topic SNMP and Netflow in General Topics

SNMP and Netflow

arhong — Wed, 18 Aug 2021 23:07:34 GMT

PAN 9.1.8 has SNMP V3 configured base on

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClHOCA0

with Netflow on AE5.30, ae5.50, and ae5.60 of the 5260 base on

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/monitoring/netflow-monitoring/configure-netflow-exports.html#id4ad7a523-e577-41ab-8b77-4034458a2a7b

On my Netflow collector server, I successfully see flow but cannot see snmp data. The problem is

SNMP V3 source is on the PAN while netflow is source differently on the 5260. The vendor for my netflow collector server is saying that the SNMP source IP HAS TO BE the same as Netflow source IP.

Anyone come across this and if so, what was your solution?

Thanks

Re: SNMP and Netflow

Mudhireddy — Thu, 19 Aug 2021 17:12:17 GMT

Hi,

Are you properly configure service route configuration for destination reachability.

Best Regards,

Suresh

Re: SNMP and Netflow

arhong — Thu, 19 Aug 2021 17:36:39 GMT

Yes as getting netflow data but on my Netflow collector server, I can't get the snmp data as vendor has restriction to use the same source addrees for both netflow and snmp

Re: SNMP and Netflow

OtakarKlier — Fri, 20 Aug 2021 18:15:24 GMT

Hello,

Check your interface management profile and verify SNMP is enabled and you have the proper permitted IP address listed. Then apply that management policy to the interface you are monitoring with SNMP.

Regards,

Re: SNMP and Netflow

Mudhireddy — Mon, 23 Aug 2021 15:03:08 GMT

Hi,

Can you pls check one more option like Netflow Profile that is assigned directly to interface, unlike other forwarding server profiles. U can see in your interface level netflow profile binding or not?

Best Regards,

Suresh

Re: SNMP and Netflow

arhong — Mon, 23 Aug 2021 16:38:42 GMT

Hi Smudhireddy - The netflow profile is assigned to my L3 Aggregate Subinterface

Hi Otakarklier - The interface management profile doesn't SNMP have enabled or a permitted IP address. Thanks for this!