Persistent Snmp Interface Indexes - D-Link NetDefendOS User Manual

Network security firewall
Hide thumbs Also See for NetDefendOS:
Table of Contents

Advertisement

Chapter 2: Management and Maintenance
Should it be necessary to enable SNMP Before Rules (which is enabled by default) then the
setting can be found in System > Device > Remote Management > Advanced Settings.

2.5.2. Persistent SNMP Interface Indexes

For SNMP access, NetDefendOS maintains an index table which contains a configuration's
interfaces (all types of interfaces) and each interface has an index number which indicates its
position in the table. SNMP client software, including scripts using SNMP, will use these index
numbers to refer to a particular interface.
The Problem is Adding or Subtracting Interfaces
By default, the index table is built every time NetDefendOS restarts but this can mean that a
given interface could get a new index number because new interfaces are added to or
subtracted from the configuration. This can pose a problem to SNMP client software which is
expecting an interface to have the same index number.
The Solution is Enabling Persistence
To make sure that an interface always has the same index number following a restart, the
administrator should enable the SNMP Persist Interface Index setting. This is a global setting
which is enabled for the entire configuration.
Enabling Persistent Interfaces in an HA Cluster
In a NetDefendOS high availability cluster, the interface index table is built in the same way and
the table is mirrored between the cluster nodes. However, if interface persistence is enabled, it
will only function correctly if the HA setting Synchronize Configuration is enabled on both master
and slave. This can be found in the Web Interface by going to System > Device > High
Availability and is enabled by default.
Adding Back a Subtracted Physical Interface
If a physical interface is removed from hardware (this could happen with expansion modules)
then the interface will still exist in the index table since it has probably not been removed from
the configuration. It is only when an interface is completely removed from a configuration that
its entry in the index table disappears.
This means that if the physical interface is later added back to the hardware, it will continue to
have the same index number. This is true even though the interface added may be a different
physical unit.
Compacting the Index Table
When interface persistence is enabled, it works by having every interface keep the same position
in the index table. This can mean that gaps appear in the table (and consequently the interface
index numbering) as interfaces disappear. The administrator can, if they wish, defragment the
table manually during a scheduled maintenance period using the following CLI command:
gw-world:/>
ifstat -snmpnewindexes
This must be followed by an Activate and Commit in order for the table to be defragmented.
115

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents