Cisco ACE Load Balancer

[tcolgate]

Unforunately we are only running this against a load of ace module in 6500s, we have a 4710 but no cacti instance running against it. Cisco have changed the MIBs (definitely changes around alerts). I'll add it to my todo list, but I'm not likely to get round to it any time too soon. sorry,

[tcolgate]

I now have this working with a 4710 running 3.2.5, I'm afraid I can't test on 3.2.4. All seems to be fine though.

Are you running contexts? We run them with atleast one context, be sure that when you setup the device in cacti you are talking to the context that the rservers etc live in (you can use community@context as the community string to query a specific context, we have multiple "device" entries per device).

[dmn49]

Is there any possibility to put all rservers from one server farm to one graph?

[mhertrick]

Hi Folks-

I'm afraid I'm not having any luck with this template. Does anyone have this running against an ACE 4710, Version A3(2.4)?

When I run the data query for vservers, I only get one of my server farms. And the rserver query doesn't return anything. Did Cisco change their OIDs? I'm running Cacti 0.8.7e

Best regards,
Rich

Make sure that you use SNMP version 2c or 3; version 1 does not support 64-bit counters.

[artiflo]

Hi,

I made some updates to the ace templates here to support Real Server monitoring, and to convert them to work as a script server (this was a massive performance boost for me).

It's the first time I've exported a template and scripts, but I hope it's of some use.

I have a 4710 A3(2.5) build 3.0(0) with context for comunity and that work prety good.

But I can't find the MID to grab the "Current Opened Connections". Someone find them ?

[guaguadong]

Has anyone seen this issue with this template? I am able to get the graphs for the interfaces and vlans for the ACE but not the vserver connections. when I debug the graph I get the following

RRDTool Command:

/usr/bin/rrdtool graph - \
--imgformat=PNG \
--start=-86400 \
--end=-300 \
--title="*************************" \
--base=1000 \
--height=120 \
--width=500 \
--alt-autoscale-max \
--lower-limit=0 \
--vertical-label="Connections" \
--slope-mode \
--font TITLE:12: \
--font AXIS:8: \
--font LEGEND:10: \
--font UNIT:8: \
DEF:a="/var/lib/cacti/rra/phx-ace_hctotal_228.rrd":NumberOfC:AVERAGE \
DEF:b="/var/lib/cacti/rra/phx-ace_hctotal_228.rrd":NumberOfC:MAX \
CDEF:cdefe=a,UN,INF,UNKN,IF \
AREA:a#157419FF:"Current Connections" \
GPRINTLAST:"Current\:%8.2lf %s" \
GPRINTAVERAGE:"Average\:%8.2lf %s" \
GPRINTMAX:"Maximum\:%8.2lf %s\n" \
AREA:cdefe#8F9286FF:""
RRDTool Says:

OK

My graphs look the same as your graph! I don't know where is problem ? ss_ace_vserver.php have problem ?
Could anyone tell me ?



ps:
I used /usr/bin/php -q /var/www/html/scripts/ss_ace_vserver.php xx.xx.xx.xx 40 2:161:500:xxxx::[None] get NumberOfC 2.39, The Result is correct!
Why The graph is not view?

[jagmeetbhinder]

My VLAN and CPU graph for ACE LB is fine however I am getting nan in vserver and realserver graphs can you please help.
I am not able to figure out why its not working for me.

[andrewpaulb]

I have a slight problem.. we upgraded to the latest ace firmware and Vservers aren't being added.. only the last Vserver found and Real servers none are found.

