|
|
| Author |
Message |
kayalinux
Joined: 31 Oct 2005
Posts: 23
|
 Posted: Mon Oct 31, 2005 4:50 am Post subject: Few Templates (NetScreen,Nokia,Cisco,Fortigate) |
 |
|
Hi, here are some template i made or modify.
NetScreen (NS204, N5X)
Nokia IP380
Fortigate
Cisco Catalyst 4500
Cisco 6500
| Description: |
1) 1 Cisco - CPU Usage
2) 2 Cisco - Memory Usage
3) 3 Cisco - Temperature |
|
Download |
| Filename: |
cacti_host_template_cisco_catalyst_4500.xml |
| Filesize: |
27.3 KB |
| Downloaded: |
1963 Time(s) |
| Description: |
1) Nokia IP - CPU Load
2) Nokia IP - Memory Usage |
|
Download |
| Filename: |
cacti_host_template_nokia_ip.xml |
| Filesize: |
18.89 KB |
| Downloaded: |
1345 Time(s) |
| Description: |
1) Fortigate - CPU Load
2) Fortigate - Memory Usage
3) Fortigate - Session |
|
Download |
| Filename: |
cacti_host_template_fortigate.xml |
| Filesize: |
23.89 KB |
| Downloaded: |
3066 Time(s) |
|
|
| Back to top |
|
 |
kayalinux
Joined: 31 Oct 2005
Posts: 23
|
| Posted: Mon Oct 31, 2005 4:52 am Post subject: |
|
|
Add last template Cisco 6500.
The forum doesn't allow more than 3 attach files.
| Description: |
1) 1 Cisco Catalyst - CPU Usage
2) 2 Cisco - Memory Usage |
|
Download |
| Filename: |
cacti_host_template_cisco_6500.xml |
| Filesize: |
18.44 KB |
| Downloaded: |
1470 Time(s) |
|
|
| Back to top |
|
|
hvbuel
Joined: 20 Jun 2005
Posts: 6
|
| Posted: Mon Oct 31, 2005 6:57 am Post subject: |
|
|
| So, where did the Netscreen template go ?
|
|
| Back to top |
|
|
kayalinux
Joined: 31 Oct 2005
Posts: 23
|
| Posted: Mon Oct 31, 2005 11:10 am Post subject: |
|
|
You right, i forgot it.
| Description: |
1) Netscreen - Load Average
2) Netscreen - Memory
3) NetScreen - Sessions |
|
Download |
| Filename: |
cacti_host_template_netscreen.xml |
| Filesize: |
36.98 KB |
| Downloaded: |
3450 Time(s) |
|
|
| Back to top |
|
|
ioiioi
Cacti User
Joined: 28 Mar 2005
Posts: 51
|
| Posted: Tue Nov 01, 2005 6:51 am Post subject: |
|
|
Any description about these templates?
what are they doing for?
|
|
| Back to top |
|
|
kayalinux
Joined: 31 Oct 2005
Posts: 23
|
| Posted: Wed Nov 02, 2005 5:35 am Post subject: |
|
|
| Quote: | | Any description about these templates? |
For all of them you CPU Usage, Memory Usage.
It is write in the template description.
For some other you have temparature or sessions.
| Quote: | | what are they doing for? |
Generate graph.
Those templates are like any other except than they are specific to the list of equipments below. When i looked for template inside the forum, not all of them was working due to OID problem. So i made those template and specifiy the model equipment working with it.
NetScreen (NS204, N5X)
Nokia IP380
Fortigate
Cisco Catalyst 4500
Cisco 6500
| Description: |
|
| Filesize: |
8.73 KB |
| Viewed: |
36688 Time(s) |
|
| Description: |
|
| Filesize: |
7.17 KB |
| Viewed: |
36688 Time(s) |
|
| Description: |
|
| Filesize: |
12.11 KB |
| Viewed: |
36846 Time(s) |
|
Last edited by kayalinux on Thu Nov 03, 2005 10:54 am; edited 1 time in total |
|
| Back to top |
|
|
tommyj
Joined: 23 Jun 2005
Posts: 32
Location: Stockholm, Sweden
|
| Posted: Wed Nov 02, 2005 4:02 pm Post subject: |
|
|
| Looks good. I'm looking for scripts to monitor VPN tunnel traffic on Netscreen and Pixes, has anyone created any similar?
|
|
| Back to top |
|
|
hvbuel
Joined: 20 Jun 2005
Posts: 6
|
| Posted: Thu Nov 03, 2005 8:53 am Post subject: |
|
|
Monitoring Netscreen VPN traffic is #1 on my wish list.
That would be tha bomb !!
I tried digging in the MIB's myself, but I am just not skilled enough to get any results. 
|
|
| Back to top |
|
|
kayalinux
Joined: 31 Oct 2005
Posts: 23
|
| Posted: Thu Nov 03, 2005 11:03 am Post subject: |
|
|
Actually i monitore all interface of all the equipment list with the standard SNMP - Interface Statistics from cacti.
But i can't tell you for netscreen if it is VPN or not.
it is just an interface. It doesn't look like the MIB make a difference between traffic and VPN traffic.
