For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mattews's avatar
Mattews
Icon for Cirrus rankCirrus
Jan 21, 2019

Monitoring interfaces on F5

Hy to all,

 

i need to monitor interfaces where the traffic flows, i use sevone as a monitoring tool, where i can find these interfaces and how i can allow them to be monitored?

 

Thanks in advance, bye.

 

application delivery
BIG-IP
devops
LTM

1 Reply

  • Philip_Jonsson's avatar
    Philip_Jonsson
    Icon for MVP rankMVP
    Jan 21, 2019

    Hey Matteo

    In order to monitor the interfaces you can use either the MIB files which you can download from the BIG-IPs WebGUI or use the OIDs. You should be able to define that in the monitoring software.

    K13322: Overview of BIG-IP MIB files (BIG-IP 10.x - 13.x)

    To use the OIDs please use the following:

    • sys interface stat name - 1.3.6.1.4.1.3375.2.1.2.4.4.3.1.1
    • sys interface stat pkts in - 1.3.6.1.4.1.3375.2.1.2.4.4.3.1.2
    • sys interface stat pkts out - 1.3.6.1.4.1.3375.2.1.2.4.4.3.1.4
    • sys interface stat bytes in - 1.3.6.1.4.1.3375.2.1.2.4.4.3.1.3
    • sys interface stat bytes out - 1.3.6.1.4.1.3375.2.1.2.4.4.3.1.5
    • sys interface stat errors in - 1.3.6.1.4.1.3375.2.1.2.4.4.3.1.8
    • sys interface stat errors out - 1.3.6.1.4.1.3375.2.1.2.4.4.3.1.9
    • sys interface stat drops in - 1.3.6.1.4.1.3375.2.1.2.4.4.3.1.10
    • sys interface stat drops out - 1.3.6.1.4.1.3375.2.1.2.4.4.3.1.11
    • sys interface status - 1.3.6.1.4.1.3375.2.1.2.4.1.2.1.17

    These are just some of all the different OIDs you can use. You can also run an SNMP walk on the BIG-IP to see which information you want to monitor:

    sys interface status

    [root@bigipcore02:Active:Changes Pending] config  snmpwalk -v2c -c public localhost 1.3.6.1.4.1.3375.2.1.2.4.1.2.1.17
F5-BIGIP-SYSTEM-MIB::sysInterfaceStatus."1.1" = INTEGER: up(0)
F5-BIGIP-SYSTEM-MIB::sysInterfaceStatus."1.2" = INTEGER: up(0)
F5-BIGIP-SYSTEM-MIB::sysInterfaceStatus."1.3" = INTEGER: up(0)
F5-BIGIP-SYSTEM-MIB::sysInterfaceStatus."1.4" = INTEGER: up(0)
F5-BIGIP-SYSTEM-MIB::sysInterfaceStatus."1.5" = INTEGER: up(0)
F5-BIGIP-SYSTEM-MIB::sysInterfaceStatus."mgmt" = INTEGER: up(0)

    sys interface stat bytes in

    [root@bigipcore02:Active:Changes Pending] config  snmpwalk -v2c -c public localhost 1.3.6.1.4.1.3375.2.1.2.4.4.3.1.3
F5-BIGIP-SYSTEM-MIB::sysInterfaceStatBytesIn."1.1" = Counter64: 431764883
F5-BIGIP-SYSTEM-MIB::sysInterfaceStatBytesIn."1.2" = Counter64: 601533207
F5-BIGIP-SYSTEM-MIB::sysInterfaceStatBytesIn."1.3" = Counter64: 120
F5-BIGIP-SYSTEM-MIB::sysInterfaceStatBytesIn."1.4" = Counter64: 339808188
F5-BIGIP-SYSTEM-MIB::sysInterfaceStatBytesIn."1.5" = Counter64: 391200
F5-BIGIP-SYSTEM-MIB::sysInterfaceStatBytesIn."mgmt" = Counter64: 256710269

    That is just interface information and statistics. Since interfaces are assigned to one or more VLANs, it could be more interesting to see the statistics and status of a particular VLAN. In those cases you can use the following OIDs:

    • sys vlan stat vlan name - 1.3.6.1.4.1.3375.2.1.2.13.6.2.1.1
    • sys vlan stat pkts in - 1.3.6.1.4.1.3375.2.1.2.13.6.2.1.2
    • sys vlan stat pkts out - 1.3.6.1.4.1.3375.2.1.2.13.6.2.1.4
    • sys vlan stat bytes in - 1.3.6.1.4.1.3375.2.1.2.13.6.2.1.3
    • sys vlan stat bytes out - 1.3.6.1.4.1.3375.2.1.2.13.6.2.1.5
    • sys vlan stat errors in - 1.3.6.1.4.1.3375.2.1.2.13.6.2.1.8
    • sys vlan stat errors out - 1.3.6.1.4.1.3375.2.1.2.13.6.2.1.9

    For example:

    sys vlan stat vlan name

    [root@bigipcore02:Active:Changes Pending] config  snmpwalk -v2c -c public localhost 1.3.6.1.4.1.3375.2.1.2.13.6.2.1.1
F5-BIGIP-SYSTEM-MIB::sysVlanStatVlanName."/Common/HA" = STRING: /Common/HA
F5-BIGIP-SYSTEM-MIB::sysVlanStatVlanName."/Common/dmz" = STRING: /Common/dmz
F5-BIGIP-SYSTEM-MIB::sysVlanStatVlanName."/Common/lan" = STRING: /Common/lan
F5-BIGIP-SYSTEM-MIB::sysVlanStatVlanName."/Common/server" = STRING: /Common/server
F5-BIGIP-SYSTEM-MIB::sysVlanStatVlanName."/Common/FW_F5_Linknet" = STRING: /Common/FW_F5_Linknet

    sys vlan stat bytes in

    [root@bigipcore02:Active:Changes Pending] config  snmpwalk -v2c -c public localhost 1.3.6.1.4.1.3375.2.1.2.13.6.2.1.3
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/HA" = Counter64: 120
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/dmz" = Counter64: 393720
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/lan" = Counter64: 340095317
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/server" = Counter64: 601817438
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/FW_F5_Linknet" = Counter64: 433053417
[root@bigipcore02:Active:Changes Pending] config

    I hope this helps!