MRTG Monitoring Juniper Firewall traffic configuration in Linux

First, Juniper Open SNMP

The steps to turn on SNMP are the same as yesterday's reference to configuration methods, which is skipped here.
Second, install the configuration MRTG

1, installation

MRTG's official page is http://oss.oetiker.ch/mrtg/, the latest version is 2.17.4. You can choose to compile the installation using the source package, or you can select the system source installation.

The code is as follows	Copy Code
#yum-y install MRTG mrtg-libs

It should be noted that MRTG also has a Windows version, because of the personal habit of using Linux here still take Centos/redhat as an example.

2, cfgmaker build configuration file

The code is as follows	Copy Code
#cfgmaker--global "WORKDIR:/VAR/WWW/MRTG"--output/etc/mrtg/mrtg.cfg public@192.168.1.2

Cfgmaker can be followed by more parameters, the return parameter content is written to the generated mrtg.cfg file, can also be generated and then modified. The editor Mrtg.cfg pay particular attention to the following lines of configuration:

The code is as follows	Copy Code
#时间从左至右显示, the minimum unit bits,growright is not opened, and the default is the time display order from right to left Options[_]: Growright, Bits #页面刷新频率, 300s refresh:300 #也是刷新频率, 5 minutes. Interval:5 #mrtg默认数据是以文本的格式存在的, add the following content to support the RRDtool database format generation #LogFormat: RRDtool #rrdtool程序所在的目录 #PathAdd:/usr/bin/ Enableipv6:no Workdir:/var/www/mrtg

In addition to the above, some of the other parameters may also be used, which is also listed here:

Workdir//Set up working directory, storing MRTG collected data and generated statistics files
Language//Set the Web page display language = Chinese gb2312
Growright//indicating flow chart changes to the right at any time
Target//indicates the monitored equipment;
The means of =port:community@router the equipment;
Commnunity//Represents SNMP communication password
Directory indicates that the relevant files of the monitoring device are stored in a =/var/www/mrtg/eth0/location;
Default save in Workdir working directory
MaxBytes//Indicates the maximum value of the data being collected. If the collected data is greater than the value, MRTG will ignore and maintain the last data value collected
KMG//Indicator multiplier unit (default per thousand Hop one unit)
Ylegend//Indicates the y-axis unit mark (not in Chinese)
Shortlegend//indicating the unit mark of the data
A textual description of the statistical line of four different colours legend1,2,3,4 respectively
LEGEND1:///////////per 5 min.
Legend2:////////per 5 min.
LEGEND3:///////////per 5 min.
LEGEND4://///////per 5 min.
Legendi,o///Description of data outflow and outflow, respectively
Withpeak//indicating how to display the flow chart
A total of four different colors of the statistical line, green means that the average inflow, blue mean outflow, the maximum inflow of dark dark, purple represents the largest outflow
N represents not set W represents weekly chart, represents monthly chart, Y represents annual chart
Do not set Withpeak, only green inflow and blue outflow
PageTop//Indicates HTML code added to the head of the Web page for customizing the Web page
The <TABLE></TABLE> part that starts with a space is pagetop content, both directly as HTML code

Note: When you use the RRDtool format to save data, the view page needs CGI call data, the available CGI plug-ins have MRTG-RRD, routers2.cgi, 14all.cgi, you can refer to the following pages

Http://oss.oetiker.ch/mrtg/doc/mrtg-rrd.en.html

http://www.fi.muni.cz/~kas/mrtg-rrd/

3. Create the initial Web page

The code is as follows	Copy Code
#mrtg/etc/mrtg/mrtg.cfg #mrtg/etc/mrtg/mrtg.cfg #mrtg/etc/mrtg/mrtg.cfg

Note that this is normally run three times, the first two times appear warnning is normal.

4, Generate index Home

The code is as follows	Copy Code
#indexmaker/etc/mrtg/mrtg.cfg--output/var/www/mrtg/index.html

Now go to the/VAR/WWW/MRTG directory view that you just specified, and you can see that the following files were generated:

