topic Re: SNMP monitoring for Ethernet interfaces in General Topics

SNMP monitoring for Ethernet interfaces

Farzana — Tue, 20 Feb 2018 05:55:33 GMT

Hello,

We are using OPManager to monitor our internal network and we are experiencing some issues with PA-VM 200 when trying to get the traffic of certain interfaces. For all the tunnel interfaces and sub-interfaces, we can see the traffic on the monitor but can't see the traffic for the ethernet interfaces. Using PAN-OS 8.0.2

1) Downloaded Enterprise SNMP 8.0 MIBs from PaloAlto website and uploaded it to the OPManager. OPManager already uses the Standard RFC MIBs.

2) OPManager is only collecting stats with GET messages and we don't use SET messages.

3) SNMP v2 port 161 is configured in both ends.

4) SNMP traffic is enabled in the MGT interface.

5) SNMP traffic is enabled in all other Layer 3 ethernet interfaces.

6) Firewall is configured to respond to statistics from the SNMP manager.

How to get traffic on Ethernet interfaces via SNMP to OPManager?

Re: SNMP monitoring for Ethernet interfaces

OtakarKlier — Tue, 20 Feb 2018 16:55:36 GMT

Hello,

Are you looking for utilization percentages or netflow data?

Please advise,

Re: SNMP monitoring for Ethernet interfaces

Farzana — Tue, 20 Feb 2018 23:35:30 GMT

@OtakarKlier , Hi

We are looking for Rx and Tx traffic (Bps) for interfaces, not NetFlow.

Ethernet 1/1 is put primary interfaces where all the internet traffic is routed and surely there is traffic in that interface.

Tested the Palo MIBs with a MIB browser and getting the ifindex OID from it to see if I can see the traffic. But couldn't get that to work either.

Re: SNMP monitoring for Ethernet interfaces

OtakarKlier — Tue, 20 Feb 2018 23:52:08 GMT

Hello,

This should be possible since I am monitoring those stats with a different tool. Have you looked at https://live.paloaltonetworks.com/t5/Management-Articles/SNMP-for-Monitoring-Palo-Alto-Networks-Devices/ta-p/61052

perhaps it can help?

Here is what I have for snmpv3

Regards,

Re: SNMP monitoring for Ethernet interfaces

Farzana — Wed, 21 Feb 2018 21:30:51 GMT

Hi @OtakarKlier

I've checked the OIDs for the interfaces as per the article and I can get the in/out octets, Ucast and etc.

Also, the MIB browser doesn't display stats for ethernet interfaces.

But I need to get the traffic for the interface. Looks like something is not enabled for the ethernet interfaces whereas for tunnel or subinterfaces it is enabled?

Re: SNMP monitoring for Ethernet interfaces

OtakarKlier — Thu, 22 Feb 2018 19:27:25 GMT

Might be worth a case to TAC. All I recall doing was setting up the SNMP. However I also do netflow so wonder if you have a netflow policy on the tunnel interfaces?

Re: SNMP monitoring for Ethernet interfaces

rodvand — Thu, 22 Feb 2018 20:52:40 GMT

Which hypervisor is it?

I know there is a lack of bandwidth monitoring on the interfaces in Hyper-V. This is apparently a Microsoft issue according to PAN.

This is the reply we got some while ago (still on 7.1):

"The reason why the interface statistics is 0 is that the Linux ethernet driver for Hyper-V in the LIS doesn't support device statistics like other platforms do."

Re: SNMP monitoring for Ethernet interfaces

Remo — Thu, 22 Feb 2018 20:52:51 GMT

Did you check the snmpd log file for errors or indicators of this problem?