pix firewall template

[mcutting]

Shane - a couple of questions

1. Is the community name correct on both the PIX and Cacti
2. Do you have any ACL's on the PIX that would prevent you from obtaining SNMP data
3. Are you able to ping the PIX from the monitoring host ?
4. Are you able to perform an SNMP walk from the monitoring host to the PIX
5. Most PIX devices only work with SNMP v1 - have you tried this ?

The above are just some suggestions - hope they are of some use.

Regds

[sabin16]

Thanks a lot for your help. The problem is that I forgot to put the snmp-server statement on the PIX.
For future reference you must put in

(On the Pix Firewall)
snmp-server host inside XXXX.XXXX.XXXX.XXXX
snmp-server community public

Where the XXXX is the IP address of the Cacti Server

[mauMI]

Hi can any one help me ????
i used the xml template found on this site to enable PIX CPU memory connections measurements but it doesn' t work. I correctly loaded and launched data query on a PIX 6.3 version with the following output:



+ Running data query [17].
+ Found type = '3' [snmp query].
+ Found data query XML file at '/usr/share/cacti/site/resource/snmp_queries/cacti_host_template_cisco_pix_firewall2.xml'
+ XML file parsed ok.
+ Executing SNMP walk for list of indexes @ ''
+ Index found at OID: '1.3.6.1.2.1.1.1.0' value: 'Cisco PIX Firewall Version 6.3(5)'
+ Index found at OID: '1.3.6.1.2.1.1.2.0' value: 'OID: .1.3.6.1.4.1.9.1.392'
+ Index found at OID: '1.3.6.1.2.1.1.3.0' value: '1201101300'
+ Index found at OID: '1.3.6.1.2.1.1.4.0' value: 'RD NET Firewall'
+ Index found at OID: '1.3.6.1.2.1.1.5.0' value: 'fw525-1.nsn.com.Milano'
+ Index found at OID: '1.3.6.1.2.1.1.6.0' value: 'RD NET Milan Cinisello'
+ Index found at OID: '1.3.6.1.2.1.1.7.0' value: '4'
+ Index found at OID: '1.3.6.1.2.1.2.1.0' value: '7'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.1.1' value: '1'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.1.2' value: '2'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.1.3' value: '3'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.1.4' value: '4'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.1.5' value: '5'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.1.6' value: '6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.1.7' value: '7'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.2.1' value: 'PIX Firewall outside interface'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.2.2' value: 'PIX Firewall inside interface'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.2.3' value: 'PIX Firewall intf2 interface'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.2.4' value: 'PIX Firewall labs interface'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.2.5' value: 'PIX Firewall dmz1 interface'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.2.6' value: 'PIX Firewall intf4 interface'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.2.7' value: 'PIX Firewall intf5 interface'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.3.1' value: '6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.3.2' value: '6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.3.3' value: '6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.3.4' value: '6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.3.5' value: '6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.3.6' value: '6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.3.7' value: '6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.4.1' value: '1500'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.4.2' value: '1500'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.4.3' value: '1500'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.4.4' value: '1500'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.4.5' value: '1500'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.4.6' value: '1500'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.4.7' value: '1500'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.5.1' value: '100000000'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.5.2' value: '10000000'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.5.3' value: '1000000000'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.5.4' value: '100000000'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.5.5' value: '100000000'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.5.6' value: '10000000'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.5.7' value: '10000000'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.6.1' value: '00:1B:54:D0:E0:C6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.6.2' value: '00:1B:54:D0:E0:C7'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.6.3' value: '00:0E:0C:B4:EB:BC'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.6.4' value: '00:0F:A3:D2:12:10'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.6.5' value: '00:0F:A3:D2:12:11'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.6.6' value: '00:0F:A3:D2:12:12'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.6.7' value: '00:0F:A3:D2:12:13'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.7.1' value: '1'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.7.2' value: '1'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.7.3' value: '2'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.7.4' value: '1'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.7.5' value: '1'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.7.6' value: '2'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.7.7' value: '2'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.8.1' value: '1'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.8.2' value: '2'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.8.3' value: '2'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.8.4' value: '1'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.8.5' value: '1'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.8.6' value: '2'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.8.7' value: '2'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.9.1' value: '1209141312'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.9.2' value: '4004108608'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.9.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.9.4' value: '618392960'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.9.5' value: '2709141312'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.9.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.9.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.10.1' value: '2344186979'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.10.2' value: '16246772'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.10.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.10.4' value: '2295787564'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.10.5' value: '14588989'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.10.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.10.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.11.1' value: '2378220988'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.11.2' value: '339'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.11.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.11.4' value: '1071582608'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.11.5' value: '162611'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.11.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.11.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.12.1' value: '3794'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.12.2' value: '261096'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.12.