Monitor a Cisco RV320 Using SNMP

Mark Berry October 24, 2014

So far I haven’t been able to find documentation or a MIB file for the Cisco RV320. However using GetIf and the RV0XX MIB, I managed to dig out some useful OIDs.

Update December 2, 2014 I did get a MIB collection for the RV320 from Cisco support but I was unable to find anything more useful than what I had already discovered below. You can download the MIB file here:

WAN IP Addresses

The best find was

.iso.org.dod.internet.private.enterprises.cisco.otherEnterprises.ciscosb.router003. management.wanMgt.wanConnectionTable.wanConnectionEntry.wanNetAddress

The MIB says this is “the IP address that this managed node has, when  seen from the external WAN, or the Internet. For WAN type of Static IP only.” Fortunately, it seems to work even if your WANs use dynamic IPs.

.1.3.6.1.4.1.9.6.1.105.2.3.1.1.4.1 – WAN1 public IP address
.1.3.6.1.4.1.9.6.1.105.2.3.1.1.4.2 – WAN2 public IP address

Interfaces

.iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry

This OID does seem to have some valid interface information. The interesting interfaces are the values ending in .6 = LAN (eth0), .7 = WAN1 (eth1), and .8 = WAN2 (eth2).

.iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry.ifPhysAddress

.1.3.6.1.2.1.2.2.1.6.6- MAC address of device
.1.3.6.1.2.1.2.2.1.6.7- WAN1 MAC address
.1.3.6.1.2.1.2.2.1.6.8– WAN2 MAC address

.iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry.ifOperStatus

.1.3.6.1.2.1.2.2.1.8.6 thru .8

Should show operational status, but shows “up” even if no network cables are attached to the WAN ports. I’m ignoring this one.

Update January 12, 2015 After upgrading the firmware from 1.1.1.06 to 1.1.1.19, sometimes a WAN value will show “down” after a router reboot with no cable connected, so the initial status is unpredictable. However, if you connect, then disconnect cables from the WAN ports, ifOperStatus correctly shows “down”. In fact, if you connect a cable to WAN1, power on the router, then disconnect the cable, it will show “down”. So there may be some value in monitoring these OIDs. Obviously it should show the correct value from the start; Cisco has been notified of the issue.

Update April 6, 2015 Cisco has confirmed that they will not fix the issue where the initial SNMP status is incorrect. Maybe not a big deal but a disappointing that they choose to leave bugs in the product.

.iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry.ifInOctets

.1.3.6.1.2.1.2.2.1.10.6 thru .8 – Total octets in on LAN, WAN1, and WAN2

.iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry.ifOutOctets

.1.3.6.1.2.1.2.2.1.16.6 thru .8 – Total octets out on LAN, WAN1, and WAN2

Have more useful RV320 OIDs? Let’s hear them! Would especially like to know about link status OIDs that would reveal up, down, inactive (connected but no Internet), etc.

Monitor in GFI

Once you have the OIDs, setting up the SNMP checks in GFI is fairly straightforward. See Eric Anthony’s article on All Things Max for more info:

Take An SNMP Walk – Creating New SNMP Checks using MIB Browsing Tools



6 Comments

  1. Joe   |  April 15, 2015 at 9:25 pm

    Don’t bother. The router becomes unstable when SNMP is enabled.
    When not enable I can go to any speed test website and no issues.
    When enabled any webpage other than a Google search takes forever to paint and speed tests hang.
    100% reproducible – every time.
    Have tried several iterations of firmware.

  2. Mark Berry   |  April 16, 2015 at 8:07 am

    Joe, that certainly is strange behavior. I’ve had SNMP enabled for several months without any reports like that. Just opened speedtest.net in Chrome 42 and IE 11. The entire busy page with all ads and Flash objects opened fine.

  3. Payton   |  June 25, 2015 at 3:24 pm

    We have had the same issue as Joe. We have 14 RV320 with VPN tunnels going from one to thirteen sites. When SNMP was enabled, tunnels would drop, the routers would sometimes lock up.

    With SNMP disabled, there are no network issues.

    100% reproducible – every time.

    YMMV

  4. xxxx   |  October 10, 2016 at 5:49 am

    its seems they fixed the snmp issue with new firmware.. it took onother 2+ years but they did it:D

  5. Mark Berry   |  October 10, 2016 at 4:56 pm

    Thanks for the update. I do see a few firmware updates at http://www.cisco.com/c/en/us/support/routers/rv320-dual-gigabit-wan-vpn-router/model.html, including 1.3.1.12 on June 20, 2016, but I don’t see mention of SNMP in any of the release notes. Which version solved your SNMP issue?

  6. snmpboo   |  November 07, 2016 at 7:58 am

    I’m afraid the new firmware only worked for one day for us, back to snmpd crashing almost immediately every time we re-activate it by hitting save on the config page. No mentions in the “system log” page as far as I can see.

Leave a Reply





*