CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Check Point SecurePlatform (SPLAT)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-01-09
Senior Member
 
Join Date: 2006-09-26
Posts: 856
Rep Power: 3
cciesec2006 has an average reputation (10+)
Default detecting up/down interfaces in Secureplatform

Can someone show me how can send snmptrap from a SPLAT box to my
snmptrapd server if an interface in my SPLAT box bounces (up/down)?

I know how to do this Nokia Voyager IPSO I can see the trap get
to my snmptrap server but I do not know how to do this with Secureplatform?

Thanks.
Reply With Quote
  #2 (permalink)  
Old 2008-01-19
Senior Member
 
Join Date: 2006-03-19
Location: Northern Ohio
Posts: 913
Rep Power: 3
RayPesek has an average reputation (10+)
Default Re: detecting up/down interfaces in Secureplatform

I don't know how to do it either. Can you set the switch or router that it's connected to to send the trap? When one goes down so does the other.

Ray
Reply With Quote
  #3 (permalink)  
Old 2008-01-22
Junior Member
 
Join Date: 2006-02-13
Posts: 3
Rep Power: 0
patrickross has an average reputation (10+)
Default Re: detecting up/down interfaces in Secureplatform

Have you tried using snmpwalk from a system that you will use for polling your SecurePlatform based servers?
Reply With Quote
  #4 (permalink)  
Old 2008-01-22
Senior Member
 
Join Date: 2006-09-26
Posts: 856
Rep Power: 3
cciesec2006 has an average reputation (10+)
Default Re: detecting up/down interfaces in Secureplatform

I have no issues with using snmpwalk. that works fine. I also do not have
issues with making the swiches send snmptrap either. But that is besides
the point.

What I am trying to do here is to make the splat box send snmptrap
to my snmp trap receiver if something happen to the interface(s).
This can be done rather on Nokia and Cisco devices such as routers and
switches, how can I make it work with SPLAT?

Thanks.
Reply With Quote
  #5 (permalink)  
Old 2008-02-04
Member
 
Join Date: 2007-01-19
Posts: 33
Rep Power: 0
mamakos has an average reputation (10+)
Default Re: detecting up/down interfaces in Secureplatform

As far as I know, SPLAT is incapable of that alone.

Indeed, CheckPoint advised to use special made RPM's by HP for their supported servers (for Instance HP DL 380 series). Thoses RPMs are hpasm or something like that, you will find a link on CheckPoint SPLAT's webPage.

Unfortunately, I it is NOT supported with HP servers running ILO2 ! Once again, this is written on CheckPoint's website but in very tiny characters ! So either you have an HP server with ILO (and not ILO2) or you won't be able to send traps. Or so I think...
Reply With Quote
  #6 (permalink)  
Old 2008-02-05
Senior Member
 
Join Date: 2006-04-27
Location: Twillight zone
Posts: 468
Rep Power: 3
abusharif has an average reputation (10+)
Default Re: detecting up/down interfaces in Secureplatform

not sure if it will help you or not

/usr/share/snmp/mibs

There is section in secureplatform documentation explaining how to add your own monitors.

For example

Code:
monitor -u me -o sysUpTime.0 -o hrSWRunName "high process memory"
hrSWRunPerfMem > 10000
(ifOperStatus) etc



Should be possible to enter this into snmpd.conf

there are always some dirty workarrounds in case you cant go via snmp it self with some shell scripting and executing snmp_trap explicitly when condition is met/not met.

Last edited by abusharif; 2008-02-05 at 06:09.
Reply With Quote
  #7 (permalink)  
Old 2008-02-08
Member
 
Join Date: 2007-03-09
Location: Singapore
Posts: 31
Rep Power: 0
wicked has an average reputation (10+)
Default Re: detecting up/down interfaces in Secureplatform

i'm looking for something similar but instead of SNMP i'd rather receive an e-mail. i know how to script the sendmail command but am unsure the best way to use it to monitor the interfaces.
__________________
CEH, CCSE, CISSP
Reply With Quote
  #8 (permalink)  
Old 2008-02-08
Senior Member
 
Join Date: 2007-02-07
Location: Halle (Saale)
Posts: 268
Rep Power: 2
dantro has an average reputation (10+)
Default Re: detecting up/down interfaces in Secureplatform

mii-tool
mii-tool -w
Reply With Quote
  #9 (permalink)  
Old 2008-05-15
Senior Member
 
Join Date: 2006-05-24
Location: India
Posts: 158
Rep Power: 3
vijayant has an average reputation (10+)
Default Re: detecting up/down interfaces in Secureplatform

Hi All

I just want to know if I can monitor the performance of any Checkpoint prodoct (Splat) using SNMP. We have Solar Wind. In that I can see OID 1.3.6.1.4.1.2620 for checkpoint. Does that mean it can communicate any checkpoint installed device, in case the support for the same is enabled on the Checkpoint Machine.

Thanks
Vijayant
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 11:09.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0