Firebox SNMP ifIndex mismatch
Hi,
I've been querying a Firebox M470 SNMP data to get reachable devices from it and noticed something strange:
According to RFC 4293, for ipNetToPhysicalTable ( ---/get/1.3.6.1.2.1.4.35.1 ), the first part of the index is ipNetToPhysicalIfIndex which should match the ifIndex for that interface - "The interface identified by a particular value of this index is the same interface as identified by the same value of the IF-MIB's ifIndex."
However the entries here do not match the if-indices from the ifTable ( ---/get/1.3.6.1.2.1.2.2.1 ). In particular from ipNetToPhysicalTable, I am getting entries with indices 4 and 5, and in the ifTable, the indices are from 4096 to 4103.
Is there any way to remap the indices I get to the correct ifIndex? The rest of the oid-s from the ip table seem to use the correct ones...
[removed domain name]
Comments
Hi @KGS
It'd help to know what version of SNMP you're using, what model the firewall is, and what version the firewall is running. I'd suggest opening a support case, and include a packet capture of the request/output if possible.
I don't see ipNetToPhysicalIfIndex or 1.3.6.1.2.1.4.35.1 included in the supported items, so this may be something the firewall doesn't specifically or fully support.
See:
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/basicadmin/snmp_about_mibs_c.html
Fireboxes do have some custom MIBs, which you can find here:
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/basicadmin/snmp_mibs_details_c.html
-James Carson
WatchGuard Customer Support