topic with the same OID, two firewall can return different results? in Network Security

with the same OID, two firewall can return different results?

jack lee — Fri, 21 Feb 2020 15:29:36 GMT

No matter the same OID value of the primary and secondary firewall , can I distinguish the status（primary or secondary） of the devices. for example: what's mean of the OID?is the 1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.6 represent the primary device? 1： OID=.1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.6, Type=OctetString, Value=Primary unit (this device) OID=.1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.7, Type=OctetString, Value=Secondary unit 2： OID=.1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.6, Type=OctetString, Value=Primary unit OID=.1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.7, Type=OctetString, Value=Secondary unit (this device)

Re: with the same OID, two firewall can return different results?

Ben Walters — Thu, 08 Mar 2018 16:21:45 GMT

The OID you are looking at is only part of the status for the ASA primary/secondary status.

You also want to look at 1.3.6.1.4.1.9.9.147.1.2.1.1.1.3 which will give you the actual status values and you can get all this information from the primary ASA without needing to SNMP walk both ASA units.

For example when I walk 1.3.6.1.4.1.9.9.147.1.2.1.1.1.2 on a firewall I get this as a result:

08/03/18 11:19:11 AM (38 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.4 = "Failover LAN Interface" [ASN_OCTET_STR]
08/03/18 11:19:11 AM (45 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.6 = "Primary unit (this device)" [ASN_OCTET_STR]
08/03/18 11:19:11 AM (51 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.7 = "Secondary unit" [ASN_OCTET_STR]

Now, when I walk 1.3.6.1.4.1.9.9.147.1.2.1.1.1.3 I get the following values:

08/03/18 11:16:47 AM (26 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.3.4 = "2" [ASN_INTEGER]
08/03/18 11:16:47 AM (32 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.3.6 = "9" [ASN_INTEGER]
08/03/18 11:16:47 AM (39 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.3.7 = "10" [ASN_INTEGER]

Here is the translation for the integer values for this particular OID:

HardwareStatus
1:other
2:up
3:down
4:error
5:overTemp
6:busy
7:noMedia
8:backup
9:active
10:standby

I can now find the status based on the last number of the OIDs

Failover LAN Interface status = 2 which is "up"

Primary unit status = 9 which is "active"

Secondary unit status = 10 which is "standby"

Hopefully this helps you get the information you need.

Re: with the same OID, two firewall can return different results?

jack lee — Mon, 12 Mar 2018 02:17:26 GMT

thank your reply