port

    SNMPv3 query port.

    integer

    Minimum value: 0 Maximum value: 65535

    notify-hosts

    SNMP managers to send notifications (traps) to.

    ipv4-address

    Not Specified

    notify-hosts6

    IPv6 SNMP managers to send notifications (traps) to.

    ipv6-address

    Not Specified

    source-ip

    Source IP for SNMP trap.

    ipv4-address

    Not Specified

    source-ipv6

    Source IPv6 for SNMP trap.

    ipv6-address

    Not Specified

    ha-direct

    Enable/disable direct management of HA cluster members.

    option

    -

    Option

    Description

    enable

    Enable setting.

    disable

    Disable setting.

    events

    SNMP notifications (traps) to send.

    option

    -

    Option

    Description

    cpu-high

    Send a trap when CPU usage is high.

    mem-low

    Send a trap when available memory is low.

    log-full

    Send a trap when log disk space becomes low.

    intf-ip

    Send a trap when an interface IP address is changed.

    vpn-tun-up

    Send a trap when a VPN tunnel comes up.

    vpn-tun-down

    Send a trap when a VPN tunnel goes down.

    ha-switch

    Send a trap after an HA failover when the backup unit has taken over.

    ha-hb-failure

    Send a trap when HA heartbeats are not received.

    ips-signature

    Send a trap when IPS detects an attack.

    ips-anomaly

    Send a trap when IPS finds an anomaly.

    av-virus

    Send a trap when AntiVirus finds a virus.

    av-oversize

    Send a trap when AntiVirus finds an oversized file.

    av-pattern

    Send a trap when AntiVirus finds file matching pattern.

    av-fragmented

    Send a trap when AntiVirus finds a fragmented file.

    fm-if-change

    Send a trap when FortiManager interface changes. Send a FortiManager trap.

    fm-conf-change

    Send a trap when a configuration change is made by a FortiProxy administrator and the FortiProxy is managed by FortiManager.

    ha-member-up

    Send a trap when an HA cluster member goes up.

    ha-member-down

    Send a trap when an HA cluster member goes down.

    ent-conf-change

    Send a trap when an entity MIB change occurs (RFC4133).

    av-conserve

    Send a trap when the FortiProxy enters conserve mode.

    av-bypass

    Send a trap when the FortiProxy enters bypass mode.

    av-oversize-passed

    Send a trap when AntiVirus passes an oversized file.

    av-oversize-blocked

    Send a trap when AntiVirus blocks an oversized file.

    ips-pkg-update

    Send a trap when the IPS signature database or engine is updated.

    ips-fail-open

    Send a trap when the IPS network buffer is full.

    faz-disconnect

    Send a trap when a FortiAnalyzer disconnects from the FortiProxy.

    load-balance-real-server-down

    Send a trap when a server load balance real server goes down.

    device-new

    Send a trap when a new device is found.

    per-cpu-high

    Send a trap when per-CPU usage is high.

    disk-failure

    A disk has encountered a failure.

    disk-overload

    Cache storage is overloaded.

    security-level

    Security level for message authentication and encryption.

    option

    -

    Option

    Description

    no-auth-no-priv

    Message with no authentication and no privacy (encryption).

    auth-no-priv

    Message with authentication but no privacy (encryption).

    auth-priv

    Message with authentication and privacy (encryption).

    auth-proto

    Authentication protocol.

    option

    -

    Option

    Description

    md5

    HMAC-MD5-96 authentication protocol.

    sha

    HMAC-SHA-96 authentication protocol.

    auth-pwd

    Password for authentication protocol.

    password

    Not Specified

    priv-proto

    Privacy (encryption) protocol.

    option

    -

    Option

    Description

    aes

    CFB128-AES-128 symmetric encryption protocol.

    des

    CBC-DES symmetric encryption protocol.

    aes256

    CFB128-AES-256 symmetric encryption protocol.

    aes256cisco

    CFB128-AES-256 symmetric encryption protocol compatible with CISCO.

    priv-pwd

    Password for privacy (encryption) protocol.

    password

    Not Specified
    Previous
    Next