Solved

Juniper SSG140 Interface Traffic Not Appearing in Solarwinds NPM 10.4

Posted on 2013-06-18
2
972 Views
Last Modified: 2013-07-08
Our Solarwinds NPM 10.4 will not show traffic for all interfaces on our Juniper SSG140 Firewall/VPN.  The interfaces show as up/down but they cannot give us statistical traffic information for the VPN tunnels and all other interfaces.  Traffic Stats Not AppearingSolarwinds tech support has indicated that this is because the Interface Indexes are changing sporadically when they should be mapped to static routes on the Juniper.  Juniper support has been unable to provide us with a viable solution to this other than enabling SNMP on the SSG which is enabled.  they have also analyzed the logs and are not sure how to resolve the changing indexes.  Solarwinds has mentioned that if Solarwinds can't resolve they may be able to develop what they referred to as "floating indexes".  That is our longshot.  Has anyone else had any experience with this.  Any help would be much appreciated.  Thanks in advance.  I have attached some screenshots for further clarification.Our Solarwinds NPM 10.4 will not show traffic for all interfaces on our Juniper SSG140 Firewall/VPN.  The interfaces show as up/down but they cannot give us statistical traffic information for the VPN tunnels and all other interfaces.  Solarwinds tech support has indicated that this is because the Interface Indexes are changing sporadically when they should be mapped to static routes on the Juniper.  Juniper support has been unable to provide us with a viable solution to this other than enabling SNMP on the SSG which is enabled.  they have also analyzed the logs and are not sure how to resolve the changing indexes.  Solarwinds has mentioned that if Solarwinds can't resolve they may be able to develop what they referred to as "floating indexes".  That is our longshot.  Has anyone else had any experience with this.  Any help would be much appreciated.  Thanks in advance.  I have attached some screenshots for further clarification.Additional Info
0
Comment
Question by:oriontech2
2 Comments
 
LVL 18

Expert Comment

by:Sanga Collins
ID: 39257895
Are you able to get consistent graphs from any other software like cacti or PRTG? This is the strangest thing I have seen in my years managing juniper devices. PRTG has a free trial and can be easily installed on a windows computer. If it can sucessfully get graphs from your ssg, then the problem is definitely cacti.

In my setup I have noticed tunnel interfaces do not give traffic statistics, but named VPNs do. So all my VPNs that have phase1 and phase2 succesfully connected show me traffic in cacti. Pirmary interfaces, sub interfaces and loopback interfaces also show me traffic.
0
 
LVL 69

Accepted Solution

by:
Qlemo earned 500 total points
ID: 39300505
The official statement from Juniper was, some time back, that tunnel interfaces do not provide the traffic counters needed, so they are useless to monitor via SNMP.

sangamc, can you explain "named VPNs"?
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenario: Your operations manager has discovered an anomaly in your security system. The business will start to suffer within 15 minutes if it is a major IT incident. What should she do? We have 6 recommendations for managing major incidents (https:…
There's a better way to communicate time sensitive or critical info.
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

778 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question