Nokia IP Firewall Checkpoint Template
Moderators: Developers, Moderators
cacti version 0.86f
cacti server is running ubuntu 2.6.12-9-686
Mysql 4.024-10
PHP version 5.0.5-2
rrdtool 5.0.5-2
When trying to import the XML file using "import from a file"
this is the error message I get (see attachment)
would really like to get this going as we have quite a few nokia HW fiewalls here
thank you
cacti server is running ubuntu 2.6.12-9-686
Mysql 4.024-10
PHP version 5.0.5-2
rrdtool 5.0.5-2
When trying to import the XML file using "import from a file"
this is the error message I get (see attachment)
would really like to get this going as we have quite a few nokia HW fiewalls here
thank you
- Attachments
-
- cacti error.JPG (36.09 KiB) Viewed 10678 times
- fmangeant
- Cacti Guru User
- Posts: 2345
- Joined: Fri Sep 19, 2003 8:36 am
- Location: Sophia-Antipolis, France
- Contact:
Hinickman wrote:cacti version 0.86f
Code: Select all
Template export from cacti0.8.6g
[size=84]
[color=green]HOWTOs[/color] :
[list][*][url=http://forums.cacti.net/viewtopic.php?t=15353]Install and configure the Net-SNMP agent for Unix[/url]
[*][url=http://forums.cacti.net/viewtopic.php?t=26151]Install and configure the Net-SNMP agent for Windows[/url]
[*][url=http://forums.cacti.net/viewtopic.php?t=28175]Graph multiple servers using an SNMP proxy[/url][/list]
[color=green]Templates[/color] :
[list][*][url=http://forums.cacti.net/viewtopic.php?t=15412]Multiple CPU usage for Linux[/url]
[*][url=http://forums.cacti.net/viewtopic.php?p=125152]Memory & swap usage for Unix[/url][/list][/size]
[color=green]HOWTOs[/color] :
[list][*][url=http://forums.cacti.net/viewtopic.php?t=15353]Install and configure the Net-SNMP agent for Unix[/url]
[*][url=http://forums.cacti.net/viewtopic.php?t=26151]Install and configure the Net-SNMP agent for Windows[/url]
[*][url=http://forums.cacti.net/viewtopic.php?t=28175]Graph multiple servers using an SNMP proxy[/url][/list]
[color=green]Templates[/color] :
[list][*][url=http://forums.cacti.net/viewtopic.php?t=15412]Multiple CPU usage for Linux[/url]
[*][url=http://forums.cacti.net/viewtopic.php?p=125152]Memory & swap usage for Unix[/url][/list][/size]
Right upgraded to h now.
Cant seem to geth the information back to the cacti server.
It can read the snmp i think - as it knows all the interaces of the firewalls.
I have enbled a rule on the FW's so it can talk snmp to the server - but the ps - ef command will not work on my version of the ipso on the nokia boxes. And I would like to see that both the ipso snmpd and the checkpoint snmp are running anyone know a ps switch for ipso version:
IPSO myfirewall 3.8-BUILD039 releng 1404 07.23.2004-193500 i386
Cant seem to geth the information back to the cacti server.
It can read the snmp i think - as it knows all the interaces of the firewalls.
I have enbled a rule on the FW's so it can talk snmp to the server - but the ps - ef command will not work on my version of the ipso on the nokia boxes. And I would like to see that both the ipso snmpd and the checkpoint snmp are running anyone know a ps switch for ipso version:
IPSO myfirewall 3.8-BUILD039 releng 1404 07.23.2004-193500 i386
My snmp walks come back like this :
root@cactiserver:~# snmpwalk -v1 -c public firewallipaddress .1.3.6.1.4.1.2620.1.6.7.2.4.0
SNMPv2-SMI::enterprises.2620.1.6.7.2.4.0 = INTEGER: 1
root@cactiserver:~#
is that a success on the IPSO snmp or the Checkpoint snmp.
Do I need to open udp port 260 for traffic back to the cacti server for the checkpoint snmp?
root@cactiserver:~# snmpwalk -v1 -c public firewallipaddress .1.3.6.1.4.1.2620.1.6.7.2.4.0
SNMPv2-SMI::enterprises.2620.1.6.7.2.4.0 = INTEGER: 1
root@cactiserver:~#
is that a success on the IPSO snmp or the Checkpoint snmp.
Do I need to open udp port 260 for traffic back to the cacti server for the checkpoint snmp?
try the following command:
You will get a reply like this:
if both snmpd's are running
Code: Select all
ps -aux | grep snmpd
Code: Select all
root 242 0.0 0.3 4172 848 ?? Ss Fri10AM 1:59.28 /bin/snmpd -f
root 355 0.0 0.6 2392 1468 ?? Ss Fri10AM 0:52.06 /opt/CPshared-R55/bin/cpsnmpd -p 260
What IPSo does, is that it's proxying the requests for the CheckPoint snmpd. So, if you want to get a connection-count of your firewall, you are asking IPSO to ask Checkpoint's snmp to give the connection-count.
All you need in your rulebase, is a general rule for your Cacti-host to be allowed to poll the firewall (e.g.
All you need in your rulebase, is a general rule for your Cacti-host to be allowed to poll the firewall (e.g.
Code: Select all
src dst service action
Cacti-host Firewall snmp-read allow
- gandalf
- Developer
- Posts: 22383
- Joined: Thu Dec 02, 2004 2:46 am
- Location: Muenster, Germany
- Contact:
Oops, must have missed that. I'm just curious with some other bad things around my fw's. But by the way I discovered some other nice OIDs. Perhaps I'll get to this bit some days later ...philuxe wrote:Many thanks for your fast reply, I am testing that on a IP380 based cluster, why didn't you keep the memory usage as proposed in the first template of this topic ?lvm wrote:These are COUNTER values and no CDEFs are applied to the Graph Templates. So its representing "items" per second
Reinhard
Reinhard
But by the way I discovered some other nice OIDs. Perhaps I'll get to this bit some days later ...
..ooh ooh, I'm interested! ..I for one, would appreciate any other CP/Nokia templates that might get offered up!
BTW, does anyone experience huge spikes (up to 14M) on all three graphs (accepted,dropped and logged) on a policy push?
..I only just started monitoring these three last night and all were looking very pweety until I pushed a policy this morning and now I just have a nasty spike in all three (???), with no meaningful data visable??
What I don't understand is why the spike is exactly the same on all three? (either accept it or drop it!?) O_o
cheers,
riz.
Who is online
Users browsing this forum: No registered users and 1 guest