topic monitor ftd interface utilization on nms in Network Security

monitor ftd interface utilization on nms

Wonxie — Tue, 16 Jan 2024 06:25:41 GMT

I have 2 FTD's being managed by FMC. I wan my nms to show me the interface utilization of the ftds.

In platform settings i added the snmp configs but in solarwinds nms when i add the device it fails the test.

Need some guidance to achieve above.

Regards.

Re: monitor ftd interface utilization on nms

MHM Cisco World — Tue, 16 Jan 2024 06:52:58 GMT

what is your FTD platform ?
MHM

Re: monitor ftd interface utilization on nms

balaji.bandi — Tue, 16 Jan 2024 08:28:21 GMT

There are different ways to configure check below guide :

https://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/213971-configure-snmp-on-firepower-ngfw-applian.html

Where is your solarwinds - coming from inside ? check the FMC event Logs when you poll - check any traffic dropping to poll to device port 161.

still issue post below information :

# show run snmp-server

#show run all snmp-server

#capture CAPI trace interface inside match udp any any eq snmp
#show capture CAPI

show snmp-server statistics

Re: monitor ftd interface utilization on nms

Wonxie — Tue, 16 Jan 2024 11:58:35 GMT

Device is Cisco Firepower 2110 is the platform.

Do i need to add the FTD IP in syslog or just fmc ip ?

my fmc is managing 2 regions each region has 2 ftds in ha.

Regards

Re: monitor ftd interface utilization on nms

Wonxie — Tue, 16 Jan 2024 12:01:31 GMT

Solar winds has its gateway defined on FTD itself.

Re: monitor ftd interface utilization on nms

Marvin Rhoads — Tue, 16 Jan 2024 12:20:17 GMT

Once you have setup the SolarWinds server address as allowed and configured the SNMP version, interface used and community string, you should be querying the management interface of each FTD device.

Re: monitor ftd interface utilization on nms

MHM Cisco World — Tue, 16 Jan 2024 14:19:53 GMT

as list in this Doc. the SNMP use FTD mgmt IP (note no need diagnostic interface)
https://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/213971-configure-snmp-on-firepower-ngfw-applian.html

Re: monitor ftd interface utilization on nms

Marvin Rhoads — Tue, 16 Jan 2024 12:47:00 GMT

Here is a working example:

The platform settings allowing SNMP management look like this:

"OrionWebServer" is a network object with a value of the Orion server IP address.

Note the interface details even picked up that the interface shown is a 2 Gbps Etherchannel.

Re: monitor ftd interface utilization on nms

balaji.bandi — Tue, 16 Jan 2024 13:57:07 GMT

Solar winds has its gateway defined on FTD itself.

you need to look logs and use debug to see if the packet hitting FTD ? when you do query.