About jeremylo

jeremylo · ‎09-07-2021

Hello BPry, I've used Paessler SNMP Tester to run a MIB walk. By examining through naked eye, I can't find any value related to throughput, just like what you've said it seems that not exist in the MIB. About " ifInOctets" and "ifOutOctets". It seems that their corresponding OID are "1.3.6.1.2.1.2.2.1.10.x" and "1.3.6.1.2.1.2.2.1.16.x". However, my target interfaces have this value "0" in the walk result list. I'm surprised by someone who manage to did that through Cacti. Please take a look at https://live.paloaltonetworks.com/t5/automation-api-discussions/cacti-templates/td-p/7457?tstart=0 I've checked the downloadable xml files that are provided by the author. As expected, it relies on OID too, but sadly, I still can't find the correct one.

jeremylo · ‎09-07-2021

Hello Slick, I've created a QoS profile and able to monitor the throughput by GUI. However, my target is to *export* that value to monitoring software, such as Nagios Core.

jeremylo · ‎09-07-2021

I've seen several posts that asking the same question, but none of them have provided substantial suggestion. Many replies just suggest to use existing templates of Cacti or Zabbix. What if I'm not using those 2 monitoring tools? PA has published an OID list on https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaSCAS However, they has never mentioned about throughput, I don't think that value is a secret at all.

jeremylo · ‎03-07-2021

Hello Joerg, This is a solution too. However, I also want to keep track of which computer in Spoke1 have connected to Spoke2.

jeremylo · ‎03-07-2021

Bingo! It works! Thanks Pawel.

jeremylo · ‎03-05-2021

I have a working Hub & Spoke VPN network. Computers in Spoke1 can reach the computers in Spoke2 and vice versa. For some reason, a particular device in Spoke2 with IP 172.16.200.62 can only be reached by the computers in the same subnet. I want to know is it possible to assign a 172.16.200.x IP address to the computers in Spoke1 when they attempt to connect to that special device. I'm not sure this will achieve my target or not, but at least I can learn a new NAT technique if such configuration does exist. The 3 firewalls below are PA-820.

jeremylo · ‎08-14-2019

Bingo! I use those OID in http://www.oidview.com/mibs/25461/PAN-COMMON-MIB.html before. Change to OID = .1, and Mask = 0x80 works

jeremylo · ‎08-12-2019

Hello Mkyk, You are correct. I didn't allow SNMP in mgmt interface. Also didn't configure "SNMP Setup" in "Device>Setup>Operations". Now work for SNMPv2. But still no go for SNMPv3. In "SNMP Setup" in "Device>Setup>Operations>SNMP Setup". After choose "v3". There are several settings unfamiliar to me. No idea about "View", "OID", "Option" and "Mask". Any hints please?

jeremylo · ‎08-12-2019

Target is to forward the PA device status to a monitoring tool (Cacti). But "Cacti" respond SNMP error. Both v2 and v3 show the same error. Other devices (C2960) from the same subnet of PA has no problem. Below is the PA settings SNMPv3 Name: Test SNMP Manager: <IP_of_Cacti> User: testuser EngineID: <leave_blank> (I have 2 PA form an HA) Auth Password: abcd1234 Priv Password: efgh5678 Below is the config when add device in Cacti SNMP Version: Version 3 SNMP Username (v3): testuser SNMP Password (v3): abcd1234 SNMP Auth Protocol (v3): SHA SNMP Privacy Passphrase (v3): efgh5678 SNMP Privacy Protocol (v3): AES SNMP Context (v3): <leave_blank> SNMP Engine ID (v3): <leave_blank> SNMP Port: 161 SNMP Timeout: 500 milliseconds Maximum OIDs Per Get Request: 10

jeremylo · ‎04-04-2019

Ping was enabled.

jeremylo · ‎04-03-2019

Hello, I successful achieve this by using PBF and set different Metric number for the 2 interfaces in default route. But found a problem. The 2nd interface (with higher metric number) cannot ping or being ping from outside. I think asymmetric ping was happen and look like it was caused by PBF.

jeremylo · ‎04-02-2019

The office has 2 internet data line. Each of them has a fix public IP address. Device is a PA-820. I want to separate the utilization of the data line as below. 1. Office area/staff primary use 1st data line. If this line down then auto change to use 2nd data line. When 1st data line resume. Auto change back. 2. Guest area always use 2nd data line. What configuration can achieve this goal?

jeremylo · ‎02-18-2019

Just update this topic as I receive email said it already accept as solution but this is not the truth. I'll onsite to investigate the affected area later.

jeremylo · ‎02-11-2019

hello rmfalconer, Yes. When I create the new VR. I add the 2nd interface to this VR + the new default route. No policies changed. Those zones are associate to the 2nd interface (in PBF). This work before even using only 1 VR.

jeremylo · ‎02-10-2019

My network has 2 outgoing data lines. Using one virtual router and set static default route for the 2 interfaces. The 1st interface has its Metric set to higher priority. As I want to divide the traffic. Some zones were force to use the 2nd interface by setting "Police Based Forwarding". Above settings work until I found that the 2nd interface was unable to reach internet due to asymmetric routing. So I create a new virtual router and a static default route for the 2nd interface.With the new virtual router. The 2nd interface can contact from/to internet. But those zones rely on it to reach internet were all down. Some policies (Security, NAT, PBF) were review. I still have no idea what cause the problem.

Member Since	‎06-27-2018 11:29 PM
Date Last Visited	‎09-09-2021 06:44 PM
Posts	39

Online Status	Offline
Date Last Visited	‎09-09-2021 06:44 PM

About jeremylo

Re: OID of throughput value of each interface

Re: OID of throughput value of each interface

OID of throughput value of each interface

Re: Special NAT configuration. Asking about possibility

Re: Special NAT configuration. Asking about possibility

Special NAT configuration. Asking about possibility

Re: Need help about PAN-OS 8 SNMP settings

Re: Need help about PAN-OS 8 SNMP settings

Need help about PAN-OS 8 SNMP settings

Re: Need suggestion for 2 x internet data line network design

Re: Need help about PAN-OS 8 SNMP settings

Re: OID of throughput value of each interface

Re: OID of throughput value of each interface

OID of throughput value of each interface

Re: Special NAT configuration. Asking about possibility

Re: Special NAT configuration. Asking about possibility

Special NAT configuration. Asking about possibility

Re: Need help about PAN-OS 8 SNMP settings

Re: Need help about PAN-OS 8 SNMP settings

Need help about PAN-OS 8 SNMP settings

Re: Need suggestion for 2 x internet data line network design

Re: Need suggestion for 2 x internet data line network design

Need suggestion for 2 x internet data line network design

Re: Change interface virtual router cause network down

Re: Change interface virtual router cause network down

Change interface virtual router cause network down

Unlock your full community experience!

About jeremylo