Monitor a Cisco RV320 Using SNMP

Mark Berry October 24, 2014

So far I haven’t been able to find documentation or a MIB file for the Cisco RV320. However using GetIf and the RV0XX MIB, I managed to dig out some useful OIDs.

Update December 2, 2014 I did get a MIB collection for the RV320 from Cisco support but I was unable to find anything more useful than what I had already discovered below. You can download the MIB file here:

WAN IP Addresses

The best find was

.iso.org.dod.internet.private.enterprises.cisco.otherEnterprises.ciscosb.router003. management.wanMgt.wanConnectionTable.wanConnectionEntry.wanNetAddress

The MIB says this is “the IP address that this managed node has, when  seen from the external WAN, or the Internet. For WAN type of Static IP only.” Fortunately, it seems to work even if your WANs use dynamic IPs.

.1.3.6.1.4.1.9.6.1.105.2.3.1.1.4.1 – WAN1 public IP address
.1.3.6.1.4.1.9.6.1.105.2.3.1.1.4.2 – WAN2 public IP address

Interfaces

.iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry

This OID does seem to have some valid interface information. The interesting interfaces are the values ending in .6 = LAN (eth0), .7 = WAN1 (eth1), and .8 = WAN2 (eth2).

.iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry.ifPhysAddress

.1.3.6.1.2.1.2.2.1.6.6- MAC address of device
.1.3.6.1.2.1.2.2.1.6.7- WAN1 MAC address
.1.3.6.1.2.1.2.2.1.6.8– WAN2 MAC address

.iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry.ifOperStatus

.1.3.6.1.2.1.2.2.1.8.6 thru .8

Should show operational status, but shows “up” even if no network cables are attached to the WAN ports. I’m ignoring this one.

Update January 12, 2015 After upgrading the firmware from 1.1.1.06 to 1.1.1.19, sometimes a WAN value will show “down” after a router reboot with no cable connected, so the initial status is unpredictable. However, if you connect, then disconnect cables from the WAN ports, ifOperStatus correctly shows “down”. In fact, if you connect a cable to WAN1, power on the router, then disconnect the cable, it will show “down”. So there may be some value in monitoring these OIDs. Obviously it should show the correct value from the start; Cisco has been notified of the issue.

Update April 6, 2015 Cisco has confirmed that they will not fix the issue where the initial SNMP status is incorrect. Maybe not a big deal but a disappointing that they choose to leave bugs in the product.

.iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry.ifInOctets

.1.3.6.1.2.1.2.2.1.10.6 thru .8 – Total octets in on LAN, WAN1, and WAN2

.iso.org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifEntry.ifOutOctets

.1.3.6.1.2.1.2.2.1.16.6 thru .8 – Total octets out on LAN, WAN1, and WAN2

Have more useful RV320 OIDs? Let’s hear them! Would especially like to know about link status OIDs that would reveal up, down, inactive (connected but no Internet), etc.

Monitor in GFI

Once you have the OIDs, setting up the SNMP checks in GFI is fairly straightforward. See Eric Anthony’s article on All Things Max for more info:

Take An SNMP Walk – Creating New SNMP Checks using MIB Browsing Tools



12 Comments

  1. Joe   |  April 15, 2015 at 9:25 pm

    Don’t bother. The router becomes unstable when SNMP is enabled.
    When not enable I can go to any speed test website and no issues.
    When enabled any webpage other than a Google search takes forever to paint and speed tests hang.
    100% reproducible – every time.
    Have tried several iterations of firmware.

  2. Mark Berry   |  April 16, 2015 at 8:07 am

    Joe, that certainly is strange behavior. I’ve had SNMP enabled for several months without any reports like that. Just opened speedtest.net in Chrome 42 and IE 11. The entire busy page with all ads and Flash objects opened fine.

  3. Payton   |  June 25, 2015 at 3:24 pm

    We have had the same issue as Joe. We have 14 RV320 with VPN tunnels going from one to thirteen sites. When SNMP was enabled, tunnels would drop, the routers would sometimes lock up.

    With SNMP disabled, there are no network issues.

    100% reproducible – every time.

    YMMV

  4. xxxx   |  October 10, 2016 at 5:49 am

    its seems they fixed the snmp issue with new firmware.. it took onother 2+ years but they did it:D

  5. Mark Berry   |  October 10, 2016 at 4:56 pm

    Thanks for the update. I do see a few firmware updates at http://www.cisco.com/c/en/us/support/routers/rv320-dual-gigabit-wan-vpn-router/model.html, including 1.3.1.12 on June 20, 2016, but I don’t see mention of SNMP in any of the release notes. Which version solved your SNMP issue?

  6. snmpboo   |  November 07, 2016 at 7:58 am

    I’m afraid the new firmware only worked for one day for us, back to snmpd crashing almost immediately every time we re-activate it by hitting save on the config page. No mentions in the “system log” page as far as I can see.

  7. Hugo   |  December 19, 2016 at 1:21 pm

    Just grappling with this on a RV320 (using snmp and getting “WAN port goes inactive”, plus odd ping packet drops & pauses), that the Release Notes for the latest v1.3.2.02 FW (released 9Dec16) says…

    Resolved Issues…
    – Performance hit after enabling SNMP (CSCva92155)

    Bug CSCva92155 – Performance hit after enabling SNMP; Workaround: Disabled SNMP; Rebooting router temporarily helps this

    Recap: Bug CSCuu10991 – RV320: WAN port goes inactive intermittently; Workaround: Disabling SNMP sometimes helps, Downgrade to 1.1.1.06

    Has anyone tried this new v1.3.2.02 FW with snmp enabled to see if both issues are resolved (eg. if same root cause). Thanks.

  8. YT   |  January 19, 2017 at 7:15 am

    I updated to 1.3.2.02, SNMP issue still persists.
    When I enable SNMP(either v1,2 or v3) webpage loading sometime fails or partially fails.
    I guess they need overhaul and major update on their firmware…..
    Thanks,

  9. Mark Berry   |  January 19, 2017 at 8:21 am

    The RV320 where I’m using SNMP is still on firmware 1.1.1.06. Not using VPN. SNMP seems to work fine.

  10. David Smith   |  January 19, 2017 at 10:30 am

    We have the same issue. You cant run any kind of monitoring on these routers. running v1.3.2.02 and 5 VPN connections via satellite offices the second SNMP is enabled and data starts getting collected the infrastructure falls apart. I am starting to think its a CPU limitation. perhaps the routers are simply having such a hard time with VPN their taxed too much for the added traffic?

  11. YT   |  January 23, 2017 at 8:00 am

    I am not using VPN but still snmpd mess up the box…..
    I believe it’s a software bug,,

  12. YT   |  January 24, 2017 at 10:23 am

    By the way,
    I am not using VPN. just a few PAT.
    Tried several ways to disable WAN2 (make it DMZ, give a pseudo static ip).
    but nothing worked against snmpd from disturbing an internet connection.

Please use the lower comment form while we work out a formatting issue.





Leave a Reply

Your email address will not be published. Required fields are marked *

*

Notify me of followup comments via e-mail. You can also subscribe without commenting.