07-27-2007 07:08 PM - edited 03-11-2019 03:50 AM
Hi
Pix 6.3, enable snmp-server host to a windows 2003 server running MRTG. When MRTG try to get traffic from PIX inside interface, nothing show up. No errors in pix and windows, ping is fine. Could help to list some documents about PIX 6.3 snmp setup with MRTG?
Thanks
ben
07-27-2007 09:31 PM
Try with that ! Replace the community string and IP. Hope that helps.
======== BEGINNING ===========================
# Created by v4only
### Global Config Options
# for UNIX
WorkDir: /var/www/localhost/htdocs/mrtg
Htmldir: /var/www/localhost/htdocs/mrtg
Imagedir: /var/www/localhost/htdocs/mrtg
IconDir: /var/www/localhost/htdocs/mrtg/icons
EnableIPv6: no
Target[pix-cpu]:.1.3.6.1.4.1.9.9.109.1.1.1.1.5.1&.1.3.6.1.4.1.9.9.109.1.1.1.1.5.1:snmp-password@111.111.111.1
RouterUptime[pix-cpu]:snmp-password@111.111.111.1
Title[pix-cpu]: PIX 501 CPU LOAD
PageTop[pix-cpu]:
MaxBytes[pix-cpu]:100
ShortLegend[pix-cpu]:%
XSize[pix-cpu]:380
YSize[pix-cpu]:100
YLegend[pix-cpu]: CPU Utilization
Legend1[pix-cpu]: 5 sec CPU load %
Legend2[pix-cpu]: 1 min CPU load %
Legend3[pix-cpu]: Maximal 5 sec CPU load %
Legend4[pix-cpu]: Maximal 1 min CPU load %
LegendI[pix-cpu]: 5 sec load:
LegendO[pix-cpu]: 1 min load:
Options[pix-cpu]: gauge, growright, nopercent
### Interface 1 >> Descr: 'PIX-Firewall-'outside'-interface' | Name: ''| Ip: '111.111.111.1' | Eth: '00-0a-f4-cc-ee-cc' ###
### The following interface is commented out because:
### * --ifref=name is not unique for this interface
#
Target[pix_outside]: 1:snmp-password@111.111.111.1
SetEnv[pix_outside]: MRTG_INT_IP="111.111.111.1"
#MRTG_INT_DESCR="PIX-Firewall-'outside'-interface"
MaxBytes[pix_outside]: 1250000
Title[pix_outside]: 1 -- PIX501
PageTop[pix_outside]:
System: | PIX501 in Neverland |
Maintainer: | admin@domain.com |
Description: | PIX Firewall outside interface |
ifType: | ethernetCsmacd (6) |
ifName: | |
Max Speed: | 10.0 Mbits/s |
Ip: | 111.111.111.1 () |
### Interface 2 >> Descr: 'PIX-Firewall-'inside'-interface' | Name: '' |Ip: '192.168.1.1' | Eth: '00-0a-f4-bb-ff-ee' ###
### The following interface is commented out because:
### * --ifref=name is not unique for this interface
#
Target[pix_inside]: 2:snmp-password@111.111.111.1
SetEnv[pix_inside]: MRTG_INT_IP="192.168.1.1"
#MRTG_INT_DESCR="PIX Firewall inside interface"
MaxBytes[pix_inside]: 12500000
Title[pix_inside]: INSIDE -- PIX 501
PageTop[pix_inside]:
System: | PIX501 in Neverland |
Maintainer: | |
Description: | PIX Firewall inside interface |
ifType: | ethernetCsmacd (6) |
ifName: | |
Max Speed: | 100.0 Mbits/s |
Ip: | 192.168.1.1 |
======== END =============================
sincerely
Patrick
07-28-2007 10:02 AM
thanks.
do you have simple utility to test snmp?
ben
08-01-2007 07:34 AM
Try SNMP Walk.
http://net-snmp.sourceforge.net/docs/FAQ.html
or
http://www.solarwinds.com/products/toolsets/engineer.aspx
sincerely
Patrick
08-01-2007 01:55 PM
If you are running MS-Windows, My favorite quick tool to test snmp is "Getif" both the 2.2 and 2.3.1 versions work great for quick "point-at-a-device-and see-the-basic-mib-2-stuff"
It can do an snmpwalk too
08-01-2007 03:25 PM
Thanks
ben
08-02-2007 07:44 PM
Well, it is not a browser, but this is great to get instant traffic graphs, the tool is called STG
http://leonidvm.chat.ru/ and if it works, you got snmp running ok.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: