pix firewall template

Templates, scripts for templates, scripts and requests for templates.

Moderators: Developers, Moderators

mcutting
Cacti Guru User
Posts: 1884
Joined: Mon Oct 16, 2006 5:57 am
Location: United Kingdom
Contact:

Post by mcutting »

Shane - a couple of questions

1. Is the community name correct on both the PIX and Cacti
2. Do you have any ACL's on the PIX that would prevent you from obtaining SNMP data
3. Are you able to ping the PIX from the monitoring host ?
4. Are you able to perform an SNMP walk from the monitoring host to the PIX
5. Most PIX devices only work with SNMP v1 - have you tried this ?

The above are just some suggestions - hope they are of some use.

Regds
Cacti Version 0.8.8b
Cacti OS Ubuntu LTS
RRDTool Version RRDTool 1.4.7
Poller Information
Type SPINE 0.8.8b
sabin16
Posts: 7
Joined: Mon Apr 06, 2009 5:08 pm

Post by sabin16 »

Thanks a lot for your help. The problem is that I forgot to put the snmp-server statement on the PIX.
For future reference you must put in

(On the Pix Firewall)
snmp-server host inside XXXX.XXXX.XXXX.XXXX
snmp-server community public

Where the XXXX is the IP address of the Cacti Server
mauMI
Posts: 1
Joined: Wed Jul 13, 2011 7:46 am

Re: pix firewall template does not work no graphs at all!!!

Post by mauMI »

Hi can any one help me ????
i used the xml template found on this site to enable PIX CPU memory connections measurements but it doesn' t work. I correctly loaded and launched data query on a PIX 6.3 version with the following output:



+ Running data query [17].
+ Found type = '3' [snmp query].
+ Found data query XML file at '/usr/share/cacti/site/resource/snmp_queries/cacti_host_template_cisco_pix_firewall2.xml'
+ XML file parsed ok.
+ Executing SNMP walk for list of indexes @ ''
+ Index found at OID: '1.3.6.1.2.1.1.1.0' value: 'Cisco PIX Firewall Version 6.3(5)'
+ Index found at OID: '1.3.6.1.2.1.1.2.0' value: 'OID: .1.3.6.1.4.1.9.1.392'
+ Index found at OID: '1.3.6.1.2.1.1.3.0' value: '1201101300'
+ Index found at OID: '1.3.6.1.2.1.1.4.0' value: 'RD NET Firewall'
+ Index found at OID: '1.3.6.1.2.1.1.5.0' value: 'fw525-1.nsn.com.Milano'
+ Index found at OID: '1.3.6.1.2.1.1.6.0' value: 'RD NET Milan Cinisello'
+ Index found at OID: '1.3.6.1.2.1.1.7.0' value: '4'
+ Index found at OID: '1.3.6.1.2.1.2.1.0' value: '7'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.1.1' value: '1'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.1.2' value: '2'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.1.3' value: '3'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.1.4' value: '4'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.1.5' value: '5'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.1.6' value: '6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.1.7' value: '7'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.2.1' value: 'PIX Firewall outside interface'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.2.2' value: 'PIX Firewall inside interface'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.2.3' value: 'PIX Firewall intf2 interface'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.2.4' value: 'PIX Firewall labs interface'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.2.5' value: 'PIX Firewall dmz1 interface'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.2.6' value: 'PIX Firewall intf4 interface'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.2.7' value: 'PIX Firewall intf5 interface'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.3.1' value: '6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.3.2' value: '6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.3.3' value: '6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.3.4' value: '6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.3.5' value: '6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.3.6' value: '6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.3.7' value: '6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.4.1' value: '1500'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.4.2' value: '1500'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.4.3' value: '1500'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.4.4' value: '1500'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.4.5' value: '1500'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.4.6' value: '1500'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.4.7' value: '1500'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.5.1' value: '100000000'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.5.2' value: '10000000'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.5.3' value: '1000000000'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.5.4' value: '100000000'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.5.5' value: '100000000'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.5.6' value: '10000000'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.5.7' value: '10000000'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.6.1' value: '00:1B:54:D0:E0:C6'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.6.2' value: '00:1B:54:D0:E0:C7'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.6.3' value: '00:0E:0C:B4:EB:BC'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.6.4' value: '00:0F:A3:D2:12:10'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.6.5' value: '00:0F:A3:D2:12:11'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.6.6' value: '00:0F:A3:D2:12:12'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.6.7' value: '00:0F:A3:D2:12:13'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.7.1' value: '1'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.7.2' value: '1'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.7.3' value: '2'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.7.4' value: '1'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.7.5' value: '1'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.7.6' value: '2'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.7.7' value: '2'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.8.1' value: '1'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.8.2' value: '2'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.8.3' value: '2'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.8.4' value: '1'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.8.5' value: '1'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.8.6' value: '2'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.8.7' value: '2'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.9.1' value: '1209141312'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.9.2' value: '4004108608'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.9.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.9.4' value: '618392960'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.9.5' value: '2709141312'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.9.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.9.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.10.1' value: '2344186979'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.10.2' value: '16246772'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.10.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.10.4' value: '2295787564'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.10.5' value: '14588989'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.10.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.10.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.11.1' value: '2378220988'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.11.2' value: '339'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.11.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.11.4' value: '1071582608'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.11.5' value: '162611'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.11.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.11.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.12.1' value: '3794'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.12.2' value: '261096'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.12.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.12.4' value: '22597402'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.12.5' value: '46378'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.12.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.12.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.13.1' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.13.2' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.13.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.13.4' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.13.5' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.13.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.13.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.14.1' value: '20'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.14.2' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.14.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.14.4' value: '314'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.14.5' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.14.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.14.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.15.1' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.15.2' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.15.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.15.4' value: '3174'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.15.5' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.15.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.15.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.16.1' value: '2758104763'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.16.2' value: '248964'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.16.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.16.4' value: '541670579'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.16.5' value: '417805559'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.16.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.16.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.17.1' value: '2065838732'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.17.2' value: '4145'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.17.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.17.4' value: '4275128935'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.17.5' value: '819742'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.17.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.17.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.18.1' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.18.2' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.18.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.18.4' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.18.5' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.18.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.18.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.19.1' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.19.2' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.19.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.19.4' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.19.5' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.19.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.19.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.20.1' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.20.2' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.20.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.20.4' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.20.5' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.20.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.20.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.21.1' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.21.2' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.21.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.21.4' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.21.5' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.21.6' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.21.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.22.1' value: 'OID: .0.0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.22.2' value: 'OID: .0.0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.22.3' value: 'OID: .0.0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.22.4' value: 'OID: .0.0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.22.5' value: 'OID: .0.0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.22.6' value: 'OID: .0.0'
+ Index found at OID: '1.3.6.1.2.1.2.2.1.22.7' value: 'OID: .0.0'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.1.10.44.208.1' value: '10.44.208.1'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.1.10.44.209.7' value: '10.44.209.7'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.1.10.50.254.76' value: '10.50.254.76'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.1.192.168.1.3' value: '192.168.1.3'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.2.10.44.208.1' value: '5'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.2.10.44.209.7' value: '4'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.2.10.50.254.76' value: '1'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.2.192.168.1.3' value: '2'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.3.10.44.208.1' value: '255.255.255.0'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.3.10.44.209.7' value: '255.255.255.0'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.3.10.50.254.76' value: '255.255.255.248'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.3.192.168.1.3' value: '255.255.255.0'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.4.10.44.208.1' value: '0'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.4.10.44.209.7' value: '0'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.4.10.50.254.76' value: '0'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.4.192.168.1.3' value: '0'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.5.10.44.208.1' value: '65535'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.5.10.44.209.7' value: '65535'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.5.10.50.254.76' value: '65535'
+ Index found at OID: '1.3.6.1.2.1.4.20.1.5.192.168.1.3' value: '65535'
+ Found data query XML file at '/usr/share/cacti/site/resource/snmp_queries/cacti_host_template_cisco_pix_firewall2.xml'
+ Found data query XML file at '/usr/share/cacti/site/resource/snmp_queries/cacti_host_template_cisco_pix_firewall2.xml'
+ Found data query XML file at '/usr/share/cacti/site/resource/snmp_queries/cacti_host_template_cisco_pix_firewall2.xml'




in the end pix (Verbose Query) Uptime Goes Backwards Success [0 Items, 0 Rows]
I cannot generate any graphs!!!!

thanks to who is able to help me!!!

mauro
ruffsense
Posts: 18
Joined: Tue Jan 11, 2011 5:28 am

Re: pix firewall template

Post by ruffsense »

Is there anyway to get the throughput of the pix firewall?
anerot
Posts: 7
Joined: Thu Mar 05, 2009 10:12 am
Location: Paris

Re: pix firewall template

Post by anerot »

Hi ruffsense,

is your PIX runing snmp V2 ?
do you get answers on the HCinoctet (1.3.6.1.2.1.31.1.1.1.6) ?

I yes, I have a template for you, never exported yet.
It works for any devices and graph the "Total Throughput".
- You can specify the "Constructor Limit" (in Octet = Bytes, and not bit) who depends of the device performance (ref your product datasheet)
- You can specify by DataSource (Device) the interface names to exclude (iLO:Admin:Boundary). The name is the interface description (e.g : Ethernet0/0). The list separator is ':'.
- It does a sum of any HCinOctet counters and exclude the interfaces having a "Description" begining with what you defined as"ifDescr_excluded"
graph_image.png
graph_image.png (33.21 KiB) Viewed 2295 times
datasource.PNG
datasource.PNG (5.15 KiB) Viewed 2295 times

Regards
Attachments
cacti_graph_template_interface_-_total_throughput.zip
(5.14 KiB) Downloaded 240 times
Post Reply

Who is online

Users browsing this forum: No registered users and 8 guests