• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1043
  • Last Modified:

Juniper SSG140 Interface Traffic Not Appearing in Solarwinds NPM 10.4

Our Solarwinds NPM 10.4 will not show traffic for all interfaces on our Juniper SSG140 Firewall/VPN.  The interfaces show as up/down but they cannot give us statistical traffic information for the VPN tunnels and all other interfaces.  Traffic Stats Not AppearingSolarwinds tech support has indicated that this is because the Interface Indexes are changing sporadically when they should be mapped to static routes on the Juniper.  Juniper support has been unable to provide us with a viable solution to this other than enabling SNMP on the SSG which is enabled.  they have also analyzed the logs and are not sure how to resolve the changing indexes.  Solarwinds has mentioned that if Solarwinds can't resolve they may be able to develop what they referred to as "floating indexes".  That is our longshot.  Has anyone else had any experience with this.  Any help would be much appreciated.  Thanks in advance.  I have attached some screenshots for further clarification.Our Solarwinds NPM 10.4 will not show traffic for all interfaces on our Juniper SSG140 Firewall/VPN.  The interfaces show as up/down but they cannot give us statistical traffic information for the VPN tunnels and all other interfaces.  Solarwinds tech support has indicated that this is because the Interface Indexes are changing sporadically when they should be mapped to static routes on the Juniper.  Juniper support has been unable to provide us with a viable solution to this other than enabling SNMP on the SSG which is enabled.  they have also analyzed the logs and are not sure how to resolve the changing indexes.  Solarwinds has mentioned that if Solarwinds can't resolve they may be able to develop what they referred to as "floating indexes".  That is our longshot.  Has anyone else had any experience with this.  Any help would be much appreciated.  Thanks in advance.  I have attached some screenshots for further clarification.Additional Info
0
oriontech2
Asked:
oriontech2
1 Solution
 
Sanga CollinsSystems AdminCommented:
Are you able to get consistent graphs from any other software like cacti or PRTG? This is the strangest thing I have seen in my years managing juniper devices. PRTG has a free trial and can be easily installed on a windows computer. If it can sucessfully get graphs from your ssg, then the problem is definitely cacti.

In my setup I have noticed tunnel interfaces do not give traffic statistics, but named VPNs do. So all my VPNs that have phase1 and phase2 succesfully connected show me traffic in cacti. Pirmary interfaces, sub interfaces and loopback interfaces also show me traffic.
0
 
QlemoC++ DeveloperCommented:
The official statement from Juniper was, some time back, that tunnel interfaces do not provide the traffic counters needed, so they are useless to monitor via SNMP.

sangamc, can you explain "named VPNs"?
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now