
Attachment uploads are currently disabled. This is a temporary situation and will resume as normal in the coming days.
UNSOLVED
Dynamic modelling for Firewall(multiple-vendors) Sessions
Hi folks,
What I am trying to do is to poll some additional oids to get the information for the session counts and session rate for a bunch of firewall devices. This is actually simple if I only have one vendor's device, let's say Cisco. I can create a dynamic model like following:
##############################################
interface fw_session : ICIM_Instrumentation
{
instrument SNMP {
ActiveSessions = "1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6"
};
readonly instrumented attribute int ActiveSessions
"Number of active sessions on Cisco Firewall.";
}
refine interface Firewall
{
propagate attribute int ActiveSessions
"Number of active sessions on the device."
= fw_session,InstrumentedBy,ActiveSessions;
}
################################################
However, I have multiple vendor's firewall in the network, netscreen, fortinet etc.
I could add couple of instrumented attributes and create multiple attributes in the "refine interface Firewall" section, something like following,
interface fw_session : ICIM_Instrumentation
{
instrument SNMP {
cisco_ActiveSessions = "1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6",
netscreen_ActiveSessions = "1.3.6.1.4.1.3224.16.3.2",
fortinet_ActiveSessions = "1.3.6.1.4.1.12356.101.4.1.8"
};
readonly instrumented attribute int cisco_ActiveSessions
"Number of active sessions on Cisco Firewall.";
readonly instrumented attribute int netscreen_ActiveSessions
"Number of active sessions on netscreen Firewall.";
readonly instrumented attribute int fortinet_ActiveSessions
"Number of active sessions on fortinet Firewall.";
}
refine interface Firewall
{
propagate attribute int cisco_ActiveSessions
"Number of active sessions on the cisco firewall."
= fw_session,InstrumentedBy,cisco_ActiveSessions;
propagate attribute int netscreen_ActiveSessions
"Number of active sessions on the netscreen firewall."
= fw_session,InstrumentedBy,netscreen_ActiveSessions;
propagate attribute int fortinet_ActiveSessions
"Number of active sessions on the fortinet firewall."
= fw_session,InstrumentedBy,fortinet_ActiveSessions;
}
the problem is: personally, I don't think it is nice to have all the three attributes showing up for all the firewalls regardless of the vendor.
I am wondering is there a way in dynamic model we can use some sort of conditional judgement to only create one general attribute
"ActiveSession", but could populate the different value from the instrumented attributes ?
I have tried using the keyword "case", but didn't get any luck.
I am still learning the modelling language, so any comment or help is really appreciated.
Thanks,
Hubery
Responses (0)
Solutions (0)
