How to Search for a Specific OID on FXOS Platforms

Introduction

This document describes the steps needed to look for the proper Simple Network Management Protocol (SNMP) Object Identifiers (OIDs) for a Firepower eXtensibe Operative System (FXOS) platform such as 2100, 4100 and 9300 models.

Prerequisites

Requirements

Cisco recommends that you have knowledge of these topics:

• Cisco Firepower FXOS
• SNMP protocol

Components Used

The information in this document is based on these hardware/software versions:

• Firepower 2100, 4100 and 9300
• FXOS Version 2.1, 2.2 and 2.3

Procedure

Step 1. Go to the following link to identify the device component you want to monitor.

https://www.cisco.com/c/en/us/td/docs/security/firepower/fxos/mib/b_FXOS_4100_9300_MIBRef/about_cisco_fxos_mib_files.html#reference_mlw_x31_g1b

Step 2. Identify the Management Information Base (MIB) name from the desired part.

Step 3. Download the MIB file from software.cisco.com for the FXOS installed version.

Step 4. Uncompress the MIBs zip file and open the folder with the MIBS uncompressed.

Step 5. Look for the MIBs file. In this example, "CISCO-FIREPOWER-ETHER-MIB" is the searched MIB.

Step 6. Open that file with a text editor.

Once the file is open, search for the specific table.

Step 7. Look for the desired table on the MIB file to get the final OID.

Generating the OID

Step 1. The MIB number is the parent identifier for the statistic type to be polled.

Step 2. On the MIB file opened, search for the same table on Procedure Step 6 Section and write down the first 2 numbers:

cfprEtherPauseStatsTable OBJECT-TYPE <-------------------------------------------------------- Table we are looking
    SYNTAX           SEQUENCE OF CfprEtherPauseStatsEntry
    MAX-ACCESS       not-accessible
    STATUS           current
    DESCRIPTION
        "Cisco Firepower ether:PauseStats managed object table"
    ::= { cfprEtherObjects 14 } <------------------------------------------------------------- First number to be added

cfprEtherPauseStatsEntry OBJECT-TYPE
    SYNTAX           CfprEtherPauseStatsEntry
    MAX-ACCESS       not-accessible
    STATUS           current
    DESCRIPTION
        "Entry for the cfprEtherPauseStatsTable table."
    INDEX { cfprEtherPauseStatsInstanceId }
    ::= { cfprEtherPauseStatsTable 1 } <------------------------------------------------------ Second number to be added

Those 2 numbers follow the parent OID extracted in Step 1.

Step 3. The following list shows the last number to complete the OID.

CfprEtherPauseStatsEntry ::= SEQUENCE {
    cfprEtherPauseStatsInstanceId                                    CfprManagedObjectId,
    cfprEtherPauseStatsDn                                            CfprManagedObjectDn,
    cfprEtherPauseStatsRn                                            SnmpAdminString,
    cfprEtherPauseStatsIntervals                                     Gauge32,
    cfprEtherPauseStatsRecvPause                                     Unsigned64,
    cfprEtherPauseStatsRecvPauseDelta                                Counter64,
    cfprEtherPauseStatsRecvPauseDeltaAvg                             Unsigned64,
    cfprEtherPauseStatsRecvPauseDeltaMax                             Unsigned64,
    cfprEtherPauseStatsRecvPauseDeltaMin                             Unsigned64,
    cfprEtherPauseStatsResets                                        Unsigned64,
    cfprEtherPauseStatsResetsDelta                                   Counter64,
    cfprEtherPauseStatsResetsDeltaAvg                                Unsigned64,
    cfprEtherPauseStatsResetsDeltaMax                                Unsigned64,
    cfprEtherPauseStatsResetsDeltaMin                                Unsigned64,
    cfprEtherPauseStatsSuspect                                       TruthValue,
    cfprEtherPauseStatsThresholded                                   CfprEtherPauseStatsThresholded,
    cfprEtherPauseStatsTimeCollected                                 DateAndTime,
    cfprEtherPauseStatsUpdate                                        Gauge32,
    cfprEtherPauseStatsXmitPause                                     Unsigned64,
    cfprEtherPauseStatsXmitPauseDelta                                Counter64,
    cfprEtherPauseStatsXmitPauseDeltaAvg                             Unsigned64,
    cfprEtherPauseStatsXmitPauseDeltaMax                             Unsigned64,
    cfprEtherPauseStatsXmitPauseDeltaMin                             Unsigned64
}

Step 4. Look for the value want to monitor. e.g. "cfprEtherPauseStatsResetsDeltaAvg"

cfprEtherPauseStatsResetsDeltaAvg OBJECT-TYPE
    SYNTAX       Unsigned64
    MAX-ACCESS   read-only
    STATUS       current
    DESCRIPTION
        "Cisco Firepower ether:PauseStats:resetsDeltaAvg
        managed object property"
    ::= { cfprEtherPauseStatsEntry 12 } <------------------------------------------------------ Last number to be added

Step 5. Put together all the numbers starting with the parent MIB.

1.3.6.1.4.1.9.9.826.1.21.14.1.12

[6] Verify with an SNMP walk to gather the final OID

root@NCRUZZAV-V18T1:~# snmpwalk -v 2c 10.88.243.250 -c cisco 1.3.6.1.4.1.9.9.826.1.21.14.1.12
iso.3.6.1.4.1.9.9.826.1.21.14.1.12.1091814 = Counter64: 0
iso.3.6.1.4.1.9.9.826.1.21.14.1.12.1091819 = Counter64: 0
iso.3.6.1.4.1.9.9.826.1.21.14.1.12.1091824 = Counter64: 0
iso.3.6.1.4.1.9.9.826.1.21.14.1.12.1091829 = Counter64: 0
iso.3.6.1.4.1.9.9.826.1.21.14.1.12.1091834 = Counter64: 0
iso.3.6.1.4.1.9.9.826.1.21.14.1.12.1091839 = Counter64: 0
iso.3.6.1.4.1.9.9.826.1.21.14.1.12.1091844 = Counter64: 0
iso.3.6.1.4.1.9.9.826.1.21.14.1.12.1091849 = Counter64: 0
iso.3.6.1.4.1.9.9.826.1.21.14.1.12.1091854 = Counter64: 0
iso.3.6.1.4.1.9.9.826.1.21.14.1.12.1091859 = Counter64: 0
iso.3.6.1.4.1.9.9.826.1.21.14.1.12.1091864 = Counter64: 0
iso.3.6.1.4.1.9.9.826.1.21.14.1.12.1091869 = Counter64: 0
iso.3.6.1.4.1.9.9.826.1.21.14.1.12.1091874 = Counter64: 0
iso.3.6.1.4.1.9.9.826.1.21.14.1.12.1091879 = Counter64: 0
iso.3.6.1.4.1.9.9.826.1.21.14.1.12.1091884 = Counter64: 0
iso.3.6.1.4.1.9.9.826.1.21.14.1.12.1091889 = Counter64: 0
iso.3.6.1.4.1.9.9.826.1.21.14.1.12.1091894 = Counter64: 0
root@NCRUZZAV-V18T1:~#

Notice that the output displays 1 OID for each part selected in the table. In this example, there is 1 OID for each interface as the table selected, displays all the device interfaces statistics.