cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1120
Views
0
Helpful
6
Replies

MRTG with snmp

bma
Level 1
Level 1

Hi

Pix 6.3, enable snmp-server host to a windows 2003 server running MRTG. When MRTG try to get traffic from PIX inside interface, nothing show up. No errors in pix and windows, ping is fine. Could help to list some documents about PIX 6.3 snmp setup with MRTG?

Thanks

ben

6 Replies 6

Patrick Iseli
Level 7
Level 7

Try with that ! Replace the community string and IP. Hope that helps.

======== BEGINNING ===========================

# Created by v4only

### Global Config Options

# for UNIX

WorkDir: /var/www/localhost/htdocs/mrtg

Htmldir: /var/www/localhost/htdocs/mrtg

Imagedir: /var/www/localhost/htdocs/mrtg

IconDir: /var/www/localhost/htdocs/mrtg/icons

EnableIPv6: no

Target[pix-cpu]:.1.3.6.1.4.1.9.9.109.1.1.1.1.5.1&.1.3.6.1.4.1.9.9.109.1.1.1.1.5.1:snmp-password@111.111.111.1

RouterUptime[pix-cpu]:snmp-password@111.111.111.1

Title[pix-cpu]: PIX 501 CPU LOAD

PageTop[pix-cpu]:

PIX 501 : CPU Load %

MaxBytes[pix-cpu]:100

ShortLegend[pix-cpu]:%

XSize[pix-cpu]:380

YSize[pix-cpu]:100

YLegend[pix-cpu]: CPU Utilization

Legend1[pix-cpu]: 5 sec CPU load %

Legend2[pix-cpu]: 1 min CPU load %

Legend3[pix-cpu]: Maximal 5 sec CPU load %

Legend4[pix-cpu]: Maximal 1 min CPU load %

LegendI[pix-cpu]: 5 sec load:

LegendO[pix-cpu]: 1 min load:

Options[pix-cpu]: gauge, growright, nopercent

### Interface 1 >> Descr: 'PIX-Firewall-'outside'-interface' | Name: ''| Ip: '111.111.111.1' | Eth: '00-0a-f4-cc-ee-cc' ###

### The following interface is commented out because:

### * --ifref=name is not unique for this interface

#

Target[pix_outside]: 1:snmp-password@111.111.111.1

SetEnv[pix_outside]: MRTG_INT_IP="111.111.111.1"

#MRTG_INT_DESCR="PIX-Firewall-'outside'-interface"

MaxBytes[pix_outside]: 1250000

Title[pix_outside]: 1 -- PIX501

PageTop[pix_outside]:

Outside -- PIX501

System: PIX501 in Neverland
Maintainer: admin@domain.com
Description:PIX Firewall outside interface
ifType: ethernetCsmacd (6)
ifName:
Max Speed: 10.0 Mbits/s
Ip: 111.111.111.1 ()

### Interface 2 >> Descr: 'PIX-Firewall-'inside'-interface' | Name: '' |Ip: '192.168.1.1' | Eth: '00-0a-f4-bb-ff-ee' ###

### The following interface is commented out because:

### * --ifref=name is not unique for this interface

#

Target[pix_inside]: 2:snmp-password@111.111.111.1

SetEnv[pix_inside]: MRTG_INT_IP="192.168.1.1"

#MRTG_INT_DESCR="PIX Firewall inside interface"

MaxBytes[pix_inside]: 12500000

Title[pix_inside]: INSIDE -- PIX 501

PageTop[pix_inside]:

INSIDE -- PIX 501

System: PIX501 in Neverland
Maintainer:
Description: PIX Firewall inside interface
ifType: ethernetCsmacd (6)
ifName:
Max Speed: 100.0 Mbits/s
Ip: 192.168.1.1

======== END =============================

sincerely

Patrick

thanks.

do you have simple utility to test snmp?

ben

If you are running MS-Windows, My favorite quick tool to test snmp is "Getif" both the 2.2 and 2.3.1 versions work great for quick "point-at-a-device-and see-the-basic-mib-2-stuff"

It can do an snmpwalk too

Thanks

ben

Well, it is not a browser, but this is great to get instant traffic graphs, the tool is called STG

http://leonidvm.chat.ru/ and if it works, you got snmp running ok.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: