Not able to see the interface IP addresses using SNMP.

[Gururaj]

Hi All,

I executed the command in SNMP to get MIB, but it is showing only interfaces not showing related IP addresses. what might be the problem ? Kindly help me.

Regards,

Gururaj.

[sturla · Accepted solution]

Palo Alto Networks has not implemented the IP-MIB which is where you would find information relating to IP. The solution is to submit a feature request to your local sales rep.

snmpwalk -v2c -c ****** 192.168.1.1 1.3.6.1.2.1.4.34

IP-MIB::ipAddressTable = No Such Object available on this agent at this OID

R

/Sturla

[Dulle]

2 1/2 years later, still no IP-MIB ?

No one else see this as a problem with snmp-based tools ?

Topology maps in CA Spectrum, Solarwinds etc. doesn't work. Neither does other SNMP discovery tools (as Infoblox IPAM.)

Shouldn't be to hard to fix. Anyone else care to flag feature request as  relevant ?

[yarinbenado]

As there currently is no solution at the SNMP level, your options are:

1. Use the API (https://www.paloaltonetworks.com/content/dam/paloaltonetworks-com/en_US/assets/pdf/technical-documen...)

2. Automate it via SSH (not recommended vs API for this specific use case).

3. Take a look at indeni. It covers this and a lot more, specifically for PANW firewalls.

DISCLAIMER: I work at indeni.

[jeanbrunoe]

Hey,

Is it still not possible to poll IPs using SNMP?

Thanks

JB

[kiwi]

Hi,

IP-MIB is not available.  The related feature request (FR 1696) is still open.  

Please reach out to your local SE and he can add your vote to this request to add more weight to it.

Cheers !

-Kim.

[BPry]

Kim,

Do you know why PA isn't letting us upvote feature requests ourselves. I understand that it's on an internal database becasue it's supposed to be tied in with there security issues but why don't they seperate that out and make it public so that we don't have to bug our SEs just because I want to 'upvote' a feature request? 

[Dulle]

>IP-MIB is not available.  The related feature request (FR 1696) is still open.  

>Please reach out to your local SE and he can add your vote to this request to add more weight to it.

Are there really no other customers that find this an issue ?
Please, if more customers actually do, register with your local SE

[TouroNetworking]

It's 2020 (8 years later).

Still not implemented...

[alvaroarcaz]

Hi

Now is (9 years later) and Palo Alto not provide a solution for this SNMP feature make totally not sense

[alvaroarcaz]

Still waiting for solution ....

[alvaroarcaz]

Today at 08/03/2022 still waiting a solution from PaloAlto, i just escalate to the TAM and they submit a Feature Request, this make no sense, how long should i wait?

[VishalMalli]

Pretty disappointing that our firewalls don't support this. Even our cheaper L3 switches support this.