Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Magnus-Holmberg
Advisor

How to keep interface from changing in SNMP | sk71600

Hi Guys,

One thing that really bugs me when it comes to monitoring check point is the interface name changes in SNMP.
Maybe just me, but it took me years to find a solution for this (yes iknow the SK is old, but you still need to find it)

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...



Regards,
Magnus

https://www.youtube.com/c/MagnusHolmberg-NetSec
1 Reply
genisis__
Advisor

Thought I would feedback on implementing SK71600 on a checkpoint appliance:
- SK show only a SNMPv2 example rather then v3, no biggy but would be nice to include this.
- snmpwalk example results on an appliance comes back with NIC models rather then interface names. In order to get the interface names use 'IF-MIB-ifName'.
snmpwalk -v 3 -l authPriv -u <SNMPUser> -a SHA -A <AuthPass> -x AES -X <PrivPass> localhost IF-MIB::ifName
IF-MIB::ifName.1 = STRING: lo
IF-MIB::ifName.2 = STRING: Sync
IF-MIB::ifName.3 = STRING: Mgmt
IF-MIB::ifName.4 = STRING: eth1-05
IF-MIB::ifName.5 = STRING: eth1-06

In my case I had a total of three drivers:
e1000e = onboard NICs
igb = 1GB Nics in Slot
ixge = 10GB Nics in Slot

I want to load the drives in the above order so I did this:
cp /etc/modprobe.conf /etc/modprobe.conf_ORIGINAL
echo "# -- Orders how the drivers are loaded, in this case: e1000e, igb and finally ixgbe" >> /etc/modprobe.conf
echo "install igb /sbin/modprobe e1000e ; sleep 5 ; /sbin/modprobe --ignore-install igb" >> /etc/modprobe.conf
echo "install ixgbe /sbin/modprobe igb ; sleep 5 ; /sbin/modprobe --ignore-install ixgbe" >> /etc/modprobe.conf
cat /etc/modprobe.conf

 

The only thing I could not do is actually order the interfaces in sequential order so if I have 5 interfaces using 'igb' driver I could not order them so that index 1 = eth1-01 and index 5 = eth1-05 as an example. 

0 Kudos