Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Trouble w/ Fortigate

I am having trouble bringing configs from Fortigate firewalls into NCM. Below is the session trace. Would appreciate some assistance getting this to work.

[8/13/2009 12:44:56 PM] -----------------NCM 5.5 SP1-------------------
[8/13/2009 12:44:56 PM] Login Attempts: 1
[8/13/2009 12:44:56 PM] Custom UserName Prompt:
[8/13/2009 12:44:56 PM] Device Template:
[8/13/2009 12:44:56 PM] System Name:
[8/13/2009 12:44:56 PM] System Description:
[8/13/2009 12:44:56 PM] System OID:
[8/13/2009 12:44:56 PM] OS Image:
[8/13/2009 12:44:56 PM] OS Version:

[8/13/2009 12:44:56 PM] Menu-Based mode=False
[8/13/2009 12:44:56 PM]
-->StateChange: Connecting to server<--

[8/13/2009 12:44:56 PM] Got HostFingerPrint: e1:5e:6d:24:cf:de:c3:48:50:37:29:5d:c4:80:1e:d1
[8/13/2009 12:44:56 PM] SWTelnet9 Crypto Information Begin
[8/13/2009 12:44:56 PM] Protocol = SSH2
[8/13/2009 12:44:56 PM] RemoteName = SSH-2.0-xxxxxxx
[8/13/2009 12:44:56 PM] SCcipher = aes128-cbc
[8/13/2009 12:44:56 PM] CSCipher = aes128-cbc
[8/13/2009 12:44:56 PM] Keys = ssh-rsa
[8/13/2009 12:44:56 PM] SWTelnet9 Crypto Information End
[8/13/2009 12:44:57 PM]
-->StateChange: Connected to server - idle<--

[8/13/2009 12:44:57 PM] Solarwinds.Net SWTelnet9 Version 9.0.27
[8/13/2009 12:44:57 PM] Connected!
[8/13/2009 12:44:57 PM] --->frddcfw01 $
[8/13/2009 12:44:57 PM] ProcessLogin State: 0
[8/13/2009 12:44:58 PM] TimerTick: mstrData=<frddcfw01 $ > State=3 - Connected to server - idle
[8/13/2009 12:44:58 PM] Pending Disconnect = False
[8/13/2009 12:44:58 PM] Sending to get a banner!
[8/13/2009 12:44:58 PM] <--

[8/13/2009 12:44:58 PM] -->
[8/13/2009 12:44:58 PM] -->
[8/13/2009 12:44:58 PM] --> frddcfw01 $
[8/13/2009 12:44:58 PM] ProcessLogin State: 0
[8/13/2009 12:45:00 PM] TimerTick: mstrData=<frddcfw01 $ > State=3 - Connected to server - idle
[8/13/2009 12:45:00 PM] Pending Disconnect = False
[8/13/2009 12:45:00 PM] TimerTick: Send to CRLF get prompt again
[8/13/2009 12:45:00 PM] <--

[8/13/2009 12:45:00 PM] -->
[8/13/2009 12:45:00 PM] -->
[8/13/2009 12:45:00 PM] --> frddcfw01 $
[8/13/2009 12:45:00 PM] ProcessLogin State: 0
[8/13/2009 12:45:02 PM] TimerTick: mstrData=<frddcfw01 $ > State=3 - Connected to server - idle
[8/13/2009 12:45:02 PM] Pending Disconnect = False
[8/13/2009 12:45:02 PM] TimerTick: Send to CRLF get prompt again
[8/13/2009 12:45:02 PM] <--

[8/13/2009 12:45:02 PM] -->
[8/13/2009 12:45:02 PM] -->
[8/13/2009 12:45:02 PM] --> frddcfw01 $
[8/13/2009 12:45:02 PM] ProcessLogin State: 0
[8/13/2009 12:45:04 PM] TimerTick: mstrData=<frddcfw01 $ > State=3 - Connected to server - idle
[8/13/2009 12:45:04 PM] Pending Disconnect = False
[8/13/2009 12:45:04 PM] TimerTick: Send to CRLF get prompt again
[8/13/2009 12:45:04 PM] <--

[8/13/2009 12:45:04 PM] -->
[8/13/2009 12:45:04 PM] -->
[8/13/2009 12:45:04 PM] --> frddcfw01 $
[8/13/2009 12:45:04 PM] ProcessLogin State: 0
[8/13/2009 12:45:06 PM] TimerTick: mstrData=<frddcfw01 $ > State=3 - Connected to server - idle
[8/13/2009 12:45:06 PM] Pending Disconnect = False
[8/13/2009 12:45:06 PM] TimerTick: Send to CRLF get prompt again
[8/13/2009 12:45:06 PM] <--

[8/13/2009 12:45:06 PM] -->
[8/13/2009 12:45:06 PM] -->
[8/13/2009 12:45:06 PM] --> frddcfw01 $
[8/13/2009 12:45:06 PM] ProcessLogin State: 0
[8/13/2009 12:45:08 PM] TimerTick: mstrData=<frddcfw01 $ > State=3 - Connected to server - idle
[8/13/2009 12:45:08 PM] Pending Disconnect = False
[8/13/2009 12:45:08 PM] TimerTick: Send to CRLF get prompt again
[8/13/2009 12:45:08 PM] <--

[8/13/2009 12:45:08 PM] -->
[8/13/2009 12:45:08 PM] -->
[8/13/2009 12:45:08 PM] --> frddcfw01 $
[8/13/2009 12:45:08 PM] ProcessLogin State: 0
[8/13/2009 12:45:10 PM] TimerTick: mstrData=<frddcfw01 $ > State=3 - Connected to server - idle
[8/13/2009 12:45:10 PM] Pending Disconnect = False
[8/13/2009 12:45:10 PM] TimerTick: Send to CRLF get prompt again
[8/13/2009 12:45:10 PM] <--

[8/13/2009 12:45:10 PM] -->
[8/13/2009 12:45:10 PM] -->
[8/13/2009 12:45:10 PM] --> frddcfw01 $
[8/13/2009 12:45:10 PM] ProcessLogin State: 0
[8/13/2009 12:45:12 PM] TimerTick: mstrData=<frddcfw01 $ > State=3 - Connected to server - idle
[8/13/2009 12:45:12 PM] Pending Disconnect = False
[8/13/2009 12:45:12 PM] TimerTick: Send to CRLF get prompt again
[8/13/2009 12:45:12 PM] <--

[8/13/2009 12:45:12 PM] -->
[8/13/2009 12:45:12 PM] -->
[8/13/2009 12:45:12 PM] --> frddcfw01 $
[8/13/2009 12:45:12 PM] ProcessLogin State: 0
[8/13/2009 12:45:14 PM] TimerTick: mstrData=<frddcfw01 $ > State=3 - Connected to server - idle
[8/13/2009 12:45:14 PM] Pending Disconnect = False
[8/13/2009 12:45:14 PM] TimerTick: Send to CRLF get prompt again
[8/13/2009 12:45:14 PM] <--

[8/13/2009 12:45:14 PM] TimerTick: Login Timeout
[8/13/2009 12:45:14 PM] -->
[8/13/2009 12:45:14 PM] -->
[8/13/2009 12:45:14 PM] --> frddcfw01 $
[8/13/2009 12:45:14 PM] ProcessLogin State: 0
[8/13/2009 12:45:14 PM] Disconnected - From: 10.2.160.250
[8/13/2009 12:45:14 PM] Disconnecting

Find more posts tagged with

Accepted answers

mcbridea

They added sflow in 4.0 MR2 , which we support

config system sflow
 set collector-ip xxx.xxx.xxx.xxx
 set collector-port 2055
end

<Interfaces>

config sys interface edit set sflow-sampler enable set sample-rate 512 set sample-direction both set polling-interval 30 next end

<a href="http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=FD32024&sliceId=1&docTypeID=DT_KCARTICLE_1_1&dialogID=5703765&stateId=0%200%205701875">http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=FD32024&sliceId=1&docTypeID=DT_KCARTICLE_1_1&dialogID=5703765&stateId=0%200%205701875</a>

All comments

dstj

Can you ssh to device with no issues using PuTTY ?

Under login information, can you try disabling and clearing the 'Enable level' and 'Enable password' ?

Under Communication, do you use 'auto determine' as the template?, and 'ssh auto' on everything ?

