Cisco Firewall Service Module (FWSM) in 6509E doesn't work

[ranug]

Hi Cacti Community!

I'm very successful with Cacti as part of our network management tool set. Nevertheless I can't get MAC track to work properly for my firewall modules. I'm using Cisco 6509E with FWSM's. The MSFC (SUP720) is well known for MACTrack, no problem. But because the layer3 functionality is given to the firewall module I need to track the IP addresses from the FWSM. It seems that I get only information about "User Ports" but no IP addresses. I think there is a problem in the IP address scanning function "get_standard_arp_table".

This is what I get from "...# php mactrack_scanner.php -d -id=6":

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
DEBUG: atNetAddress data collection complete
DEBUG: atEntries assembly complete.

Notice: Undefined variable: atEntries in /var/www/localhost/htdocs/cacti/plugins/mactrack/lib/mactrack_functions.php on line 296

Warning: Invalid argument supplied for foreach() in /var/www/localhost/htdocs/cacti/plugins/mactrack/lib/mactrack_functions.php on line 296

Notice: Undefined variable: atEntries in /var/www/localhost/htdocs/cacti/plugins/mactrack/lib/mactrack_functions.php on line 316
DEBUG: HOST: blah, IP address information collection complete
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Thanks for any comment,
ranug

[TheWitness]

Please identify the MIB table that contains the IP->MAC association within the FWSM. Once you have done that, then you need to write a function that stores that information into the mac_track_ips table.

Once you have done this, you need to setup an appropriate device type and then add the FWSM as one of your devices for the site in question. Once this is complete, you should be all set.

For the community, you should share your new IP scanning function and your device types table so that I can incorprate into the overall package.

TheWitness