Re: PIX OS 7.0, VLAN, MRTG

allgeyer · ‎08-02-2005

Given is a PIX 515E with three interfaces. I've configured three VLANs on the 'inside'-interface. As far as of PIX OS 6.3 it was possible to account the traffic for each of the three VLAN interfaces independently with mrtg. Since PIX OS 7.0 the statistic overview of mrtg shows the same output of traffic on all VLAN Interfaces. I assume that it's the traffic of the underlying physical interface. Is this a known bug? How can I revert to the old behaviour? Thanks in advance.

Ciao, PIT

m.singer · ‎08-08-2005

By asking if you can revert back the behavious, are you asking if you could change the OS back to 6.3 ?

allgeyer · ‎08-08-2005

No. This would be a solution, but only temporarily, I think. I'm searching for a way of collecting vlan interface statistics as there was in PIX OS 6.3.

BR, PIT

lubo.nistor · ‎08-09-2005

the problem is with interface numbering in SNMP. If the numbering changes you get the result from the last one (i think). so either run the discovery script again or modify the config manually..

How exactly MRTG works I don't know as I'm using something else.. but it either compares the interface names or somehow increments the iface IDs..

do a snmpwalk on the ifaces and see yourself..

allgeyer · ‎08-09-2005

Already done so (was the first thing I tried). The OIDs are correct.

Nobody here who can reproduce this problem?

mikkoss · ‎08-09-2005

Hi,

I have the same problem in my pix525. I'm using Gbit interface with 2 vlan:s (dmz and inside).

Running pix os v7.0(2)

Heres the snmp-walk for the box;

snmpwalk -c communityname -v2c xxx.yyy.zzzz.zzz

important parts:

IF-MIB::ifDescr.1 = STRING: Cisco PIX Security Appliance 'outside' interface

IF-MIB::ifDescr.2 = STRING: Cisco PIX Security Appliance 'vpnp' interface

IF-MIB::ifDescr.3 = STRING: Cisco PIX Security Appliance 'inside' interface

IF-MIB::ifDescr.4 = STRING: Cisco PIX Security Appliance 'dmz' interface

IF-MIB::ifInOctets.1 = Counter32: 1848272002

IF-MIB::ifInOctets.2 = Counter32: 515499068

IF-MIB::ifInOctets.3 = Counter32: 3058529126

IF-MIB::ifInOctets.4 = Counter32: 3058529220

IF-MIB::ifOutOctets.1 = Counter32: 2311409579

IF-MIB::ifOutOctets.2 = Counter32: 2617038883

IF-MIB::ifOutOctets.3 = Counter32: 2296146343

IF-MIB::ifOutOctets.4 = Counter32: 2296146442

dmz-interface should have much more traffic than the inside which only has one c-classa connected.

--

Mikko

lubo.nistor · ‎08-10-2005

did you guys tried other products than mrtg?

even comparing the values from snmpwalk would do..

allgeyer · ‎08-10-2005

Did you read the post from mikkoss? He has posted the values from snmpwalk and I can reproduce this. The counters for the vlan interfaces are all the same.

Ciao, PIT