Zabbix 监控 Cisco ASA5525 流量

简介：

Zabbix 监控 Cisco ASA5525 网络接口流量

一、Zabbix 支持 SNMP、Cisco 开启 SNMP

二、测试

shell > snmpwalk -v 2c -c public 192.168.2.254 system  # 查看系统信息
SNMPv2-MIB::sysDescr. = STRING: Cisco Adaptive Security Appliance Version 8.6()
SNMPv2-MIB::sysObjectID. = OID: SNMPv2-SMI::enterprises.9.1.
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: ()  days, ::10.00
SNMPv2-MIB::sysContact. = STRING:
SNMPv2-MIB::sysName. = STRING: ciscoasa
SNMPv2-MIB::sysLocation. = STRING:
SNMPv2-MIB::sysServices. = INTEGER: 

# -v 指定版本，-c 指定共同体名，IP，指令

shell > snmpwalk -v 2c -c public 192.168.2.254 interface  # 查看接口信息

# IF-MIB::ifDescr 接口名称
# IF-MIB::ifType 类型
# IF-MIB::ifSpeed 速率
# IF-MIB::ifMtu MTU
# IF-MIB::ifPhysAddress MAC
# IF-MIB::ifAdminStatus 状态
# IF-MIB::ifInOctets 传输字节数

# 等

三、确认需要监控网络接口

ciscoasa > show running-config interface
!
interface GigabitEthernet0/
 duplex full
 nameif outside-
 security-level
 ip address xx.xx.xx.xx 255.255.255.224 

# Cisco ASA 查看发现，GigabitEthernet0/0 为 outside-1 即外网接口，且配置着公网IP

shell > snmpwalk -v 2c -c public 192.168.2.254 ifDescr
IF-MIB::ifDescr. = STRING: Adaptive Security Appliance 'asa_mgmt_plane' interface
IF-MIB::ifDescr. = STRING: Adaptive Security Appliance 'outside-1' interface
IF-MIB::ifDescr. = STRING: Adaptive Security Appliance 'GigabitEthernet0/1' interface
IF-MIB::ifDescr. = STRING: Adaptive Security Appliance 'inside' interface
IF-MIB::ifDescr. = STRING: Adaptive Security Appliance 'GigabitEthernet0/3' interface
IF-MIB::ifDescr. = STRING: Adaptive Security Appliance 'GigabitEthernet0/4' interface
IF-MIB::ifDescr. = STRING: Adaptive Security Appliance 'GigabitEthernet0/5' interface
IF-MIB::ifDescr. = STRING: Adaptive Security Appliance 'GigabitEthernet0/6' interface
IF-MIB::ifDescr. = STRING: Adaptive Security Appliance 'GigabitEthernet0/7' interface
IF-MIB::ifDescr. = STRING: Adaptive Security Appliance 'Internal-Data0/1' interface
IF-MIB::ifDescr. = STRING: Adaptive Security Appliance 'cplane' interface
IF-MIB::ifDescr. = STRING: Adaptive Security Appliance 'mgmt_plane_int_tap' interface
IF-MIB::ifDescr. = STRING: Adaptive Security Appliance 'Management0/0' interface
IF-MIB::ifDescr. = STRING: Adaptive Security Appliance 'Virtual254' interface

# 服务器上查找，返现 outside-1 对应的设备 ID 为 IF-MIB::ifDescr.3

shell > snmpwalk -v 2c -c public 192.168.2.254 IF-MIB::ifInOctets.   # 外网口进方向
IF-MIB::ifInOctets. = Counter32: 

shell > snmpwalk -v 2c -c public 192.168.2.254 IF-MIB::ifOutOctets.  # 外网口出方向
IF-MIB::ifOutOctets. = Counter32: 

四、创建主机、模板

1、主机

创建主机 -> SNMP 192.168.2.254 161 -> 创建

2、模板

创建模板 -> 模板名称 Cisco -> 群组 Templates -> 创建

创建应用 -> network interface

创建监控项 -> 名称 GigabitEthernet0/ - In
           -> 类型 SNMPv2 端点代理模式
           -> 键值 ifHCInOctets.
           -> SNMP OID IF-MIB::ifHCInOctets.
           -> SNMP community public
           -> 单位 bps
           -> 使用自定倍数
           -> 存储值 差量(每秒速率)
           -> 应用集 network interface
           -> 创建

# 拿到的是 byte 要转换成 bit 即 bps，1 byte = 8 bit，所以要设置倍数为 8
# 照这样设置 GigabitEthernet0/0 - Out 即可，注意键值为 ifHCOutOctets.3，OID 为 OID IF-MIB::ifHCOutOctets.3

3、图形

创建图形 -> 名称 GigabitEthernet0/0 -> 加入监控项 -> 绘图风格 梯度线 -> 设置颜色 -> 创建

五、为主机添加模板

主机 -> 模板 -> 选择模板 -> Cisco -> 添加 -> 更新

# 收工 ！