Or i miss undestand you question.
|
|
| Back to top |
|
|
ScottTFrazer
Joined: 03 Nov 2005
Posts: 4
|
| Posted: Thu Nov 03, 2005 4:10 pm Post subject: |
|
|
| Quote: | | I tried digging in the MIB's myself, but I am just not skilled enough to get any results. |
I'm pretty new at this myself, but I was able to get a bit of useful information about my Netscreen firewall, so I thought I'd share how I did it.
Check out SNMPLink.org's online mib browser here:
http://www.snmplink.org/src/MIB.html
I used the Juniper Networks link from there, then expanded NetScreen - ScreenOS v5.0.0.r8.1 (that's what I've got for a firewall) and dug down through smiv2 and NS-INTERFACE.mib, then selected NETSCREEN-INTERFACE-MIB.
The stuff in the right pane is the actual mib text, but I don't really need that. Instead, I expanded out the nsIfFlowTable and selected the nsIfFlowInByte entry.
The top of the screen now has the numerical OID of this entry. Run snmpwalk from the cacti box using this OID and your community string like so:
| Code: | | snmpwalk -v 1 -c public ip.ad.dr.es .1.3.6.1.4.1.3224.9.3.1.3 |
which returns:
| Code: |
SNMPv2-SMI::enterprises.3224.9.3.1.3.0 = Counter32: 2529568317
SNMPv2-SMI::enterprises.3224.9.3.1.3.1 = Counter32: 0
SNMPv2-SMI::enterprises.3224.9.3.1.3.2 = Counter32: 1049037947
SNMPv2-SMI::enterprises.3224.9.3.1.3.3 = Counter32: 27478534
SNMPv2-SMI::enterprises.3224.9.3.1.3.4 = Counter32: 0
|
Now I just plug those into data sources created using the SNMP - Generic OID Template and then link the graphs to em and hopefully it works.
For the Netscreen OS, there's a nsIfFlowInVpn counter as well.
|
|
| Back to top |
|
|
hvbuel
Joined: 20 Jun 2005
Posts: 6
|
| Posted: Fri Nov 04, 2005 4:42 am Post subject: |
|
|
well ScottTFrazer, your certainly pointing me in the right direction.
I did some digging on the web page you suggested and also some snmpwalks
unfortunatly the nsIfFlowInVpn counter is a total for all VPN tunnels.
I have 15 tunnels comming in to 1 device, a total VPN bytes in does not give me the information I want. 
Further investigation of the MIB shows me that tunnel interfaces are present and recognised by snmpwalk, but again the counters are only for the physical interfaces i.e. TRUST,UNTRUST,DMZ,etc, and not for the tunnel interfaces TUNNEL.1 TUNNEL2, etc. these counters exist but remain at 0.
Good news : browsing thru the MIBS available I stumbled accros this one : netscreenVpnMon and it has some counters in it for the SA.
.1.3.6.1.4.1.3224.4.1.1.1.35 for bytes in.
.1.3.6.1.4.1.3224.4.1.1.1.36 for bytes out.
An snmpwalk gave me decent numbers 
All I need to know now is how to create some decent graphs.
Do I make some sort of template ? or edit an existing like interfaces.xml ?
How does cacti know howmany tunnels I have, for I have Netscreens with only 1 tunnel but also with over 10 tunnels.
I feel i am close, now how to finish...........
|
|
| Back to top |
|
|
ScottTFrazer
Joined: 03 Nov 2005
Posts: 4
|
| Posted: Fri Nov 04, 2005 4:26 pm Post subject: |
|
|
I'm staill a real noob at this, but if you've got the data sources set up, you should just need to create a seperate traffic graph (with an in and out datasource) for each tunnel.
I'm sure there's a way to get fancy and have them all show up on the same graph, but like I said: noob. 
|
|
| Back to top |
|
|
kayalinux
Joined: 31 Oct 2005
Posts: 23
|
| Posted: Mon Dec 19, 2005 8:42 am Post subject: |
|
|
Here are 2 templates.
Fortigate 5X and 6X
And for the Fortigate 'Fortinet Security Gateway'
If you wish to complete the template with more data (Antivirus, Webfilter) here are the MIB.
http://www.somix.com/support/mib_resources.php
| Description: |
| Sample graph for the Fortinet Security Gateway |
|
| Filesize: |
23.71 KB |
| Viewed: |
35484 Time(s) |
|
| Description: |
Model 5X and 6X
1) Fortigate - CPU Load
2) Fortigate - Memory Usage
3) Fortigate - Session |
|
Download |
| Filename: |
cacti_host_template_fortigate.xml |
| Filesize: |
20.93 KB |
| Downloaded: |
1238 Time(s) |
| Description: |
1) Fortinet - CPU Load
2) Fortinet - Memory Usage
3) Fortinet - Session |
|
Download |
| Filename: |
cacti_host_template_fortinet_security_gateway.xml |
| Filesize: |
127.32 KB |
| Downloaded: |
1134 Time(s) |
|
|
| Back to top |
|
|
dinux
Joined: 20 Dec 2005
Posts: 15
Location: Scottsdale, AZ, USA
|
| Posted: Tue Feb 06, 2007 1:18 pm Post subject: |
|
|
| Has anyone been able to monitor the internal Temperature of the Netscreen products? I was hoping to be able to do this.
|
|
| Back to top |
|
|
ceoby
Joined: 24 Nov 2005
Posts: 13
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Register
Profile
Log in to check your private messages
Log in
