F5 devices show "Unknown Status" with no Reachability metrics in CA Performance Management (CAPM)

book

Article ID: 195327

calendar_today

Updated On:

Products

CA Infrastructure Management CA Performance Management - Usage and Administration DX NetOps

Issue/Introduction

Unable to see metrics to report from the "System Session Information" metric family for F5 Load Balancers 

Enabled debug and could see the values being returned for this device when polling, but the same does not reflect in reports .

Mar 27 15:44:13.463: Received SNMP response [Resp Time: 5 ms / Trans Time: 5 ms] evResponse:RESPONSE[requestID=1132316095, errorStatus=Success(0), errorIndex=0, VBS[
1.3.6.1.4.1.3375.2.6.1.4.3.0 = 229;
1.3.6.1.4.1.3375.2.6.1.4.14.0 = 825;
1.3.6.1.4.1.3375.2.6.1.4.7.0 = 0;
1.3.6.1.4.1.3375.2.6.1.4.2.0 = 1832;
1.3.6.1.4.1.3375.2.6.1.4.8.0 = 490;
1.3.6.1.4.1.3375.2.6.1.4.5.0 = 227;
1.3.6.1.4.1.3375.2.6.1.4.3.0 = 229;
1.3.6.1.2.1.1.3.0 = 20:17:23.50]]
evRequest: GET[requestID=1132316095, errorStatus=Success(0), 

These are Load Balancers's from which VPN session user counts are reported on

Cause

There is a bug in the default certification (F5BigipSysSessionsMib). There are 2 attributes using the same OID. One is NeedsDelta=true and the other =false. So it's calculating delta for both and using the delta for both attributes.

Environment

Release : 3.7.x
Component : IM Reporting / Admin / Configuration

Resolution

Create a VC extension to overcome this as follows:

  1. GET the template for VC via a REST client first using;

    http://<DA_HOST>:8581/typecatalog/certifications/snmp/F5BigIpSysSessionsMib

    This is as per our guide: 

    Broadcom TechDocs : DX NetOps 20.2 - Get a Vendor Certification XML Template

  2. Then edit this template to only include the apmAccessStatResultDeny attribute;

    <?xml version="1.0" encoding="UTF-8" standalone="yes"?>

    <!--Auto-generated by the type catalog local manager.-->

    <DataModel xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" namespace="http://im.ca.com/certifications/snmp" xsi:noNamespaceSchemaLocation="SNMPCertificationFacet.xsd">

        <Author>CA</Author>

        <Version>1.0</Version>

        <FacetType name="F5BigIpSysSessionsMib" descriptorClass="com.ca.im.core.datamodel.certs.CertificationFacetDescriptorImpl">

            <Documentation>Support for F5 BigIP System Sessions</Documentation>

            <FacetOf namespace="http://im.ca.com/core" name="Item"/>

            <AttributeGroup name="F5BigIpSysSessionsGroup" external="true">

              <Documentation/>

              <Attribute name="apmAccessStatResultDeny" type="Double">

                <Documentation />

                <IsKey>false</IsKey>

                <NeedsDelta>true</NeedsDelta>

                <Source>1.3.6.1.4.1.3375.2.6.1.4.10.0</Source>

              </Attribute>

            </AttributeGroup>

        </FacetType>

    </DataModel>

  3. Then place this in the body of the REST client;


  4. Then set the content-type to 'application/xml';

  5. Then run it as a PUT request.

Attachments