Dave

brian_crypto

I am able to ssh to the device just fine. I have verified using PuTTY on the NCM server itself.

I *did* have enable levels set, but have now disabled them. Under communication it is set to Auto Determine and all SSH settings are also auto (though I have tried manually setting them as well).

Similar results:

[8/18/2009 3:26:41 PM] -----------------NCM 5.5 SP1-------------------
[8/18/2009 3:26:41 PM] Login Attempts: 1
[8/18/2009 3:26:41 PM] Custom UserName Prompt:
[8/18/2009 3:26:41 PM] Device Template: Fortigate-1.3.6.1.4.1.12356.ConfigMgmt-Commands
[8/18/2009 3:26:42 PM] System Name: cbdhqfw01
[8/18/2009 3:26:42 PM] System Description: cbdhwfw01
[8/18/2009 3:26:42 PM] System OID: 1.3.6.1.4.1.12356.5001
[8/18/2009 3:26:42 PM] OS Image:
[8/18/2009 3:26:42 PM] OS Version:

[8/18/2009 3:26:42 PM] Menu-Based mode=False
[8/18/2009 3:26:42 PM]
-->StateChange: Connecting to server<--

[8/18/2009 3:26:42 PM] TimerTick: mstrData=<> State=1 - Connecting to server
[8/18/2009 3:26:42 PM] Pending Disconnect = False
[8/18/2009 3:26:42 PM] TimerState not Idle, Leaving.
[8/18/2009 3:26:42 PM] Got HostFingerPrint: 6b:9e:36:c8:40:39:3b:9c:c6:cf:00:47:d4:cb:b2:0e
[8/18/2009 3:26:42 PM] SWTelnet9 Crypto Information Begin
[8/18/2009 3:26:42 PM] Protocol = SSH2
[8/18/2009 3:26:42 PM] RemoteName = SSH-2.0-xxxxxxx
[8/18/2009 3:26:42 PM] SCcipher = aes128-cbc
[8/18/2009 3:26:42 PM] CSCipher = aes128-cbc
[8/18/2009 3:26:42 PM] Keys = ssh-rsa
[8/18/2009 3:26:42 PM] SWTelnet9 Crypto Information End
[8/18/2009 3:26:43 PM]
-->StateChange: Connected to server - idle<--

[8/18/2009 3:26:43 PM] Solarwinds.Net SWTelnet9 Version 9.0.27
[8/18/2009 3:26:43 PM] Connected!
[8/18/2009 3:26:43 PM] --->cbdhqfw01 $
[8/18/2009 3:26:43 PM] ProcessLogin State: 0
[8/18/2009 3:26:43 PM] TimerTick: mstrData=<cbdhqfw01 $ > State=3 - Connected to server - idle
[8/18/2009 3:26:43 PM] Pending Disconnect = False
[8/18/2009 3:26:43 PM] Sending to get a banner!
[8/18/2009 3:26:43 PM] <--

[8/18/2009 3:26:44 PM] -->
[8/18/2009 3:26:44 PM] -->
[8/18/2009 3:26:44 PM] -->
[8/18/2009 3:26:44 PM] ProcessLogin State: 0
[8/18/2009 3:26:44 PM] --->cbdhqfw01 $
[8/18/2009 3:26:44 PM] ProcessLogin State: 0
[8/18/2009 3:26:45 PM] TimerTick: mstrData=<cbdhqfw01 $ > State=3 - Connected to server - idle
[8/18/2009 3:26:45 PM] Pending Disconnect = False
[8/18/2009 3:26:45 PM] TimerTick: Send to CRLF get prompt again
[8/18/2009 3:26:45 PM] <--

[8/18/2009 3:26:46 PM] -->
[8/18/2009 3:26:46 PM] -->
[8/18/2009 3:26:46 PM] --> cbdhqfw01 $
[8/18/2009 3:26:46 PM] ProcessLogin State: 0
[8/18/2009 3:26:47 PM] TimerTick: mstrData=<cbdhqfw01 $ > State=3 - Connected to server - idle
[8/18/2009 3:26:47 PM] Pending Disconnect = False
[8/18/2009 3:26:47 PM] TimerTick: Send to CRLF get prompt again
[8/18/2009 3:26:47 PM] <--