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.12.4' value: '22597402'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.12.5' value: '46378'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.12.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.12.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.13.1' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.13.2' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.13.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.13.4' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.13.5' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.13.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.13.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.14.1' value: '20'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.14.2' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.14.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.14.4' value: '314'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.14.5' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.14.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.14.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.15.1' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.15.2' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.15.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.15.4' value: '3174'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.15.5' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.15.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.15.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.16.1' value: '2758104763'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.16.2' value: '248964'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.16.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.16.4' value: '541670579'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.16.5' value: '417805559'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.16.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.16.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.17.1' value: '2065838732'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.17.2' value: '4145'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.17.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.17.4' value: '4275128935'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.17.5' value: '819742'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.17.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.17.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.18.1' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.18.2' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.18.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.18.4' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.18.5' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.18.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.18.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.19.1' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.19.2' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.19.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.19.4' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.19.5' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.19.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.19.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.20.1' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.20.2' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.20.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.20.4' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.20.5' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.20.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.20.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.21.1' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.21.2' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.21.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.21.4' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.21.5' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.21.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.21.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.22.1' value: 'OID: .0.0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.22.2' value: 'OID: .0.0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.22.3' value: 'OID: .0.0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.22.4' value: 'OID: .0.0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.22.5' value: 'OID: .0.0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.22.6' value: 'OID: .0.0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.22.7' value: 'OID: .0.0'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.1.10.44.208.1' value: '10.44.208.1'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.1.10.44.209.7' value: '10.44.209.7'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.1.10.50.254.76' value: '10.50.254.76'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.1.192.168.1.3' value: '192.168.1.3'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.2.10.44.208.1' value: '5'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.2.10.44.209.7' value: '4'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.2.10.50.254.76' value: '1'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.2.192.168.1.3' value: '2'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.3.10.44.208.1' value: '255.255.255.0'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.3.10.44.209.7' value: '255.255.255.0'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.3.10.50.254.76' value: '255.255.255.248'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.3.192.168.1.3' value: '255.255.255.0'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.4.10.44.208.1' value: '0'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.4.10.44.209.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.4.10.50.254.76' value: '0'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.4.192.168.1.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.5.10.44.208.1' value: '65535'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.5.10.44.209.7' value: '65535'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.5.10.50.254.76' value: '65535'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.5.192.168.1.3' value: '65535'
+ Found data query XML file at '/usr/share/cacti/site/resource/snmp_queries/cacti_host_template_cisco_pix_firewall2.xml'
+ Found data query XML file at '/usr/share/cacti/site/resource/snmp_queries/cacti_host_template_cisco_pix_firewall2.xml'
+ Found data query XML file at '/usr/share/cacti/site/resource/snmp_queries/cacti_host_template_cisco_pix_firewall2.xml'




in the end pix (Verbose Query) Uptime Goes Backwards Success [0 Items, 0 Rows]
I cannot generate any graphs!!!!

thanks to who is able to help me!!!

mauro

[ruffsense]

Is there anyway to get the throughput of the pix firewall?

[anerot]

Hi ruffsense,

is your PIX runing snmp V2 ?
do you get answers on the HCinoctet (1.3.6.1.2.1.31.1.1.1.6) ?

I yes, I have a template for you, never exported yet.
It works for any devices and graph the "Total Throughput".
- You can specify the "Constructor Limit" (in Octet = Bytes, and not bit) who depends of the device performance (ref your product datasheet)
- You can specify by DataSource (Device) the interface names to exclude (iLO:Admin:Boundary). The name is the interface description (e.g : Ethernet0/0). The list separator is ':'.
- It does a sum of any HCinOctet counters and exclude the interfaces having a "Description" begining with what you defined as"ifDescr_excluded"

graph_image.png (33.21 KiB) Viewed 2413 times

datasource.PNG (5.15 KiB) Viewed 2413 times

Regards