FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Rosalyn
Staff
Staff
Article Id 197535
Description
This is possible to select HMAC-SHA-2 authentication protocols based on SHA-224, SHA-256, SHA-384, and SHA-512, for SNMPv3.

This article describes how to enable SHA-2 for SNMPv3 authentication.

Solution
To enable SHA-2 for SNMPv3 via GUI.

1) Go to System -> SNMP.

2) In the SNMPv3 section, select 'Create New'. The New SNMP User pane opens.

3) In the Security Level section, select 'Authentication' and for Authentication Algorithm, select a SHA-2 authentication protocol.





To enable SHA-2 for SNMPv3 via CLI.
# config system snmp user
    edit "test"
        (test) set security-level auth-priv
        (test) set auth-proto
        md5                              <----- HMAC-MD5-96 authentication protocol.
        sha                              <----- HMAC-SHA-96 authentication protocol.
        sha224                           <----- HMAC-SHA224 authentication protocol.
        sha256                           <----- HMAC-SHA256 authentication protocol.
        sha384                           <----- HMAC-SHA384 authentication protocol.
        sha512                           <----- HMAC-SHA512 authentication protocol.

Contributors