[8/18/2009 3:26:48 PM] -->
[8/18/2009 3:26:48 PM] -->
[8/18/2009 3:26:48 PM] --> cbdhqfw01 $
[8/18/2009 3:26:48 PM] ProcessLogin State: 0
[8/18/2009 3:26:49 PM] TimerTick: mstrData=<cbdhqfw01 $ > State=3 - Connected to server - idle
[8/18/2009 3:26:49 PM] Pending Disconnect = False
[8/18/2009 3:26:49 PM] TimerTick: Send to CRLF get prompt again
[8/18/2009 3:26:49 PM] <--

[8/18/2009 3:26:50 PM] -->
[8/18/2009 3:26:50 PM] -->
[8/18/2009 3:26:50 PM] --> cbdhqfw01 $
[8/18/2009 3:26:50 PM] ProcessLogin State: 0
[8/18/2009 3:26:51 PM] TimerTick: mstrData=<cbdhqfw01 $ > State=3 - Connected to server - idle
[8/18/2009 3:26:51 PM] Pending Disconnect = False
[8/18/2009 3:26:51 PM] TimerTick: Send to CRLF get prompt again
[8/18/2009 3:26:51 PM] <--

[8/18/2009 3:26:52 PM] -->
[8/18/2009 3:26:52 PM] -->
[8/18/2009 3:26:52 PM] --> cbdhqfw01 $
[8/18/2009 3:26:52 PM] ProcessLogin State: 0
[8/18/2009 3:26:53 PM] TimerTick: mstrData=<cbdhqfw01 $ > State=3 - Connected to server - idle
[8/18/2009 3:26:53 PM] Pending Disconnect = False
[8/18/2009 3:26:53 PM] TimerTick: Send to CRLF get prompt again
[8/18/2009 3:26:53 PM] <--

[8/18/2009 3:26:54 PM] -->
[8/18/2009 3:26:54 PM] -->
[8/18/2009 3:26:54 PM] --> cbdhqfw01 $
[8/18/2009 3:26:54 PM] ProcessLogin State: 0
[8/18/2009 3:26:55 PM] TimerTick: mstrData=<cbdhqfw01 $ > State=3 - Connected to server - idle
[8/18/2009 3:26:55 PM] Pending Disconnect = False
[8/18/2009 3:26:55 PM] TimerTick: Send to CRLF get prompt again
[8/18/2009 3:26:55 PM] <--

[8/18/2009 3:26:56 PM] -->
[8/18/2009 3:26:56 PM] -->
[8/18/2009 3:26:56 PM] --> cbdhqfw01 $
[8/18/2009 3:26:56 PM] ProcessLogin State: 0
[8/18/2009 3:26:57 PM] TimerTick: mstrData=<cbdhqfw01 $ > State=3 - Connected to server - idle
[8/18/2009 3:26:57 PM] Pending Disconnect = False
[8/18/2009 3:26:57 PM] TimerTick: Send to CRLF get prompt again
[8/18/2009 3:26:57 PM] <--

[8/18/2009 3:26:58 PM] -->
[8/18/2009 3:26:58 PM] -->
[8/18/2009 3:26:58 PM] --> cbdhqfw01 $
[8/18/2009 3:26:58 PM] ProcessLogin State: 0
[8/18/2009 3:26:59 PM] TimerTick: mstrData=<cbdhqfw01 $ > State=3 - Connected to server - idle
[8/18/2009 3:26:59 PM] Pending Disconnect = False
[8/18/2009 3:26:59 PM] TimerTick: Send to CRLF get prompt again
[8/18/2009 3:26:59 PM] <--

[8/18/2009 3:26:59 PM] TimerTick: Login Timeout
[8/18/2009 3:26:59 PM] Disconnected - From: 10.33.66.11

chris.lapoint

Ok, it looks the the problem should be pretty simple to resolve. It appears that NCM is waiting for the device prompt to confirm that the login has occurred successfully, but because the prompt is non-standard ($), it simply continues to wait for a prompt.

You'll need to edit the Fortigate device template (<install dir>:\Program Files\SolarWinds\Configuration Management\Device-Types) and add the following line:

This tells NCM to check for the standard prompts and if not found, check for the VirtualPrompt value.

Let me know how this works.

brian_crypto

Awesome! That took care of it!