We have a core Sonicwall NSA 3400 with many VPN tunnels connected to it. I am interested in monitoring that device and looking at the individual bandwidth of each of the tunnels. Does anyone know if this is possible to do via SNMP or perhaps Netflow? I'm inexperienced with now netflow works, but I think it might be possible that way. Any help would be appreciated.
6 Replies
Accepted Answer
It's possible to monitor this via SNMP and soon we will be adding a sensor into PRTG with this capability but currently it's in the test phase. If you can't wait for the sensor, I can look to see what OIDs are used for these sensors and let you know.
Created on Aug 15, 2013 8:31:57 PM by
Great, thanks for the info! If you wouldn't mind, could you let me know the OID's that are used for this? We might want to add in a few before the sensor is updated.
Here are all of the OIDs that we are using for the Sonicwall Sensor:
sonicSAStatTable 1.3.6.1.4.1.8741.1.3.2.1.1 sonicSAStatEntry sonicSAStatEntry 1.3.6.1.4.1.8741.1.3.2.1.1.1 sonicIpsecSaIndex sonicIpsecSaIndex 1.3.6.1.4.1.8741.1.3.2.1.1.1.1 sonicSAStatDecryptPktCount sonicSAStatDecryptPktCount 1.3.6.1.4.1.8741.1.3.2.1.1.1.10 sonicSAStatDecryptByteCount sonicSAStatDecryptByteCount 1.3.6.1.4.1.8741.1.3.2.1.1.1.11 sonicSAStatInFragPktCount sonicSAStatInFragPktCount 1.3.6.1.4.1.8741.1.3.2.1.1.1.12 sonicSAStatOutFragPktCount sonicSAStatOutFragPktCount 1.3.6.1.4.1.8741.1.3.2.1.1.1.13 sonicSAStatUserName sonicSAStatUserName 1.3.6.1.4.1.8741.1.3.2.1.1.1.14 sonicSAStatPeerGateway sonicSAStatPeerGateway 1.3.6.1.4.1.8741.1.3.2.1.1.1.2 sonicSAStatSrcAddrBegin sonicSAStatSrcAddrBegin 1.3.6.1.4.1.8741.1.3.2.1.1.1.3 sonicSAStatSrcAddrEnd sonicSAStatSrcAddrEnd 1.3.6.1.4.1.8741.1.3.2.1.1.1.4 sonicSAStatDstAddrBegin sonicSAStatDstAddrBegin 1.3.6.1.4.1.8741.1.3.2.1.1.1.5 sonicSAStatDstAddrEnd sonicSAStatDstAddrEnd 1.3.6.1.4.1.8741.1.3.2.1.1.1.6 sonicSAStatCreateTime sonicSAStatCreateTime 1.3.6.1.4.1.8741.1.3.2.1.1.1.7 sonicSAStatEncryptPktCount sonicSAStatEncryptPktCount 1.3.6.1.4.1.8741.1.3.2.1.1.1.8 sonicSAStatEncryptByteCount sonicSAStatEncryptByteCount 1.3.6.1.4.1.8741.1.3.2.1.1.1.9
Created on Aug 16, 2013 9:44:41 AM by
I assume that there are sub ID's that drill down these stats to a particular tunnel as well?
Yes, the best thing to do would be to use the SNMP tester to walk the OIDs to see the full OIDs for your device.
Created on Aug 16, 2013 4:06:00 PM by
Great, thanks for the help!
Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.
Add comment