topic How to keep interface from changing in SNMP | sk71600 in Firewall and Security Management

How to keep interface from changing in SNMP | sk71600

Magnus-Holmberg — Tue, 12 Oct 2021 08:36:53 GMT

Hi Guys,

One thing that really bugs me when it comes to monitoring check point is the interface name changes in SNMP.
Maybe just me, but it took me years to find a solution for this (yes iknow the SK is old, but you still need to find it)

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk71600

Regards,
Magnus

Re: How to keep interface from changing in SNMP | sk71600

genisis__ — Tue, 25 May 2021 12:04:08 GMT

Thought I would feedback on implementing SK71600 on a checkpoint appliance:
- SK show only a SNMPv2 example rather then v3, no biggy but would be nice to include this.
- snmpwalk example results on an appliance comes back with NIC models rather then interface names. In order to get the interface names use 'IF-MIB-ifName'.
snmpwalk -v 3 -l authPriv -u <SNMPUser> -a SHA -A <AuthPass> -x AES -X <PrivPass> localhost IF-MIB::ifName
IF-MIB::ifName.1 = STRING: lo
IF-MIB::ifName.2 = STRING: Sync
IF-MIB::ifName.3 = STRING: Mgmt
IF-MIB::ifName.4 = STRING: eth1-05
IF-MIB::ifName.5 = STRING: eth1-06

In my case I had a total of three drivers:
e1000e = onboard NICs
igb = 1GB Nics in Slot
ixge = 10GB Nics in Slot

I want to load the drives in the above order so I did this:
cp /etc/modprobe.conf /etc/modprobe.conf_ORIGINAL
echo "# -- Orders how the drivers are loaded, in this case: e1000e, igb and finally ixgbe" >> /etc/modprobe.conf
echo "install igb /sbin/modprobe e1000e ; sleep 5 ; /sbin/modprobe --ignore-install igb" >> /etc/modprobe.conf
echo "install ixgbe /sbin/modprobe igb ; sleep 5 ; /sbin/modprobe --ignore-install ixgbe" >> /etc/modprobe.conf
cat /etc/modprobe.conf

The only thing I could not do is actually order the interfaces in sequential order so if I have 5 interfaces using 'igb' driver I could not order them so that index 1 = eth1-01 and index 5 = eth1-05 as an example.

Re: How to keep interface from changing in SNMP | sk71600

Václav_Brožík — Thu, 20 Oct 2022 09:53:29 GMT

Thank you for sharing your experience but I do not understand why to spend the effort.

* The order changes anyway: when you add new interfaces, when you remove interfaces.

* The solution does not help with ordering of VLAN (and maybe other non-physical) interfaces.

* The sk71600 explains that correctly working SNMP monitoring tool has to re-discover the interfaces after the machine is rebooted. Part of the discovery is mapping to IF-MIB::ifName values which you then use to refer to the interfaces by their names.

Summary: The SNMP monitoring tool has to be fixed to not use the changing table index number when referring to an interface.