Uploaded image for project: 'Observium'
  1. Observium
  2. OBS-1633

PAN devices are only using PAN-COMMON not all PAN provided mibs

Details

    • Bug
    • Resolution: Not A Bug
    • Minor
    • None
    • Professional Edition
    • Poller
    • Operating system PanOS 6.1.1 (1.0) through PanOS 7.0
      Observium 0.15.12.7370 (rolling)

    Description

      Palo Alto networks uses private mibs to expose SNMP data so the OSPF mib it is trying to use is incorrect. I see that there are other mibs listed in the paloalto directory but do not see them listed under the devices settings.

      Attachments

        Activity

          [OBS-1633] PAN devices are only using PAN-COMMON not all PAN provided mibs

          Yes. I spent quite a lot of time trying to support extra stuff on PanOS, but they don't make it easy at all. Last I checked they were missing the ability to collect even basic things, like memory usage.

          adama Adam Armstrong added a comment - Yes. I spent quite a lot of time trying to support extra stuff on PanOS, but they don't make it easy at all. Last I checked they were missing the ability to collect even basic things, like memory usage.
          awesomazing Kyle Kot added a comment -

          Thanks, not trying to be difficult I really do like observium a lot.

          awesomazing Kyle Kot added a comment - Thanks, not trying to be difficult I really do like observium a lot.

          Ahh. No. That would probably be even more complex for even less gain.

          adama Adam Armstrong added a comment - Ahh. No. That would probably be even more complex for even less gain.
          awesomazing Kyle Kot added a comment -

          Panorama is like PANs controller you can link all of your PAN devices in to it and view state information / configurations / other device information sort of like rancid

          awesomazing Kyle Kot added a comment - Panorama is like PANs controller you can link all of your PAN devices in to it and view state information / configurations / other device information sort of like rancid

          I don't know what Panorama is.

          adama Adam Armstrong added a comment - I don't know what Panorama is.
          awesomazing Kyle Kot added a comment -

          Is there any plan to include data from Panorama to provide other information from the PANs?

          awesomazing Kyle Kot added a comment - Is there any plan to include data from Panorama to provide other information from the PANs?

          You can just ignore all of those. PanOS is particularly poor in its SNMP support, so a lot of things we expect to exist by default don't exist.

          adama Adam Armstrong added a comment - You can just ignore all of those. PanOS is particularly poor in its SNMP support, so a lot of things we expect to exist by default don't exist.
          awesomazing Kyle Kot added a comment -

          Yes it is stupid that they do not support the industry standards but it is also not just OSPF that is broken all of the following error out when polling.
          BGP4-MIB
          EtherLike-MIB
          IP-MIB
          OSPF-MIB
          Q-BRIDGE-MIB
          SNMP-FRAMEWORK-MIB
          SNMPv2-MIB
          TCP-MIB
          UDP-MIB

          I understand that from your perspective this is not a bug because they are not doing as they are expected however from a customer perspective this is not working as we would expect it to. We rely heavily on PAN throughout our infrastructure and having the information for these devices would be very helpful. Also your page for supported products lists PAN as supported which would lead me again as a customer to think that it would work correctly with your product.

          awesomazing Kyle Kot added a comment - Yes it is stupid that they do not support the industry standards but it is also not just OSPF that is broken all of the following error out when polling. BGP4-MIB EtherLike-MIB IP-MIB OSPF-MIB Q-BRIDGE-MIB SNMP-FRAMEWORK-MIB SNMPv2-MIB TCP-MIB UDP-MIB I understand that from your perspective this is not a bug because they are not doing as they are expected however from a customer perspective this is not working as we would expect it to. We rely heavily on PAN throughout our infrastructure and having the information for these devices would be very helpful. Also your page for supported products lists PAN as supported which would lead me again as a customer to think that it would work correctly with your product.

          To be clear, the "bug" here is that Palo Alto don't support the industry standard OSPF-MIB.

          adama Adam Armstrong added a comment - To be clear, the "bug" here is that Palo Alto don't support the industry standard OSPF-MIB.

          Supporting OSPF from a different MIB would probably be more work that we'd be able to expand.

          I still have no idea why vendors are so stupid as to invent random new MIBs when standard ones exist.

          adama Adam Armstrong added a comment - Supporting OSPF from a different MIB would probably be more work that we'd be able to expand. I still have no idea why vendors are so stupid as to invent random new MIBs when standard ones exist.
          awesomazing Kyle Kot added a comment -

          I understand that there is no code for this as of yet and is the reason why
          I created this. The current OSPF mib being used does not work correctly so
          the PAN devices that we use are not showing up correctly with OSPF neighbor
          information. I guess this is more of a feature request than a bug. All of
          our PAN devices are missing information and throwing errors on every poll
          because they use the proprietary MIBs.

          awesomazing Kyle Kot added a comment - I understand that there is no code for this as of yet and is the reason why I created this. The current OSPF mib being used does not work correctly so the PAN devices that we use are not showing up correctly with OSPF neighbor information. I guess this is more of a feature request than a bug. All of our PAN devices are missing information and throwing errors on every poll because they use the proprietary MIBs.

          People

            landy Mike Stupalov
            awesomazing Kyle Kot
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: