cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1497
Views
5
Helpful
2
Replies

with the same OID, two firewall can return different results?

jack lee
Beginner
Beginner
No matter the same OID value of the primary and secondary firewall , can I distinguish the status(primary or secondary) of the devices. for example: what's mean of the OID?is the 1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.6 represent the primary device? 1: OID=.1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.6, Type=OctetString, Value=Primary unit (this device) OID=.1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.7, Type=OctetString, Value=Secondary unit 2: OID=.1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.6, Type=OctetString, Value=Primary unit OID=.1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.7, Type=OctetString, Value=Secondary unit (this device)
2 Replies 2

Ben Walters
Participant
Participant

The OID you are looking at is only part of the status for the ASA primary/secondary status.

 

You also want to look at 1.3.6.1.4.1.9.9.147.1.2.1.1.1.3 which will give you the actual status values and you can get all this information from the primary ASA without needing to SNMP walk both ASA units.

 

For example when I walk 1.3.6.1.4.1.9.9.147.1.2.1.1.1.2 on a firewall I get this as a result:

08/03/18 11:19:11 AM (38 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.4 = "Failover LAN Interface" [ASN_OCTET_STR]
08/03/18 11:19:11 AM (45 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.6 = "Primary unit (this device)" [ASN_OCTET_STR]
08/03/18 11:19:11 AM (51 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.2.7 = "Secondary unit" [ASN_OCTET_STR]

 

Now, when I walk 1.3.6.1.4.1.9.9.147.1.2.1.1.1.3 I get the following values:

08/03/18 11:16:47 AM (26 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.3.4 = "2" [ASN_INTEGER]
08/03/18 11:16:47 AM (32 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.3.6 = "9" [ASN_INTEGER]
08/03/18 11:16:47 AM (39 ms) : 1.3.6.1.4.1.9.9.147.1.2.1.1.1.3.7 = "10" [ASN_INTEGER]

 

Here is the translation for the integer values for this particular OID:

  HardwareStatus
1:other
2:up
3:down
4:error
5:overTemp
6:busy
7:noMedia
8:backup
9:active
10:standby

 

I can now find the status based on the last number of the OIDs

Failover LAN Interface status = 2 which is "up"

Primary unit status = 9 which is "active"

Secondary unit status = 10 which is "standby"

 

Hopefully this helps you get the information you need.

thank your reply
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers