CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Check Point SecurePlatform (SPLAT)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-06-10
Senior Member
 
Join Date: 2006-09-26
Posts: 856
Rep Power: 3
cciesec2006 has an average reputation (10+)
Default Checkpoint SNMP port 260 assistance

All,

I got checkpoint snmp to work on my SPLAT NGx R65 enforcement modules.
the command I use is this:

snmpwalk -v 1 -c splat_R65 127.0.0.1:260 .1.3.6.1.4.1.2620

the question I have is this. Where in the output that will show
CPU utilization? Since the SPLAT box is dual quad-core IBM x3650, I would
like to see the snmp cpu utilization matches with what I see in SmartView
Monitor.

Comments anyone? Thanks.
Reply With Quote
  #2 (permalink)  
Old 2008-06-13
Senior Member
 
Join Date: 2006-04-30
Location: Europe, Germany
Posts: 159
Rep Power: 3
dsb.nepo has an average reputation (10+)
Default Re: Checkpoint SNMP port 260 assistance

I use this ucd/net OID's at splat

ucd/net - CPU Usage - User
Data Source Type : COUNTER
OID: .1.3.6.1.4.1.2021.11.50.0

ucd/net - CPU Usage - Nice,
Data Source Type : COUNTER
OID: .1.3.6.1.4.1.2021.11.51.0

ucd/net - CPU Usage - System
Data Source Type : COUNTER
OID: .1.3.6.1.4.1.2021.11.52.0

ucd/net - Load Average - 1 Minute
Data Source Type : GAUGE
OID: .1.3.6.1.4.1.2021.10.1.3.1

ucd/net - Load Average - 5 Minute
Data Source Type : GAUGE
OID: .1.3.6.1.4.1.2021.10.1.3.2

ucd/net - Load Average - 15 Minute
Data Source Type : GAUGE
OID: .1.3.6.1.4.1.2021.10.1.3.3

There are some PDF's in SecureKnowledge for example
SecurePlatform_SNMP_OS_MIB.pdf

And another Check_Point_MIBs_R65.pdf, but i don't have the location at the moment.
Reply With Quote
  #3 (permalink)  
Old 2008-06-13
Senior Member
 
Join Date: 2006-09-26
Posts: 856
Rep Power: 3
cciesec2006 has an average reputation (10+)
Default Re: Checkpoint SNMP port 260 assistance

The problem with standard snmpd (port 161) is that if you have multiple-CPUs
machine, it can be tricky.

However, I found a work-around using checkpoint snmp port 260:

snmpwalk -v 1 -c yourcommunity 192.168.1.1:260 1.3.6.1.4.1.2620.1.6.7.2.4.0

example:
[Expert@labgw]# snmpwalk -v 1 -c cciesec2006 127.0.0.1:260 1.3.6.1.4.1.2620.1.6.7.2.4.0
SNMPv2-SMI::enterprises.2620.1.6.7.2.4.0 = INTEGER: 15
[Expert@labgw]#
Reply With Quote
  #4 (permalink)  
Old 2008-06-13
Senior Member
 
Join Date: 2006-04-30
Location: Europe, Germany
Posts: 159
Rep Power: 3
dsb.nepo has an average reputation (10+)
Default Re: Checkpoint SNMP port 260 assistance

yes, found the OID at the moment in the Check_Point_MIBs_R65.pdf
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 11:39.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0