topic Re: Device Port Tree view missing ports in ExtremeCloud IQ- Site Engine Management Center

Device Port Tree view missing ports

Bartek — Mon, 20 Nov 2023 13:37:40 GMT

Hi,

I have on customer site Palo Alto 5200 firewall (PAN OS 10.2) connected to NMS using SNMP V3 (Auth/Priv: SHA/AES) with loaded custom Palo Alto SNMP MIBS for PAN OS 10.2 in MyMibs folder.

In "Port Tree" view I see only a few ports but when I switch to "Interface Summary View" I see a complete device port list (with logical interfaces like aggregation and tunnel as well).

Port Tree view:

Interface Summary view:

As far as I understand if I want to create manually some links in Network Maps with this firewall I need to have device interfaces in "Port Tree" view to be able to do it. Do you have any idea how to fix it?

Re: Device Port Tree view missing ports

Robert_Haynes — Tue, 21 Nov 2023 13:35:03 GMT

You are correct that if you want to be able to manually create links on maps the full port list being available would be necessary.

I do not understand the different why Port View vs Interface Summary produces different results. I would have to see SNMP style traces or model the updates for both to see a difference in behavior.

This would be something I would advise you to open a GTAC case for if necessary.

Re: Device Port Tree view missing ports

Bartek — Tue, 21 Nov 2023 14:10:16 GMT

Thank you for suggestion. Perhaps when I upgrade this XMC 8.5 system to XIQ-SE problem may be fixed. What is funny is the fact that when I've connected this firewall for the first time to NMS using SNMPv2 Profile the "Port Tree" view was OK

Re: Device Port Tree view missing ports

Robert_Haynes — Wed, 22 Nov 2023 13:44:43 GMT

Is this suggesting that you since switched to SNMPv3 and the results are now limited as you originally described? If yes, does the SNMPv3 configuration on the firewall have a limited or restricted view that is preventing access to certain OIDs? I can't see us polling OID's differently based on SNMP protocol; only that SNMPv3 has the ability to restrict requests to specific OID trees, etc.

Re: Device Port Tree view missing ports

Bartek — Fri, 24 Nov 2023 13:36:09 GMT

SNMPv3 OID Permissions in Firewall for this SNMP user were set with 0x80 mask so it shouldn't be a problem (any 1.X should be available). Now when I moved back to SNMPv2c there is still only limited Port Tree view. I've tried also deleting and re-adding device again to NMS but unfortunately with no success. Next week I'll upgrade this XMC to XIQ-SE and hope it fix the issue

Re: Device Port Tree view missing ports

Bartek — Mon, 27 Nov 2023 12:21:39 GMT

I've tested in my lab PA-820 with XIQ-SE 23.7.11.6 and I've got this same problem - "Interfaces view" is OK but "Port Tree" is not:

Re: Device Port Tree view missing ports

Robert_Haynes — Mon, 27 Nov 2023 14:05:01 GMT

If you do continue to encounter the issue I would suggest opening a case with GTAC. The screenshots you provided indeed show a discrepancy between the two tables and they should essentially be identical in terms of the # of interfaces/ports shown. SNMP 'tcpdump' traces taken when opening each view would be a good data point to start with.