Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Cisco > IPSec Monitoring for ASA_Series over SNMP

Reply
Thread Tools

IPSec Monitoring for ASA_Series over SNMP

 
 
mail@koelschman.de
Guest
Posts: n/a
 
      02-01-2006
Hi,
we would like to monitor different Lan2Lan connections. We want to see
the traffic on a per peer basis and we want to see if the tunnel is up
and running.
Does anybody know an easy way to do so????

Thanks

 
Reply With Quote
 
 
 
 
jcottingim
Guest
Posts: n/a
 
      02-01-2006
have you tried a mib-walk?

If the device is SNMP enabled, do a mib-walk to find the ifIndex of the
interface (tunnel) you want to monitor. Once you know it, perform a
snmpget on the ifOperStatus.<ifIndex> (1.3.6.1.2.1.2.2.1.8.X)
Here's a table of the result codes:
1 = up
2 = down
3 = testing
4 = unknown
5 = dormant


here's a sample of how to do this BY HAND:

FIND the if Index (First Step)
Unix>snmpwalk -v 1 -c public 10.1.2.3
interfaces.ifTable.ifEntry.ifDescr
interfaces.ifTable.ifEntry.ifDescr.1 = STRING: "GigabitEthernet0/0"
interfaces.ifTable.ifEntry.ifDescr.2 = STRING: "Tunnel"
interfaces.ifTable.ifEntry.ifDescr.3 = STRING: "Null0"
interfaces.ifTable.ifEntry.ifDescr.4 = STRING: "Loopback0"

Notice the ".2" after "ifDescr" on the Tunnel interface. THAT is your
ifIndex.

Poll that interface for it's status.
Unix> snmpget -c public 10.1.2.3 ifOperStatus.2
interfaces.ifTable.ifEntry.ifOperStatus.2 : INTEGER: up

You should also be able to graph the amount of data being
transmitted/received by periodically polling ifInOctets.2 and
ifOutOctets.2.

There are several good programs out there to help you get this
information. - Some are free - Like MRTG.


J.Cottingim

 
Reply With Quote
 
 
 
 
Erik Tamminga
Guest
Posts: n/a
 
      02-01-2006
have a loot at
http://tools.cisco.com/Support/SNMP/...OW-MONITOR-MIB

This is exactly what you need

Erik

<> wrote in message
news: oups.com...
> Hi,
> we would like to monitor different Lan2Lan connections. We want to see
> the traffic on a per peer basis and we want to see if the tunnel is up
> and running.
> Does anybody know an easy way to do so????
>
> Thanks
>



 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
cisco asa monitoring ipsec sa through snmp H. Steuer Cisco 4 09-13-2009 10:47 AM
VOIP over VPN over TCP over WAP over 3G Theo Markettos UK VOIP 2 02-14-2008 03:27 PM
4506 acting as LNS with L2TP over IPsec and IPsec over L2TP. AM Cisco 0 02-20-2007 09:00 AM
4506 acting as LNS with L2TP over IPsec and IPsec over L2TP. AM Cisco 1 02-20-2007 07:20 AM
IPsec within L2TP over IPsec - PIX. AM Cisco 0 07-23-2006 10:14 PM



Advertisments
 



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57