topic Re: SNMP Cisco FTD - ASA in Network Security

SNMP Cisco FTD - ASA

Jon Are Endrerud — Thu, 30 May 2024 10:34:15 GMT

Hello all.

For all the years I have worked with Cisco products, ASA's, FTD's, IOS routers I have had the same problem with SNMP. If you add, remove interfaces and reboot the ASA, FTD, Router the unit reorders the interfaces and numbers no longer match. When using a monitor tools like PRTG (we use) then wrong interface is logged. Solution is then to delete all interfaces and add them again.

Do you have this problem, and are there something I'm missing ?

tnx.

Re: SNMP Cisco FTD - ASA

Mark Elsen — Thu, 30 May 2024 13:52:17 GMT

- In the configuration add :
router (config) # snmp-server ifindex persist

Re: SNMP Cisco FTD - ASA

tvotna — Thu, 30 May 2024 14:09:00 GMT

Many Cisco devices support "snmp-server ifindex persist", but this hasn't been implemented on ASA/FTD:

CSCtx33616 ENH: Need persistent interface indexes & OIDs while monitoring with SNMP

In case of FXOS persistence is supported by default:

CSCvx28168 DOC: SNMP IfIndex Persistence on FXOS

The end result is very platform and version dependent.

Re: SNMP Cisco FTD - ASA

Jon Are Endrerud — Thu, 30 May 2024 14:22:15 GMT

Ok I see, ASA/FTD are the main platforms I am using. Thank you for detailed reply.

Re: SNMP Cisco FTD - ASA

Jon Are Endrerud — Thu, 30 May 2024 14:29:14 GMT

How did I miss this!!! Thank you