+ Executing script query '"/usr/bin/php" -q /var/www/cacti/scripts/ss_ace_vserver.php *.*.*.* 190 2:161:500:****:::MD5::[None] query VServer'
+ Found item [VirtualServer='VS_clftp.**.**_80'] index:
+ Found item [VirtualServer='VS_DynamicDNS01_53'] index:
+ Found item [VirtualServer='VS_DynamicDNS01_80'] index:
+ Found item [VirtualServer='VS_DynamicDNS01_TCP_53'] index:
+ Found item [VirtualServer='VS_clftp.**.**'] index:
+ Found item [VirtualServer='VS_inmail.**.**_25'] index:
+ Found item [VirtualServer='VS_boutmail.**.**'] index:
+ Found item [VirtualServer='VS_outmail.**.**_25'] index:
+ Found item [VirtualServer='VS_mail.**.**_IMAP143'] index:
+ Found item [VirtualServer='VS_mail.**.**_POP3110'] index:
+ Found item [VirtualServer='VS_mail.**.**'] index:
+ Found item [VirtualServer='VS_mail2.**.**'] index:
+ Found item [VirtualServer='VS_mail3.**.**'] index:
+ Found item [VirtualServer='VS_ntp.**.**'] index:
+ Found item [VirtualServer='VS_engine2.**.**_tcp_53'] index:
+ Found item [VirtualServer='VS_engine4.**.**_53'] index:
+ Found item [VirtualServer='VS_engine4.**.**_tcp_53'] index:
+ Found item [VirtualServer='VS_engine2.**.**_tcp_10000'] index:
+ Found item [VirtualServer='VS_engine4.**.**_tcp_10000'] index:
+ Found item [VirtualServer='VS_mail.**.**_25'] index:
+ Found item [VirtualServer='VS_mail.**.**_IMAP143'] index:
+ Found item [VirtualServer='VS_mail.**.**_POP3110'] index:
+ Found item [VirtualServer='VS_mail2.**.**_25'] index:
+ Found item [VirtualServer='VS_engine2.**.**_53'] index:
+ Found item [VirtualServer='VS_cachedns.**.**_53'] index:
+ Found item [VirtualServer='VS_global.**.**'] index:
+ Found item [VirtualServer='VS_inmail3.**.**_SMTP25'] index:
+ Found item [VirtualServer='VS_engine6_8.**.**_ISP_DSL'] index:
+ Executing script query '"/usr/bin/php" -q /var/www/cacti/scripts/ss_ace_vserver.php **.**.**.** 190 2:161:500:****:::MD5::[None] query Module'

Only - Last VServer is being added to graph : VS_engine6_8


+ Running data query [11].
+ Found type = '6' [Script Query - Script Server].
+ Found data query XML file at '/var/www/cacti/resource/script_server/ace_rserver.xml'
+ XML file parsed ok.
+ Executing script for num of indexes '"/usr/bin/php" -q /var/www/cacti/scripts/ss_ace_rserver.php 172.16.5.109 190 2:161:500:6i6ko:::MD5::[None] num_indexes'
+ Found number of indexes: 0
+ Executing script for list of indexes '"/usr/bin/php" -q /var/www/cacti/scripts/ss_ace_rserver.php 172.16.5.109 190 2:161:500:6i6ko:::MD5::[None] index' Index Count: 0
+ Executing script query '"/usr/bin/php" -q /var/www/cacti/scripts/ss_ace_rserver.php **.**.**.** 190 2:161:500:6i6ko:::MD5::[None] query RealName'
+ Executing script query '"/usr/bin/php" -q /var/www/cacti/scripts/ss_ace_rserver.php **.**.**.** 190 2:161:500:6i6ko:::MD5::[None] query Module'
+ Executing script query '"/usr/bin/php" -q /var/www/cacti/scripts/ss_ace_rserver.php **.**.**.** 190 2:161:500:6i6ko:::MD5::[None] query FarmName'
+ Executing script query '"/usr/bin/php" -q /var/www/cacti/scripts/ss_ace_rserver.php **.**.**.** 190 2:161:500:6i6ko:::MD5::[None] query Port'
+ Executing script query '"/usr/bin/php" -q /var/www/cacti/scripts/ss_ace_rserver.php **.**.**.** 190 2:161:500:6i6ko:::MD5::[None] query RealIndex'

None Found

What can the problem be ?

[andrewpaulb]

Updated OID of Concurrent connections to .1.3.6.1.4.1.9.9.254.1.1.1.1.3.1 and its working fine..

[jimcjulsonjr]

Updated OID of Concurrent connections to .1.3.6.1.4.1.9.9.254.1.1.1.1.3.1 and its working fine..

Not sure if you are still active with this or not, but we are running multiple ACE's in multiple sites, and thus far, I can only get ACE CPU graphs, and VLAN Interfaces graphing. I, like many others, seem to be having issues with vSERVERS and rSERVERS. Here's some base info:

ACE MODELS: ACE30-MOD-K9 (ACE Modules in 7609s)
ACE SYSTEM: A4(2.1)
ACE IMAGE: c6ace-t1k9-mz.A4_2_1.bin
SNMP: v2c

My gut is that the OID's are no longer valid. Looking at these threads, I'm seeing some very old posts surrounding this. We are trying to get rid of these things, but until we do, we need this functionality. I DID try to update the ss_ace_rserver.php and ss_ace_vserver.php OID's to what you suggested, and if I drop the ".1" off the end of your OID above, I can walk that string and it returns the value we expect, but I can't get the RRD's to even generate. It's only the graphs for RSERVER and VSERVER that are the issues...