The code is as follows

Copy Code

#[root@localhost mrtg]# ls/var/www/mrtg/ 192.168.1.2_504-day.png 192.168.1.2_509-year.png 192.168.1.2_522-week.png 192.168.1.2_529.old 192.168.1.2_504.html 192.168.1.2_510-day.png 192.168.1.2_522-year.png 192.168.1.2_529-week.png 192.168.1.2_504.log 192.168.1.2_510.html 192.168.1.2_523-day.png 192.168.1.2_529-year.png 192.168.1.2_504-month.png 192.168.1.2_510.log 192.168.1.2_523.html 192.168.1.2_530-day.png 192.168.1.2_504.old 192.168.1.2_510-month.png 192.168.1.2_523.log 192.168.1.2_530.html 192.168.1.2_504-week.png 192.168.1.2_510.old 192.168.1.2_523-month.png 192.168.1.2_530.log 192.168.1.2_504-year.png 192.168.1.2_510-week.png 192.168.1.2_523.old 192.168.1.2_530-month.png 192.168.1.2_505-day.png 192.168.1.2_510-year.png 192.168.1.2_523-week.png 192.168.1.2_530.old 192.168.1.2_505.html 192.168.1.2_511-day.png 192.168.1.2_523-year.png 192.168.1.2_530-week.png 192.168.1.2_505.log 192.168.1.2_511.html 192.168.1.2_524-day.png 192.168.1.2_530-year.png 192.168.1.2_505-month.png 192.168.1.2_511.log 192.168.1.2_524.html 192.168.1.2_531-day.png 192.168.1.2_505.old 192.168.1.2_511-month.png 192.168.1.2_524.log 192.168.1.2_531.html 192.168.1.2_505-week.png 192.168.1.2_511.old 192.168.1.2_524-month.png 192.168.1.2_531.log 192.168.1.2_505-year.png 192.168.1.2_511-week.png 192.168.1.2_524.old 192.168.1.2_531-month.png 192.168.1.2_506-day.png 192.168.1.2_511-year.png 192.168.1.2_524-week.png 192.168.1.2_531.old 192.168.1.2_506.html 192.168.1.2_515-day.png 192.168.1.2_524-year.png 192.168.1.2_531-week.png 192.168.1.2_506.log 192.168.1.2_515.html 192.168.1.2_526-day.png 192.168.1.2_531-year.png 192.168.1.2_506-month.png 192.168.1.2_515.log 192.168.1.2_526.html 192.168.1.2_533-day.png 192.168.1.2_506.old 192.168.1.2_515-month.png 192.168.1.2_526.log 192.168.1.2_533.html 192.168.1.2_506-week.png 192.168.1.2_515.old 192.168.1.2_526-month.png 192.168.1.2_533.log 192.168.1.2_506-year.png 192.168.1.2_515-week.png 192.168.1.2_526.old 192.168.1.2_533-month.png 192.168.1.2_508-day.png 192.168.1.2_515-year.png 192.168.1.2_526-week.png 192.168.1.2_533.old 192.168.1.2_508.html 192.168.1.2_520-day.png 192.168.1.2_526-year.png 192.168.1.2_533-week.png 192.168.1.2_508.log 192.168.1.2_520.html 192.168.1.2_527-day.png 192.168.1.2_533-year.png 192.168.1.2_508-month.png 192.168.1.2_520.log 192.168.1.2_527.html Favicon.ico 192.168.1.2_508.old 192.168.1.2_520-month.png 192.168.1.2_527.log index.html 192.168.1.2_508-week.png 192.168.1.2_520.old 192.168.1.2_527-month.png Mrtg-l.gif 192.168.1.2_508-year.png 192.168.1.2_520-week.png 192.168.1.2_527.old Mrtg-l.png 192.168.1.2_509-day.png 192.168.1.2_520-year.png 192.168.1.2_527-week.png Mrtg-m.gif 192.168.1.2_509.html 192.168.1.2_522-day.png 192.168.1.2_527-year.png Mrtg-m.png 192.168.1.2_509.log 192.168.1.2_522.html 192.168.1.2_529-day.png Mrtg-r.gif 192.168.1.2_509-month.png 192.168.1.2_522.log 192.168.1.2_529.html Mrtg-r.png 192.168.1.2_509.old 192.168.1.2_522-month.png 192.168.1.2_529.log Mrtg-ti.gif 192.168.1.2_509-week.png 192.168.1.2_522.old 192.168.1.2_529-month.png Mrtg-ti.png

5, configure crontab Timing Data acquisition

The code is as follows	Copy Code
#vi/ETC/CRON.D/MRTG */5 * * * * root lang=c lc_all=c/usr/bin/mrtg/etc/mrtg/mrtg.cfg--lock-file/var/lock/mrtg/mrtg_l--confcache-file/var/ Lib/mrtg/mrtg.ok

6, configure Apache alias display

The code is as follows	Copy Code
Alias/mrtg/var/www/mrtg <Location/mrtg> #Order Deny,allow #Deny from all #Allow from 192.168.1.11 </Location>

The above is just a configuration example, and device access control is available if necessary.

7, optimize

Because it is a network device, mainly used to view the next network traffic, and from the 4th can be seen, its collection of all the port can be collected traffic, in fact, many times is not used or not we want to see, here will need to edit the Mrtg.cfg file only need to monitor the port ID, You also need to modify the contents of the Indexmaker generated home page file. The final effect of the following figure:

If you also need to monitor the CPU, memory and other information, you need to write scripts to obtain data written by Snmpwalk and save, and in the Mrtg.cfg file to do the corresponding configuration, and finally in the graphical interface to display.

Third, MRTG and host performance monitoring

Because this part is not the focus of this article, just incidentally, MRTG can also through SNMP to host the disk, CPU, memory and other information monitoring. The SNMP service needs to be turned on on the host. Linux is installed below (Windows can also be added to add a removal program):

The code is as follows	Copy Code
# yum Install Net-snmp

After the installation is complete, you need to edit the SNMP configuration file because many of the information is not allowed to be obtained by default:

The code is as follows	Copy Code
# vim/etc/snmp/snmp.conf View SystemView included. 1.3.6.1.2.1.1 #下面这一行为新增, for gathering traffic information View SystemView included. 1.3.6.1.2.1.2 View SystemView included. 1.3.6.1.2.1.25.1.1

Remember to reboot the SNMP service after the modification is complete. At the same time as the monitoring part of disk and mem, there are related configuration samples in the snmpd.conf, as well as the relevant examples of script execution, the parameter sample can be modified.

After the completion of the above steps configuration, and then refer to the above MRTG monitoring equipment process, repeated execution can be.