[mrtg] MRTG with SNMPv3 and contecxt names - help required.

Nicoletti, Leandro (CONT) Leandro.Nicoletti at capitalone.com
Wed Jan 28 16:09:06 CET 2015


I'm trying to graph some stats on a Checkpoint VSX firewall that uses context names for each virtual firewall. I can successfully walk the OIDS using SNMPV3 at the CLI, but having difficulty getting anything into MRTG.

I can successfully pole the interfaces using MRTG and SNMPv3 with context names using the example below, but getting nothing when I try custom OIDS

enablesnmpv3: yes
target[10.10.10.10]: #eth3-02:public at 10.10.10.10:::::3
SnmpOptions[10.10.10.10]: privpassword=>'somepassword',privprotocol=>'des',username=>'someusername',authpassword=>'somepassword',authprotocol=>'md5'
SetEnv[10.10.10.10]: MRTG_INT_IP="No Ip" Some Interface="eth3-02"
MaxBytes[10.10.10.10]: 125000000.

This could be down to my config. I'm trying to capture current and peak connections on a firewall (amongst other things). The basic config looks like this, when I run it I get a 'no response from host'. I'm not 100% sure if my use of SNMPv3 and context names are correct. Any help with this config would be greatly appreciated.

enablesnmpv3: yes
Target[conns]: .1.3.6.1.4.1.2620.1.1.25.3&.1.3.6.1.4.1.2620.1.1.25.4:public at 10.10.10.10
SnmpOptions[conns]: privpassword=>'somepassword',privprotocol=>'des',authpassword=>'somepassword',username=>'someusername',authprotocol=>'md5',contextname=>'ctxname_vsid7'
MaxBytes[conns]: 250000
Options[conns]: nopercent, growright, unknaszero
YLegend[conns]: connetions
ShortLegend[conns]: C
Legend1[conns: current
Legend2[conns]: peak
Title[conns]: Connections


Walk specific OID works ok (connection tables)
snmpwalk -n ctxname_vsid7 -v3 -l authPriv -u someusername -a MD5 -A somepassword -x DES -X somepassword 10.10.10.10 .1.3.6.1.4.1.2620.1.1.25.3
snmpwalk -n ctxname_vsid7 -v3 -l authPriv -u someusername -a MD5 -A somepassword -x DES -X somepassword 10.10.10.10 .1.3.6.1.4.1.2620.1.1.25.4




Leandro Nicoletti
Network & Security Engineer
UK Card Technology Operations
Tel: +44 115 843 2148

[cid:image001.png at 01D03B08.CA6D4400]



________________________________________________________

The information contained in this e-mail is confidential and/or proprietary to Capital One and/or its affiliates. The information transmitted herewith is intended only for use by the individual or entity to which it is addressed.  If the reader of this message is not the intended recipient, you are hereby notified that any review, retransmission, dissemination, distribution, copying or other use of, or taking of any action in reliance upon this information is strictly prohibited. If you have received this communication in error, please contact the sender and delete the material from your computer.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.oetiker.ch/pipermail/mrtg/attachments/20150128/72a9a5e0/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 10765 bytes
Desc: image001.png
URL: <http://lists.oetiker.ch/pipermail/mrtg/attachments/20150128/72a9a5e0/attachment.png>


More information about the mrtg mailing list