Cisco Firepower SysObjectID issues

holleyc77

Hi, I have a Cisco 2110 that is running ASA code 9.8(2), not FX-OS.  We are using for remote VPN.  It does not seem to be pulling the correct "SysObjectID"  It is saying it is a "Cisco NCS 5001" device. Which is incorrect.  I have some other Cisco Firepower devices in my network running FX-OS and they seem to be doing ok, although I ... I am a little lost on what to do.

I thought if I pulled down some device templates from Thwack for Firepowers and do a rediscovery it would pull those...but I think I am confused on that whole thing???  My goal would be to assure it is identifying correctly, because the node detail dashboard is not really useful.  

The one I want to change is pulling 1.3.6.1.4.1.9.1.2317

The ones that say they are firepowers is pulling 1.3.6.1.4.1.9.1.2404 

image.png

cahunt

@holleyc77 "Fixing" this will be a two tier effort, first we need to scan/walk the device. you can use SNMPWalk.exe (in the Orion application Folder) to Walk the device and get a return of the MIB structure. In this you should be able to find the 'SystemObjectID' or the correct detail you want in that spot.

Once you have that, and anything else you want to change/update on the Node Details section; you need to create a new poller.

settings - All Settings - Node & Group Management Section - Click on Manage Pollers

Click, 'Create a New Poller' and you will have to fill in the details (OIDs) you want to use for each return.

reference for what we normally poll can be found on OIDRef (https://oidref.com/1.3.6.1.2.1.1), on the system MIB and reference the Children at the bottom of the page.

Where these 'default' values do not provide the data you expect, set the OID to the matching data that returned in your SNMPWalk.

Several may be the same/default OID, but creating your own poller allows you to customize any of the fields with a different OID where the device supplies a different or more accurate value.

Once created, scan your device with the poller set, and apply or do a 'List Resources' on the node and change the Poller from the SolarWinds Default to your custom Named poller.