firewall interface showing administratively down

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
progressive.nagiosXI
Posts: 277
Joined: Mon Jul 31, 2017 5:54 am

firewall interface showing administratively down

Post by progressive.nagiosXI »

Hi team,

firewall showing administratively down in nagios from many days ,but as per client Port is up and working fine.

we are also not able to scan these interfaces via Nagios switch wizard.

note: this interface added last year without any issue but from last month showing this CRITICAL.

Thanks
You do not have the required permissions to view the files attached to this post.
ssax
Dreams In Code
Posts: 7682
Joined: Wed Feb 11, 2015 12:54 pm

Re: firewall interface showing administratively down

Post by ssax »

Hmm, if you run the check from the CCM > Edit one of the services > Run Check Command does it show that as well?

What does this output?
- Change X.X.X.X to the IP of your firewall

Code: Select all

snmpwalk -v 2c -c 'yourcommunity' X.X.X.X:161 .1.3.6.1.2.1.2.2.1.7 -On
progressive.nagiosXI
Posts: 277
Joined: Mon Jul 31, 2017 5:54 am

Re: firewall interface showing administratively down

Post by progressive.nagiosXI »

Hi

we put all output in attached file.

as per the oid details interfaces are down , is their any way to find the state from firewall end (for showing admistratively down)

Thanks
You do not have the required permissions to view the files attached to this post.
User avatar
tgriep
Madmin
Posts: 9190
Joined: Thu Oct 30, 2014 9:02 am

Re: firewall interface showing administratively down

Post by tgriep »

The message administratively down means that someone logged in to the device and disabled the port in software.
Which is turning it off.
The snmpwalk command shows that index 6 to 25 and index 1 is administratively shutdown.
The client is probably only using index 2 to 5 or the port called deciated_ha2 and that is why it is working for them.

To me, the snmpwalk command matches the XI server's data.

See this guide to set the interfaces up or down administratively.
https://knowledgebase.paloaltonetworks. ... 000ClZQCA0
Be sure to check out our Knowledgebase for helpful articles and solutions!
Locked