Monitor subinterfaces and get NetFlow statistics

cancel
Showing results for 
Search instead for 
Did you mean: 

Monitor subinterfaces and get NetFlow statistics

L3 Networker

Hi,

We have a PA-5020 and configured a few AGG interfaces with subinterface; recently, we installed a SolarWinds NTA to get NetFlow statistics, but I am not able to get anything from this device.

I have created a profile and applied to the subinterface through which the Internet traffic goes, but it does not send any information to the NetFlow collector.

agg.JPG.jpg

Also, is there a way we can monitor the AGG and subinterfaces using SNMP?

We do manage the device with SNMP through the management interface and I can see the physical interfaces, but not the AGG and subinterfaces.

Thank you very much.

20 REPLIES 20

SNMP polling for tunnel interfaces would be good too!

Does anyone have the feature request numbers for these snmp updates?

FR####

I should send a vote off to my sales team while I'm thinking about it.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center

L6 Presenter

Hello MMC,

As long as I know Netflow/SNMP are allowed only on Physical Interfaces.

Please find bellow mentioned FR No.

Netflow on Sub interfaces FR#3058

SNMP on Sub interfaces FR#780


Regards,

Hardik Shah

View solution in original post

L1 Bithead

I've contacted ours re: FR780

Will let you know what they say when I hear back.

Thanks hshah adding my vote too.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center

Thank you; on it, as well.

L3 Networker

Thank you; voting as well.

L1 Bithead

So, according to our SE this feature isn't a priority and is currently not slated for any future release either. :smileysad:

This could be because PAN can't trivially (or otherwise) implement it because of the underlying architecture rather than not recognising it'd be very useful.

The current alternative, which is a bit of a hack and a lot of extra work in my opinion, is to use the API - https://live.paloaltonetworks.com/docs/DOC-5781

We're going to try this as this insight is essential to a subinterface deployment like ours.

I'll check back with our experiences and findings.

p.s The more people who can make noise about these FR's the better. So, ring your SE today!

L2 Linker

Just to confirm, netflow via aggregates/sub-interfaces is supported in 6.0/6.1, but SNMP is still not supported, correct?

Hi,

 

panos 7.0 guide

 

 

Untitled picture.png

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!