Final note: I can do a verbose query of the vSERVER and it returns a ton of data. We show 187 VIPS, however only the LAST one will actually add, and as I stated, no graphs. I guess I will continue to try various MIB's.

[NaT1]

Updated OID of Concurrent connections to .1.3.6.1.4.1.9.9.254.1.1.1.1.3.1 and its working fine..

Not sure if you are still active with this or not, but we are running multiple ACE's in multiple sites, and thus far, I can only get ACE CPU graphs, and VLAN Interfaces graphing. I, like many others, seem to be having issues with vSERVERS and rSERVERS. Here's some base info:

ACE MODELS: ACE30-MOD-K9 (ACE Modules in 7609s)
ACE SYSTEM: A4(2.1)
ACE IMAGE: c6ace-t1k9-mz.A4_2_1.bin
SNMP: v2c

My gut is that the OID's are no longer valid. Looking at these threads, I'm seeing some very old posts surrounding this. We are trying to get rid of these things, but until we do, we need this functionality. I DID try to update the ss_ace_rserver.php and ss_ace_vserver.php OID's to what you suggested, and if I drop the ".1" off the end of your OID above, I can walk that string and it returns the value we expect, but I can't get the RRD's to even generate. It's only the graphs for RSERVER and VSERVER that are the issues...

Final note: I can do a verbose query of the vSERVER and it returns a ton of data. We show 187 VIPS, however only the LAST one will actually add, and as I stated, no graphs. I guess I will continue to try various MIB's.

Me too can't get this to work.
the OIDs vserver.php referred to is :

Code: Select all

	"FarmName" => ".1.3.6.1.4.1.9.9.161.1.4.2.1.2",
	"NumberOfC" => ".1.3.6.1.4.1.9.9.161.1.4.2.1.6",
	"HCTotal" => ".1.3.6.1.4.1.9.9.161.1.4.2.1.7",

and I'm getting the classmap names with the first one but I need to get the connections number mapped to the serverfarm and not to the classmap.
As I see, 2nd OID .1.3.6.1.4.1.9.9.161.1.4.2.1.6 is getting connections per CM, which ACE shows as 0 (under "curr conns" field below) even-though the specific SF is using this CM and has connections (by "show serverfarm" command).

Code: Select all

Ace-Primary# sh service-policy xxxxx class-map zzzzz detail

Status     : ACTIVE
Description: -----------------------------------------
Interface: vlan ***
  service-policy: xxxxx 
    class: zzzzz 
     VIP Address:                              Protocol:  Port:     
     *********                                tcp    eq   ***
      loadbalance:
        L7 loadbalance policy: *********
       ..
       ..
       ..
       curr conns       : 0    , hit count        : 89        
       ..
       ..
        client pkt count : 2041      , client byte count: 115042              
        server pkt count : 1769      , server byte count: 283287              
        conn-rate-limit      : -         , drop-count : -         
        bandwidth-rate-limit : -         , drop-count : -         
        L7 Loadbalance policy : *********
          class/match : class-default
            LB action : 
               primary serverfarm: *********
            ...
            ...

I believe ACE shows this info wrong and number of connections should be mapped to each CM but obviously it's not, must be other proper way to get the connections from.

If anyone of you guys know better way to pull out the connections per SF or CM, plz let us know.

ACE30-MOD-04-K9
Version A5(2.2a)
SNMP ver. v2c


AN UPDATE:
Seems like its OK after all. The right thing to measure is the CM connections (where "FarmName" => ".1.3.6.1.4.1.9.9.161.1.4.2.1.2") and not the actual SF as I thought.
SF MIBs not holding any connection info besides the SF name, R-servers do that.

Anyway for me both Rservers/Vservers queries and graphs are working.

[fredrico]

Hi,

Hi, someone could use this template? I tried with my Cisco ACE and did not work, someone could help me?

Fredux

[r_kleineisel]

This plugin does not work om my new cacti server. It's a CentOS 7 server with cacti-0.8.8b-7.el7.noarch. I have a Cisco 6509 with ACE30.

