Upgraded from v9 to v10 and SNMP traffic statistics...

[LCMember4427]

Hi,
Recently we upgraded our VM-100 fw from v9 to v10 and apart from the yellow login wallpaper there was not much visual changes after the transition.  Everything is running as smoothly as before, except an issue with SNMP traffic statistics.

We extract interface traffic statistics from our VM-100 via SNMP to a Cacti OVA appliance so we easily can monitor throughput graphs from every interface in the FW.  After the upgrade these graphs were populated as before EXCEPT for the WAN/Untrust interface.  It reports only 100-400 kbits/s instead of 300-400 MBits/s as it did before.  We have not changed anyhting neither in Cacti nor the VM-100 interface settings.  And all the other VM-100 (non-WAN) interfaces are displaying traffic in MBits/sec as expected.

I have checked the upgrade issues but not found anything which can cause different SNMP statistics reporting from the WAN interface compared to the other interfaces.  Anyone here who have an idea why we are experiencing this order of magnitude change in the WAN interface's SNMP statistics after upgrading to v10?  Is it somehow only reporting some special traffic and not the interface's global throughput?

Thanks for any help and comment!

[aleksandar.astardzhiev]

Hi @LCMember4427 ,

Have you tried to "re-discover" the firewall from the Cacti? One possible reason I can think of is for some reason after the upgrade interface SNMP OID was changed and your Cacti is monitoring the wrong interface, but it still keeps the old mapping and believe this is the WAN interface.

[BPry]

@LCMember4427,

In my experience @aleksandar.astardzhiev is absolutely correct and your interface mappings are wrong and you need to simply re-add the device into Cacti. I've had mixed experience trying to do a rediscovery in Cacti and having that correct these sort of issues, so I would personally recommend just removing and re-adding it.