High neighbor discovery (ND) cache usage for Palo Alto Networks

Vendor

Palo Alto Networks

Description

Indeni will alert when the number of neighbor discovery entries stored by a device is nearing the allowed limit.

Remediation Steps

Identify the cause of the large neighbor discovery table. If it is due to a legitimate cause, such as a high number of hosts visible on the available networks, please contact your technical support provider.

How does this work?

This alert uses the Palo Alto Networks API to retrieve the current utilization of the ND cache - number of entries in it vs the total limit.

Why is this important?

This alert uses the Palo Alto Networks API to retrieve the current utilization of the ND cache - number of entries in it vs the total limit.

Without Indeni how would you find this?

An administrator could write a script to leverage the Palo Alto Networks API to collect this data periodically and alert appropriately. Alternatively, wait for an issue to occur and check the ND cache status by running "show neighbor all".


View Source Code