cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2296
Views
6
Helpful
2
Replies

with the same OID, two firewall can return different results?

jack lee
Level 1
Level 1
No matter the same OID value of the primary and secondary firewall , can I distinguish the status(primary or secondary) of the devices. for example: what's mean of the OID?is the 1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.6 represent the primary device? 1: OID=.1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.6, Type=OctetString, Value=Primary unit (this device) OID=.1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.7, Type=OctetString, Value=Secondary unit 2: OID=.1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.6, Type=OctetString, Value=Primary unit OID=.1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.7, Type=OctetString, Value=Secondary unit (this device)
2 Replies 2

Ben Walters
Level 4
Level 4

The OID you are looking at is only part of the status for the ASA primary/secondary status.

 

You also want to look at 1.3.6.1.4.1.9.9.147.1.2.1.1.1.3 which will give you the actual status values and you can get all this information from the primary ASA without needing to SNMP walk both ASA units.

 

For example when I walk 1.3.6.1.4.1.9.9.147.1.2.1.1.1.2 on a firewall I get this as a result:

08/03/18 11:19:11 AM (38 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.4 = "Failover LAN Interface" [ASN_OCTET_STR]
08/03/18 11:19:11 AM (45 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.6 = "Primary unit (this device)" [ASN_OCTET_STR]
08/03/18 11:19:11 AM (51 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.7 = "Secondary unit" [ASN_OCTET_STR]

 

Now, when I walk 1.3.6.1.4.1.9.9.147.1.2.1.1.1.3 I get the following values:

08/03/18 11:16:47 AM (26 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.3.4 = "2" [ASN_INTEGER]
08/03/18 11:16:47 AM (32 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.3.6 = "9" [ASN_INTEGER]
08/03/18 11:16:47 AM (39 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.3.7 = "10" [ASN_INTEGER]

 

Here is the translation for the integer values for this particular OID:

  HardwareStatus
1:other
2:up
3:down
4:error
5:overTemp
6:busy
7:noMedia
8:backup
9:active
10:standby

 

I can now find the status based on the last number of the OIDs

Failover LAN Interface status = 2 which is "up"

Primary unit status = 9 which is "active"

Secondary unit status = 10 which is "standby"

 

Hopefully this helps you get the information you need.

thank your reply
Review Cisco Networking for a $25 gift card