Monitoring and Configuration
Check Point 61000 Security System Getting Started Guide R75.40VS for 61000 | 89
SNMP in a VSX Gateway
There are two SNMP modes for a Scalable Platform configured as a VSX Gateway:
Default Mode
Monitor global SNMP data from the Scalable Platform. Data comes from all
SGMs on all Virtual Systems.
VS Mode
Monitor each Virtual System separately.
Note
- SNMP traps are supported for VS0 only.
Supported SNMP Versions
SNMP VS mode uses SNMP version 3 to query the Virtual Systems. You can run remote SNMP
queries on each Virtual System in the VSX Gateway.
For systems that only support SNMP versions 1 and 2:
•
You cannot run remote SNMP queries for each Virtual System. You can only run a remote
SNMP query on VS0.
•
You can use the CLI to change the Virtual System context and then run a local SNMP query on
a Virtual System.
To use SNMP in the Virtual System mode:
1.
Configure an SNMP V3 user:
add snmp usm user jon security-level authNoPriv authpass-phrase VALUE
2.
Set the SNMP mode:
set snmp mode vs
or
set snmp mode default
3.
Start SNMP agent:
set snmp agent on
VS Mode Example 1:
To run a Virtual System query for traffic throughput, from a remote Linux host:
[Expert@VSX:0] snmpwalk -m $CPDIR/lib/snmp/chkpnt.mib -n ctxname_vsid1 -v 3 -l
authNoPriv -u jon -A mypassword 192.0.2.72 asgThroughput
VS Mode Example 2:
To run a Virtual System query for traffic throughput, from its virtual context:
1.
Go to the Expert
mode.
2.
Go to the applicable Virtual System:
vsenv <vs_id>
3.
Run:
# snmpwalk -m $CPDIR/lib/snmp/chkpnt.mib -v 2c -c public
localhost asgThroughput
