Cisco FWSM?

freitag · Post by **freitag** » Thu Jul 28, 2005 4:25 pm

I'm trying to gather stats on a PIX FWSM 2.2(1) using 0.8.6f. I have tried creating templates found on the internet that utilize the following OIDs:

Total Connections: 1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6
Mem: 1.3.6.1.4.1.9.9.48.1.1.1.5.1
CPU: 1.3.6.1.4.1.9.9.109.1.1.1.1.4.1
I can do successful snmpget's against all of the above OIDs from the server running cacti. I was able to make all of the above work under MRTG.

My poller settings are set to SNMP Only.

Graphs appear - but they contain no data.

Anyone have some ideas to try? How about interface stats?

Thanks in advance.

Ben

wan-geek · Post by **wan-geek** » Wed Sep 28, 2005 1:13 pm

I'm seeing the -exact- same behavior. I can see valid SNMP results polled...but graphs are empty.

I'm debugging and will let the group know if/when I find the root cause.

-Chris

linebacker · Post by **linebacker** » Tue Oct 18, 2005 11:33 am

Anyone have information on why the PIX firewall template does not populate from a PIX FWSM? I too get valid snmp responses, but nothing in the graphs.

wan-geek · Post by **wan-geek** » Tue Jan 10, 2006 3:30 am

Not sure what was causing the empty graphs...but I have created a new template from scratch that is plotting FWSM CPU.

Try this template out.

Cheers,
-Chris

ckinsolving · Post by **ckinsolving** » Sun Sep 28, 2008 9:46 am

All,
I am having trouble getting an FWSM to list any interfaces to be graphed using cacti version 0.8.7b. Do you have any suggestions?

warnesj · Post by **warnesj** » Mon Sep 29, 2008 11:16 am

I'm running Cacti 0.8.7b and I'm using an ASA template that is basically a copy of the PIX template that is available in the forums here. I'm getting stats on all the interfaces, the CPU, memory, and number of active sessions.

I'm not graphing any of the VPN or RAS related stuff that is also in this template because I don't have any VPN's terminating to my FWSM, they terminate to my VPN-SPA. But anyway, see if this template helps at all.

And yes, the number of errors on my INSIDE interface is suppose to be that high. We do outbound port blocking from our network and all attempts to access a blocked port show up as a discard on the graph.

cdnvballer · Post by **cdnvballer** » Mon Jan 26, 2009 5:17 pm

how do I get this template to work with 0.8.6j?

Post by **gandalf** » Sat Jan 31, 2009 4:40 am

By any means, don't do so. Please upgrade instead. We do not support 086* versions any more.
Reinhard

cdnvballer · Post by **cdnvballer** » Thu Feb 19, 2009 3:31 am

can anyone help on this?

I can snmpwalk the fwsm, and I've the the template imported into a 0.8.7b install that is graphing fine now...

the fwsm graphs get created but 0 results...

I see the following in cacti.log:

02/19/2009 12:29:02 AM - SPINE: Poller[0] Host[9] DS[56] WARNING: SNMP timeout detected [500 ms], ignoring host '<fw_ip_addr>'
02/19/2009 12:29:02 AM - SPINE: Poller[0] Host[9] DS[57] WARNING: SNMP timeout detected [500 ms], ignoring host '<fw_ip_addr>'
02/19/2009 12:29:02 AM - SPINE: Poller[0] Host[9] DS[57] WARNING: SNMP timeout detected [500 ms], ignoring host '<fw_ip_addr>'

cdnvballer · Post by **cdnvballer** » Thu Feb 19, 2009 8:00 am

VERY WEIRD:

the FWSM Graphing will work with CMD.PHP but not when using SPINE.

Tested this just now by disabling spine0.8.7b and using cmd.php.

Any known workarounds so I can use spine?

Cacti

Cisco FWSM?

Cisco FWSM?

debugging

Cisco FWSM?

I was able to get FWSM CPU plotting correctly - ;o)

FWSM interface graphing

Who is online