Details
Minor Description
Palo Alto networks uses private mibs to expose SNMP data so the OSPF mib it is trying to use is incorrect. I see that there are other mibs listed in the paloalto directory but do not see them listed under the devices settings.
Attachments
Activity
Yes. I spent quite a lot of time trying to support extra stuff on PanOS, but they don't make it easy at all. Last I checked they were missing the ability to collect even basic things, like memory usage.
Ahh. No. That would probably be even more complex for even less gain.
Panorama is like PANs controller you can link all of your PAN devices in to it and view state information / configurations / other device information sort of like rancid
Is there any plan to include data from Panorama to provide other information from the PANs?
You can just ignore all of those. PanOS is particularly poor in its SNMP support, so a lot of things we expect to exist by default don't exist.
Yes it is stupid that they do not support the industry standards but it is also not just OSPF that is broken all of the following error out when polling.
BGP4-MIB
EtherLike-MIB
IP-MIB
OSPF-MIB
Q-BRIDGE-MIB
SNMP-FRAMEWORK-MIB
SNMPv2-MIB
TCP-MIB
UDP-MIB
I understand that from your perspective this is not a bug because they are not doing as they are expected however from a customer perspective this is not working as we would expect it to. We rely heavily on PAN throughout our infrastructure and having the information for these devices would be very helpful. Also your page for supported products lists PAN as supported which would lead me again as a customer to think that it would work correctly with your product.
To be clear, the "bug" here is that Palo Alto don't support the industry standard OSPF-MIB.
Adam - still the same situation with the latest 7.0.3 PANOS release and the latest MIB's. Negligible useful info coming out of them. Even less from VM appliances.
Kyle - we run Panorama too, and a snmpwalk shows that Panorama doesn't appear to provide any additional information about managed devices, at least not via SNMP. All the "enterprise" MIB's appear to expose are capabilities/attributes/etc specific to hardware appliances. VM's are not returning anything beyond the basic info from PAN-COMMON-MIB.