The Data Query Debug Information shows:

+ Running data query [14].
+ Found type = '6' [Script Query - Script Server].
+ Found data query XML file at '/usr/share/cacti/resource/script_server/ace_vserver.xml'
+ XML file parsed ok.
+ Executing script for num of indexes '"/usr/bin/php" -q /usr/share/cacti/scripts/ss_ace_vserver.php 10.0.0.42 704 2:161MySNMPPassw0rd:::MD5::[None] num_indexes'
+ Found number of indexes: 6
+ Executing script for list of indexes '"/usr/bin/php" -q /usr/share/cacti/scripts/ss_ace_vserver.php 10.0.0.42 704 2:161MySNMPPassw0rd:::MD5::[None] index' Index Count: 6
+ Found index:
+ Found index:
+ Found index:
+ Found index:
+ Found index:
+ Found index:
+ Executing script query '"/usr/bin/php" -q /usr/share/cacti/scripts/ss_ace_vserver.php 10.0.0.42 704 2:161MySNMPPassw0rd:::MD5::[None] query VServer'
+ Found item [VirtualServer='Soarian'] index:
+ Found item [VirtualServer='Soarian_redirect'] index:
+ Found item [VirtualServer='Soarian_sccrt'] index:
+ Found item [VirtualServer='Soarian_sccrt_redirect'] index:
+ Found item [VirtualServer='Soarian_final_redirect'] index:
+ Found item [VirtualServer='Soarian_final_sccrt_redirect'] index:
+ Executing script query '"/usr/bin/php" -q /usr/share/cacti/scripts/ss_ace_vserver.php 10.0.0.42 704 2:161MySNMPPassw0rd:::MD5::[None] query Module'
+ Found item [Module=''] index:
+ Found item [Module=''] index:
+ Found item [Module=''] index:
+ Found item [Module=''] index:
+ Found item [Module=''] index:
+ Found item [Module=''] index:
+ Executing script query '"/usr/bin/php" -q /usr/share/cacti/scripts/ss_ace_vserver.php 10.0.0.42 704 2:161MySNMPPassw0rd:::MD5::[None] query Index'
+ Found item [Index=''] index:
+ Found item [Index=''] index:
+ Found item [Index=''] index:
+ Found item [Index=''] index:
+ Found item [Index=''] index:
+ Found item [Index=''] index:


When I run "/usr/bin/php -q /usr/share/cacti/scripts/ss_ace_vserver.php 10.0.0.42 704 '2:161MySNMPPassw0rd:::MD5::[None]' index" in the CLI I get this response:

PHP Notice: Undefined index: index in /var/lib/cacti/scripts/ss_ace_vserver.php on line 65
PHP Notice: Undefined index: index in /var/lib/cacti/scripts/ss_ace_vserver.php on line 65
PHP Notice: Undefined index: index in /var/lib/cacti/scripts/ss_ace_vserver.php on line 65
PHP Notice: Undefined index: index in /var/lib/cacti/scripts/ss_ace_vserver.php on line 65
PHP Notice: Undefined index: index in /var/lib/cacti/scripts/ss_ace_vserver.php on line 65
PHP Notice: Undefined index: index in /var/lib/cacti/scripts/ss_ace_vserver.php on line 65

[nicolatron]

I was having the same problem as r_kleineisel.

Seems like in my case the function cacti_snmp_walk is returning values like:
[oid] => iso.3.6.1.4.1.9.9.470.1.1.3.1.11.7.11.83.69.7
while in the file ss_ace_rserver.php there is a regular expression that expects to parse values like:
1.3.6.1.4.1.9.9.470.1.1.3.1.11.7.11.83.69.7

So all i did was changing the "1" for "iso" line 120 in ss_ace_rserver.php:
if ( ereg ("iso\.3\.6\.1\.4\.1\.9\.9\.470\.1\.1\.3\.1\.11\.([\.0-9]*)$", $arr[$i]["oid"], $regs)){
to:
if ( ereg ("1\.3\.6\.1\.4\.1\.9\.9\.470\.1\.1\.3\.1\.11\.([\.0-9]*)$", $arr[$i]["oid"], $regs)){

And the same in ss_ace_vserver.php, in line 104:
if ( ereg ("1\.3\.6\.1\.4\.1\.9\.9\.161\.1\.4\.2\.1\.2\.([0-9]*)\.([0-9]*)$", $arr[$i]["oid"], $regs)){
changed to:
if ( ereg ("iso\.3\.6\.1\.4\.1\.9\.9\.161\.1\.4\.2\.1\.2\.([0-9]*)\.([0-9]*)$", $arr[$i]["oid"], $regs)){

And it is working now.

By the way, in my case i have concurrent connections in .1.3.6.1.4.1.9.9.254.1.1.1.1.3.7 for one of the ace's and .1.3.6.1.4.1.9.9.254.1.1.1.1.3.9 for the other.

snmpwalk -On -v2c -c ace_community[@context] ace_ip .1.3.6.1.4.1.9.9.254.1.1.1.1.3
seems to show the right value to be used for concurrent connections quite well