topic Upgrade on Appliances from 80.30 to 80.40 "breaks" SNMP traffic monitoring in Firewall and Security Management

Upgrade on Appliances from 80.30 to 80.40 "breaks" SNMP traffic monitoring

Florian_Schneid — Tue, 20 Oct 2020 12:11:09 GMT

Hi,

I went these days to R80.40. So far so good and everything went fine. But i noticed that all Interfaces monitored by SNMP are wrong. They somehow got scrambled during the upgrade.

In the past that never happened during the upgrades (when i went from R77.30 > R80.20 > R80.30)

I noticed that on 15xxx and 5xxx appliances. On my 3200 it seems that it had no influence. (they were originally installed with (R80.30) and never saw the previous versions)

Just want people to be aware of that issue. Or maybe someone knows a solution how to prevent that. I have not upgraded all my Appliances yet.

Regards,
Florian

Re: Upgrade on Appliances from 80.30 to 80.40 "breaks" SNMP traffic monitoring

PhoneBoy — Thu, 22 Oct 2020 14:49:56 GMT

Can you be more precise about the behavior you saw?
And did you open any TAC cases related to this?

Re: Upgrade on Appliances from 80.30 to 80.40 "breaks" SNMP traffic monitoring

Florian_Schneid — Fri, 23 Oct 2020 13:03:35 GMT

Hi,
just did upgrade a 5200 Appliance. The difference is that SNMP will show the interface type names after upgrade. And not the Checkpoint names.

Appliance 5200
Before R80.30 HFA 215

After:R80.40 HFA 78

i assume this causes the rearrangement of the Interface OIDs.

no TAC as i can't simply open such one directly.

regards

Re: Upgrade on Appliances from 80.30 to 80.40 "breaks" SNMP traffic monitoring

G_W_Albrecht — Fri, 23 Oct 2020 13:48:20 GMT

Then use your CCSP and do no be shy 8) - with valid support you always can let us contact TAC to resolve or at least acknowledge it...

Re: Upgrade on Appliances from 80.30 to 80.40 "breaks" SNMP traffic monitoring

Florian_Schneid — Fri, 23 Oct 2020 13:57:51 GMT

Dear Mr Albrecht,

As my CCSP feel free to open the TAC 😉

Re: Upgrade on Appliances from 80.30 to 80.40 "breaks" SNMP traffic monitoring

Henrik_Noerr1 — Tue, 27 Oct 2020 12:33:23 GMT

Hey Florian,

This is by design - see sk168601

You need to use ifName instead of ifDescr to get interface names

/Henrik

Re: Upgrade on Appliances from 80.30 to 80.40 "breaks" SNMP traffic monitoring

Florian_Schneid — Tue, 27 Oct 2020 12:45:45 GMT

Hi Henrik,

thanks for the SK. readding is no issue so far for me. I just wanted to aware that this upgrade will break current monitoring if people used it before R80.40. As I did not find any information to that on sk160753.

Redgards,
Florian