Announcement Banner
UNSOLVED

hubery

updated

13 years ago

H

hubery

13 Posts

0

9192

December 11th, 2013 17:00

Dynamic modelling for Firewall(multiple-vendors) Sessions

Hi folks,

What I am trying to do is to poll some additional oids to get the information for the session counts and session rate for a bunch of firewall devices. This is actually simple if I only have one vendor's device, let's say Cisco. I can create a dynamic model like following:

##############################################

interface fw_session : ICIM_Instrumentation

{

     instrument SNMP {

        ActiveSessions = "1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6"

     };

readonly instrumented attribute int ActiveSessions

"Number of active sessions on Cisco Firewall.";

}

refine interface Firewall

{

propagate attribute int ActiveSessions

         "Number of active sessions on the device."

         = fw_session,InstrumentedBy,ActiveSessions;

}

################################################

However, I have multiple vendor's firewall in the network, netscreen, fortinet etc.

I could add couple of instrumented attributes and create multiple attributes in the "refine interface Firewall" section,  something like following,

interface fw_session : ICIM_Instrumentation

{

     instrument SNMP {

        cisco_ActiveSessions = "1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6",

        netscreen_ActiveSessions = "1.3.6.1.4.1.3224.16.3.2",

        fortinet_ActiveSessions = "1.3.6.1.4.1.12356.101.4.1.8"

     };

readonly instrumented attribute int cisco_ActiveSessions

"Number of active sessions on Cisco Firewall.";

readonly instrumented attribute int netscreen_ActiveSessions

"Number of active sessions on netscreen Firewall.";

readonly instrumented attribute int fortinet_ActiveSessions

"Number of active sessions on fortinet Firewall.";

}

refine interface Firewall

{

propagate attribute int cisco_ActiveSessions

         "Number of active sessions on the cisco firewall."

         = fw_session,InstrumentedBy,cisco_ActiveSessions;

propagate attribute int netscreen_ActiveSessions

         "Number of active sessions on the netscreen firewall."

         = fw_session,InstrumentedBy,netscreen_ActiveSessions;

propagate attribute int fortinet_ActiveSessions

         "Number of active sessions on the fortinet firewall."

         = fw_session,InstrumentedBy,fortinet_ActiveSessions;

}

the problem is: personally, I don't think it is nice to have all the three attributes showing up for all the firewalls regardless of the vendor.

I am wondering is there a way in dynamic model we can use some sort of conditional judgement to only create one general attribute

"ActiveSession", but could populate the different value from the instrumented attributes ?

I have tried using the keyword "case", but didn't get any luck.

I am still learning the modelling language, so any comment or help is really appreciated.

Thanks,

Hubery