Monitoring the System with SNMP

You can use SNMP to monitor different aspects of the Scalable Platform, including:

• Software versions
• Hardware status
• Key performance indicators
• Chassis high availability status

To monitor the system using SNMP:

1. Upload the Check Point MIB to your third-party SNMP monitoring software.

   The SNMP MIB is located on each SGM under: $CPDIR/lib/snmp/chkpnt.mib

   To monitor the Scalable Platform, the supported OIDs are under
   iso.org.dod.internet.private.enterprise.checkpoint.products.asg (OID 1.3.6.1.4.1.2620.1.48)

2. Enable the SNMP agent on the Scalable Platform.

   In gclish, run:
   > set snmp agent on

SNMP Traps

The Scalable Platform supports this SNMP trap only:

iso.org.dod.internet.private.enterprise.checkpoint.products.asgTrap
(OID 1.3.6.1.4.1.2620.1.2001)

The SNMP traps MIB is located on each SGM under: $CPDIR/lib/snmp/chkpnt-trap.mib

Note - The set snmp traps command is not supported. You must use the asg alert configuration wizard for this purpose.

To learn more about SNMP, see:

• Configuring asg alerts
• The R76SP.30 61000/41000 Security System Administration Guide
• The R76 Gaia Administration Guide
• sk90860: How to configure SNMP on Gaia OS

Included Topics SNMP in a VSX Gateway

SNMP in a VSX Gateway

There are two SNMP modes for a Scalable Platform configured as a VSX Gateway:

Default Mode	Monitor global SNMP data from the Scalable Platform. Data comes from all SGMs on all Virtual Systems.
VS Mode	Monitor each Virtual System separately.

Note - SNMP traps are supported for VS0 only.

Supported SNMP Versions

SNMP VS mode uses SNMP version 3 to query the Virtual Systems. You can run remote SNMP queries on each Virtual System in the VSX Gateway.

For systems that only support SNMP versions 1 and 2:

• You cannot run remote SNMP queries for each Virtual System. You can only run a remote SNMP query on VS0.
• You can use the CLI to change the Virtual System context and then run a local SNMP query on a Virtual System.

To use SNMP in the Virtual System mode:

1. Configure an SNMP V3 user:
   add snmp usm user jon security-level authNoPriv authpass-phrase VALUE
2. Set the SNMP mode:
   set snmp mode vs
   or
   set snmp mode default
3. Start SNMP agent:
   set snmp agent on

VS Mode Example 1:

To run a Virtual System query for traffic throughput, from a remote Linux host:

[Expert@VSX:0] snmpwalk -m $CPDIR/lib/snmp/chkpnt.mib -n ctxname_vsid1 -v 3 -l authNoPriv -u jon -A mypassword 192.0.2.72 asgThroughput

VS Mode Example 2:

To run a Virtual System query for traffic throughput, from its virtual context:

1. Go to the Expert mode.
2. Go to the applicable Virtual System:
   vsenv <vs_id>
3. Run:
   # snmpwalk -m $CPDIR/lib/snmp/chkpnt.mib -v 2c -c public
localhost asgThroughput