Check Point tunnel metric data missing from DX NetOps Portal reports

Products

DX NetOps CA Performance Management - Usage and Administration

Issue/Introduction

IPSec Tunnel aggregate statistics getting N/A value when it was reporting in the past.

DX NetOps Performance Management reports for metric data from Check Point tunnel metrics are not correct.

Some devices are working fine. Some devices that used to show the data no longer do.

The working devices are using the Vendor Certification (VC) "Check Point IPSec Tunnel Aggregate Counter64".

The devices without data are using the VC "Check Point IPSec Tunnel Aggregate".

Environment

All supported DX NetOps Performance Management releases

Cause

The svnVersion value for problem devices is newer than the working devices and are not referenced in the VC XML.

Device without data has svnVersion=R81.10
Device with data has svnVersion=R80.40

Which VC is used by which device is determined by the svnVersion number.

VC Check Point IPSec Tunnel Aggregate Counter64 (Internal Name: CheckpointIpsecTunnelMib)

<VCSupportExpression>("r80.20,r80.20sp,r80.30,r80.40" contains (svnVersion.toString().toLowerCase()))?false:true</VCSupportExpression>

VC Check Point IPSec Tunnel Aggregate Counter64 (Internal Name: CheckpointIpsecTunnelCounter64Mib)

<VCSupportExpression>("r80.20,r80.20sp,r80.30,r80.40" contains (svnVersion.toString().toLowerCase()))?true:false</VCSupportExpression>

Without the R81.10 svnVersion listed discovery would not complete and polling would not take place.

Resolution

To correct this add the new release to the VCs using an extension. See the Create or Extend Vendor Certifications documentation topic for additional information.

Using a REST API PUT call update the extension using the below XML. The URL to use for each VC, as well as the body for each PUT call, are below.

NOTE: Replace <scheme>, <DA_Host> and <Port> with the values for the active DA.

Extension for the Check Point IPSec Tunnel Aggregate VC

URL: <scheme>://<DA_Host>:<Port>/typecatalog/certifications/snmp/extension/CheckpointIpsecTunnelMib

Body to use:

<DataModel xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" namespace="http://im.ca.com/certifications/snmp" xsi:noNamespaceSchemaLocation="SNMPCertificationFacet.xsd">
<Author>CA</Author>
<Version>1.2</Version>
<FacetType name="CheckpointIpsecTunnelMib" descriptorClass="com.ca.im.core.datamodel.certs.CertificationFacetDescriptorImpl">
<FacetOf namespace="http://im.ca.com/core" name="Item"/>
<Expressions>
<ExpressionGroup destCert="{http://im.ca.com/normalizer}NormalizedIpsecTunnelInfo" name="CheckpointIpsecTunnel.MibDS">


<VCSupportExpression>("r80.20,r80.20sp,r80.30,r80.40,r81.10" contains (svnVersion.toString().toLowerCase()))?false:true</VCSupportExpression>
</ExpressionGroup>
</Expressions>
</FacetType>
</DataModel>

Extension for the Check Point IPSec Tunnel Aggregate Counter64 VC

URL: <scheme>://<DA_Host>:<Port>/typecatalog/certifications/snmp/extension/CheckpointIpsecTunnelCounter64Mib

Body to use:

<DataModel xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" namespace="http://im.ca.com/certifications/snmp" xsi:noNamespaceSchemaLocation="SNMPCertificationFacet.xsd">
<Author>CA</Author>
<Version>1.0</Version>
<FacetType name="CheckpointIpsecTunnelCounter64Mib" descriptorClass="com.ca.im.core.datamodel.certs.CertificationFacetDescriptorImpl">
<FacetOf namespace="http://im.ca.com/core" name="Item"/>
<Expressions>
<ExpressionGroup destCert="{http://im.ca.com/normalizer}NormalizedIpsecTunnelInfo" name="CheckpointIpsecTunnelCounter64MibDS">


<VCSupportExpression>("r80.20,r80.20sp,r80.30,r80.40,r81.10" contains (svnVersion.toString().toLowerCase()))?true:false</VCSupportExpression>
</ExpressionGroup>
</Expressions>
</FacetType>
</DataModel>