scline / cactitemplate_junipernetworks Goto Github PK

I've used this template to check traffic between each security policies in my Juniper SRX 210 Firewall. But, its not generating any graph data. Instead I am getting Index column in Cacti as Below:

11.70.117.108.108.45.77.97.110.97.103.101.11.70.117.108.108.45.77.97.110.97.103.101.7.68.101.102.97.117.108.116

11.70.117.108.108.45.77.97.110.97.103.101.5.116.114.117.115.116.15.66.70.87.71.45.70.117.108.108.77.97.110.97.103.101

My Cacti Version is: 0.8.8.f
NetSNMP: 5.7
RRDTool: 1.4.8
Juniper SRX OS: JunOS 12.1X46-D35.1

Hi, I've tried to install firewall filter template but it return 0 items.

• Running data query [15].
• Found type = '3' [SNMP Query].
• Found data query XML file at '/usr/share/cacti/site/resource/snmp_queries/Juniper_Firewall_Filter.xml'
• XML file parsed ok.
• <oid_num_indexes> missing in XML file, 'Index Count Changed' emulated by counting oid_index entries
• Executing SNMP walk for list of indexes @ '.1.3.6.1.4.1.2636.3.5.2.1.8' Index Count: 0
• No SNMP data returned

Could you recommend anything to check?

cacti Version 0.8.8b
Model: srx210h
JUNOS Software Release [12.1X46-D20.5]

As the title says, I need to add documentation and update the templates for 1.2.X over the next week or two.

It seems that the templates do not specify an index OID.

I added your templates in Cacti and tested with a Juniper SRX 260 (supported?)

It did not seem to return results, and running a Verbose Query usually stated "<oid_num_indexes> missing in XML file"

Here is an example Verbose Query in Cacti for "Juniper SRX - Central Point Statistics"

    + Running data query [10].
    + Found type = '3' [SNMP Query].
    + Found data query XML file at '/var/www/cacti/resource/snmp_queries/juniper_srx_central_point.xml'
    + XML file parsed ok.
    + <oid_num_indexes> missing in XML file, 'Index Count Changed' emulated by counting oid_index entries
    + Executing SNMP walk for list of indexes @ '' Index Count: 0
    + No SNMP data returned

I think that juniper_srx_central_point.xml is possibly polling the wrong MiB table.

Currently the following MiBs are referenced by juniper_srx_central_point.xml:

 .1.3.6.1.4.1.2636.3.39.1.12.1.4.1.1 - OID Index
 .1.3.6.1.4.1.2636.3.39.1.12.1.4.1.2 - Cluster Names
 .1.3.6.1.4.1.2636.3.39.1.12.1.4.1.3 - Current Sessions
 .1.3.6.1.4.1.2636.3.39.1.12.1.4.1.4 - Total Sessions <<<<<<<<<<
 .1.3.6.1.4.1.2636.3.39.1.12.1.4.1.5 - Sessions per Second

Currently the following MiBs are referenced by juniper_srx_services_processing_unit.xml:

 .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.2 - OID Index
 .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.2 - SPU Slot
 .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.11 - Cluster Names
 .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4 - CPU Usage
 .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.5 - Memory Usage
 .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6 - Current Flow Session
 .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.7 - Max Flow Sessions <<<<<<<<<<

Now on my system I get the following:

  user@host> show security flow cp-session summary 
  Valid sessions: 22107
  Pending sessions: 68
  Invalidated sessions: 502
  Sessions in other states: 0
  Total sessions: 22677
  Maximum sessions: 2359296 <<<<<<<<<<

user@host> show snmp mib walk .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.7    
 jnxJsSPUMonitoringMaxFlowSession.5 = 421888

 user@host> show security flow session summary       
 Flow Sessions on FPC5 PIC0:
 Unicast-sessions: 22169
 Multicast-sessions: 0
 Services-offload-sessions: 0
 Failed-sessions: 0
 Sessions-in-use: 22563
   Valid sessions: 22160
   Pending sessions: 0
   Invalidated sessions: 403
   Sessions in other states: 0
 Maximum-sessions: 421888 <<<<<<<<<<

 user@host> show snmp mib walk .1.3.6.1.4.1.2636.3.39.1.12.1.4.1.4   
 jnxJsNodeMaxTotalSession.0 = 421888

Interesting that both MiBs return the same number, but that the maximum cp-sessions reported by the CLI differs from the MiB value that is mentioned in the XML file.

I did find a document from Juniper that mentions some other MiBs to use for polling:
https://kb.juniper.net/library/CUSTOMERSERVICE/GLOBAL_JTAC/BK26199/SRX%20SNMP%20Monitoring%20Guide_v1.2.pdf

These values seem to align with my experience on the CLI.

  user@host> show snmp mib walk 1.3.6.1.4.1.2636.3.39.1.12.1.1.1    
  jnxJsSPUMonitoringFPCIndex.5 = 5
  jnxJsSPUMonitoringSPUIndex.5 = 0
  jnxJsSPUMonitoringCPUUsage.5 = 27
  jnxJsSPUMonitoringMemoryUsage.5 = 59
  jnxJsSPUMonitoringCurrentFlowSession.5 = 22332
  jnxJsSPUMonitoringMaxFlowSession.5 = 421888
  jnxJsSPUMonitoringCurrentCPSession.5 = 22587 
  jnxJsSPUMonitoringMaxCPSession.5 = 2359296 <<<<<<<<<<
  jnxJsSPUMonitoringNodeIndex.5 = 0
  jnxJsSPUMonitoringNodeDescr.5 = single
  jnxJsSPUMonitoringFlowSessIPv4.5 = 22480
  jnxJsSPUMonitoringFlowSessIPv6.5 = 0
  jnxJsSPUMonitoringCPSessIPv4.5 = 22730
  jnxJsSPUMonitoringCPSessIPv6.5 = 0

Therefore should 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.x MiBs be polled by both srx_services_processing_unit.xml and also juniper_srx_central_point.xml ?

Hi,

Thanks for the template.
I would like some know stuff as we are doing some automation via curl with your template. While adding Data source i didn't find the drop down menu of Output Type ID & name in custom data field. we passed variable but it just create blank data-source item without custom data.

any suggestion regarding this.

RRDTool can't create RRD file and debug error as below
RRDTool Says:
ERROR: opening '/usr/share/cacti/rra/63/50195.rrd': No such file or directory