Firewall Interface Identifiers in SNMP Managers and NetFlow Collectors
When you use a NetFlow collector (see NetFlow
Monitoring) or SNMP manager (see SNMP
Monitoring and Traps) to monitor the Palo Alto Networks firewall,
an interface index (SNMP ifindex object) identifies the interface
that carried a particular flow (see Interface
Indexes in an SNMP Manager). In contrast, the firewall web
interface uses interface names as identifiers (for example, ethernet1/1),
not indexes. To understand which statistics that you see in a NetFlow
collector or SNMP manager apply to which firewall interface, you
must be able to match the interface indexes with interface names.
You can match the indexes with names by understanding the formulas
that the firewall uses to calculate indexes. The formulas vary by
platform and interface type: physical or logical.
Physical interface indexes have a range of 1-9999, which the
firewall calculates as follows:
Firewall Platform
Calculation
Example Interface Index
VM-Series
Number of management ports + physical port
offset
Number of management ports
—This is a
constant of 1.
Physical port offset
—This is the physical port number.
VM-100 firewall, Eth1/4 =
1 (number
of management ports) + 4 (physical port) =
5
PA-220, PA-220R, PA-800 Series
Number of management ports + physical port
offset
Number of management ports
—This is a
constant of 5.
Physical port offset
—This is the physical port number.
PA-5200 Series firewall, Eth1/4 =
5
(number of management ports) + 4 (physical port) =
9
PA-3200 Series, PA-5200 Series
Number of management ports + physical port
offset
Number of management ports
—This is a
constant of 4.
Physical port offset
—This is the physical port number.
PA-5200 Series firewall, Eth1/4 =
4
(number of management ports) + 4 (physical port) =
8
PA-7000 Series
(Max. ports * slot) + physical port offset
+ number of management ports
Maximum ports
—This
is a constant of 64.
Slot
—This is the chassis slot number of the network
interface card.