Personal Repository for Juniper Cacti Templates/Graphs
Please feel free to add/improve! [email protected]
Cacti Templates/Grpahs for Juniper based devices
Personal Repository for Juniper Cacti Templates/Graphs
Please feel free to add/improve! [email protected]
As the title says, I need to add documentation and update the templates for 1.2.X over the next week or two.
I've used this template to check traffic between each security policies in my Juniper SRX 210 Firewall. But, its not generating any graph data. Instead I am getting Index column in Cacti as Below:
11.70.117.108.108.45.77.97.110.97.103.101.11.70.117.108.108.45.77.97.110.97.103.101.7.68.101.102.97.117.108.116
11.70.117.108.108.45.77.97.110.97.103.101.5.116.114.117.115.116.15.66.70.87.71.45.70.117.108.108.77.97.110.97.103.101
My Cacti Version is: 0.8.8.f
NetSNMP: 5.7
RRDTool: 1.4.8
Juniper SRX OS: JunOS 12.1X46-D35.1
Hi, I've tried to install firewall filter template but it return 0 items.
Could you recommend anything to check?
cacti Version 0.8.8b
Model: srx210h
JUNOS Software Release [12.1X46-D20.5]
I think that juniper_srx_central_point.xml is possibly polling the wrong MiB table.
Currently the following MiBs are referenced by juniper_srx_central_point.xml:
.1.3.6.1.4.1.2636.3.39.1.12.1.4.1.1 - OID Index
.1.3.6.1.4.1.2636.3.39.1.12.1.4.1.2 - Cluster Names
.1.3.6.1.4.1.2636.3.39.1.12.1.4.1.3 - Current Sessions
.1.3.6.1.4.1.2636.3.39.1.12.1.4.1.4 - Total Sessions <<<<<<<<<<
.1.3.6.1.4.1.2636.3.39.1.12.1.4.1.5 - Sessions per Second
Currently the following MiBs are referenced by juniper_srx_services_processing_unit.xml:
.1.3.6.1.4.1.2636.3.39.1.12.1.1.1.2 - OID Index
.1.3.6.1.4.1.2636.3.39.1.12.1.1.1.2 - SPU Slot
.1.3.6.1.4.1.2636.3.39.1.12.1.1.1.11 - Cluster Names
.1.3.6.1.4.1.2636.3.39.1.12.1.1.1.4 - CPU Usage
.1.3.6.1.4.1.2636.3.39.1.12.1.1.1.5 - Memory Usage
.1.3.6.1.4.1.2636.3.39.1.12.1.1.1.6 - Current Flow Session
.1.3.6.1.4.1.2636.3.39.1.12.1.1.1.7 - Max Flow Sessions <<<<<<<<<<
Now on my system I get the following:
user@host> show security flow cp-session summary
Valid sessions: 22107
Pending sessions: 68
Invalidated sessions: 502
Sessions in other states: 0
Total sessions: 22677
Maximum sessions: 2359296 <<<<<<<<<<
user@host> show snmp mib walk .1.3.6.1.4.1.2636.3.39.1.12.1.1.1.7
jnxJsSPUMonitoringMaxFlowSession.5 = 421888
user@host> show security flow session summary
Flow Sessions on FPC5 PIC0:
Unicast-sessions: 22169
Multicast-sessions: 0
Services-offload-sessions: 0
Failed-sessions: 0
Sessions-in-use: 22563
Valid sessions: 22160
Pending sessions: 0
Invalidated sessions: 403
Sessions in other states: 0
Maximum-sessions: 421888 <<<<<<<<<<
user@host> show snmp mib walk .1.3.6.1.4.1.2636.3.39.1.12.1.4.1.4
jnxJsNodeMaxTotalSession.0 = 421888
Interesting that both MiBs return the same number, but that the maximum cp-sessions reported by the CLI differs from the MiB value that is mentioned in the XML file.
I did find a document from Juniper that mentions some other MiBs to use for polling:
https://kb.juniper.net/library/CUSTOMERSERVICE/GLOBAL_JTAC/BK26199/SRX%20SNMP%20Monitoring%20Guide_v1.2.pdf
These values seem to align with my experience on the CLI.
user@host> show snmp mib walk 1.3.6.1.4.1.2636.3.39.1.12.1.1.1
jnxJsSPUMonitoringFPCIndex.5 = 5
jnxJsSPUMonitoringSPUIndex.5 = 0
jnxJsSPUMonitoringCPUUsage.5 = 27
jnxJsSPUMonitoringMemoryUsage.5 = 59
jnxJsSPUMonitoringCurrentFlowSession.5 = 22332
jnxJsSPUMonitoringMaxFlowSession.5 = 421888
jnxJsSPUMonitoringCurrentCPSession.5 = 22587
jnxJsSPUMonitoringMaxCPSession.5 = 2359296 <<<<<<<<<<
jnxJsSPUMonitoringNodeIndex.5 = 0
jnxJsSPUMonitoringNodeDescr.5 = single
jnxJsSPUMonitoringFlowSessIPv4.5 = 22480
jnxJsSPUMonitoringFlowSessIPv6.5 = 0
jnxJsSPUMonitoringCPSessIPv4.5 = 22730
jnxJsSPUMonitoringCPSessIPv6.5 = 0
Therefore should 1.3.6.1.4.1.2636.3.39.1.12.1.1.1.x MiBs be polled by both srx_services_processing_unit.xml and also juniper_srx_central_point.xml ?
It seems that the templates do not specify an index OID.
I added your templates in Cacti and tested with a Juniper SRX 260 (supported?)
It did not seem to return results, and running a Verbose Query usually stated "<oid_num_indexes> missing in XML file"
Here is an example Verbose Query in Cacti for "Juniper SRX - Central Point Statistics"
+ Running data query [10].
+ Found type = '3' [SNMP Query].
+ Found data query XML file at '/var/www/cacti/resource/snmp_queries/juniper_srx_central_point.xml'
+ XML file parsed ok.
+ <oid_num_indexes> missing in XML file, 'Index Count Changed' emulated by counting oid_index entries
+ Executing SNMP walk for list of indexes @ '' Index Count: 0
+ No SNMP data returned
RRDTool can't create RRD file and debug error as below
RRDTool Says:
ERROR: opening '/usr/share/cacti/rra/63/50195.rrd': No such file or directory
Hi,
Thanks for the template.
I would like some know stuff as we are doing some automation via curl with your template. While adding Data source i didn't find the drop down menu of Output Type ID & name in custom data field. we passed variable but it just create blank data-source item without custom data.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.