Monitor subinterfaces and get NetFlow statistics

[MMCiobanu]

Hi,

We have a PA-5020 and configured a few AGG interfaces with subinterface; recently, we installed a SolarWinds NTA to get NetFlow statistics, but I am not able to get anything from this device.

I have created a profile and applied to the subinterface through which the Internet traffic goes, but it does not send any information to the NetFlow collector.

Also, is there a way we can monitor the AGG and subinterfaces using SNMP?

We do manage the device with SNMP through the management interface and I can see the physical interfaces, but not the AGG and subinterfaces.

Thank you very much.

[ajbool]

SNMP polling for tunnel interfaces would be good too!

[pulukas]

Does anyone have the feature request numbers for these snmp updates?

FR####

I should send a vote off to my sales team while I'm thinking about it.

[hshah · Accepted solution]

Hello MMC,

As long as I know Netflow/SNMP are allowed only on Physical Interfaces.

Please find bellow mentioned FR No.

Netflow on Sub interfaces FR#3058

SNMP on Sub interfaces FR#780

Regards,

Hardik Shah

[SimonBlackler]

I've contacted ours re: FR780

Will let you know what they say when I hear back.

[pulukas]

Thanks hshah adding my vote too.

[MMCiobanu]

Thank you; on it, as well.

[MMCiobanu]

Thank you; voting as well.

[SimonBlackler]

So, according to our SE this feature isn't a priority and is currently not slated for any future release either. :smileysad:

This could be because PAN can't trivially (or otherwise) implement it because of the underlying architecture rather than not recognising it'd be very useful.

The current alternative, which is a bit of a hack and a lot of extra work in my opinion, is to use the API - https://live.paloaltonetworks.com/docs/DOC-5781

We're going to try this as this insight is essential to a subinterface deployment like ours.

I'll check back with our experiences and findings.

p.s The more people who can make noise about these FR's the better. So, ring your SE today!

[SabreAce33]

Just to confirm, netflow via aggregates/sub-interfaces is supported in 6.0/6.1, but SNMP is still not supported, correct?

[panos]

Hi,

panos 7.0 guide