Thursday, July 19, 2018

Configuring SNMP Support

Enabling the SNMP service on the ASA

ciscoasa# configure terminal
ciscoasa(config)# snmp-server enable
ciscoasa(config)# snmp-server host logical_if_name IP_address poll community text version 2c
ciscoasa(config)# write
logical_if_name is one of the ASA’s logical interface names which communicate with the NMS server.
IP_address is an IP address of the NMS server where the VPNTTG program is running.
text is an ASA’s read SNMP community string.

 

Checking a list of the supported SNMP MIBs on the ASA

ciscoasa# show snmp-server oidlist

Checking a SNMP availability from the NMS server where the VPNTTG program is running

Install snmpwalk through yum:
[root@localhost ~]# yum -y install net-snmp-utils
Install snmpwalk through apt-get:
[root@localhost ~]# apt-get install snmp
The syntax is as follows:
snmpwalk -v2c -c <community> <ip_address> 1.3.6.1.4.1.9.9.171
Where:
community - is a SNMP read community of the VPN server
ip_address - is an IP address of the VPN server
In this example, SNMP community is - "public" and IP address is - 10.0.0.18
[root@localhost ~]# snmpwalk -v2c -c public 10.0.0.18 1.3.6.1.4.1.9.9.171
SNMPv2-SMI::enterprises.9.9.171.1.1.1.0 = INTEGER: 1
SNMPv2-SMI::enterprises.9.9.171.1.2.1.1.0 = Gauge32: 1
SNMPv2-SMI::enterprises.9.9.171.1.2.1.2.0 = Counter32: 1
SNMPv2-SMI::enterprises.9.9.171.1.2.1.3.0 = Counter32: 14976
SNMPv2-SMI::enterprises.9.9.171.1.2.1.4.0 = Counter32: 159
SNMPv2-SMI::enterprises.9.9.171.1.2.1.5.0 = Counter32: 0
SNMPv2-SMI::enterprises.9.9.171.1.2.1.6.0 = Counter32: 155
SNMPv2-SMI::enterprises.9.9.171.1.2.1.7.0 = Counter32: 0
SNMPv2-SMI::enterprises.9.9.171.1.2.1.8.0 = Counter32: 0
SNMPv2-SMI::enterprises.9.9.171.1.2.1.9.0 = Counter32: 0
SNMPv2-SMI::enterprises.9.9.171.1.2.1.10.0 = Counter32: 0
SNMPv2-SMI::enterprises.9.9.171.1.2.1.11.0 = Counter32: 15724
SNMPv2-SMI::enterprises.9.9.171.1.2.1.12.0 = Counter32: 160
SNMPv2-SMI::enterprises.9.9.171.1.2.1.13.0 = Counter32: 0
SNMPv2-SMI::enterprises.9.9.171.1.2.1.14.0 = Counter32: 310
SNMPv2-SMI::enterprises.9.9.171.1.2.1.15.0 = Counter32: 1
SNMPv2-SMI::enterprises.9.9.171.1.2.1.16.0 = Counter32: 0
SNMPv2-SMI::enterprises.9.9.171.1.2.1.17.0 = Counter32: 0
SNMPv2-SMI::enterprises.9.9.171.1.2.1.18.0 = Counter32: 0
SNMPv2-SMI::enterprises.9.9.171.1.2.1.19.0 = Counter32: 1
SNMPv2-SMI::enterprises.9.9.171.1.2.1.20.0 = Counter32: 0
SNMPv2-SMI::enterprises.9.9.171.1.2.1.21.0 = Counter32: 0
SNMPv2-SMI::enterprises.9.9.171.1.2.1.22.0 = Counter32: 0
SNMPv2-SMI::enterprises.9.9.171.1.2.1.23.0 = Counter32: 0
SNMPv2-SMI::enterprises.9.9.171.1.2.1.24.0 = Counter32: 0
SNMPv2-SMI::enterprises.9.9.171.1.2.1.25.0 = Counter32: 0
SNMPv2-SMI::enterprises.9.9.171.1.2.1.26.0 = Counter32: 0
SNMPv2-SMI::enterprises.9.9.171.1.2.2.1.6.1.9.49.48.46.48.46.48.46.49.56.1.9.49.48.46.48.46.48.46.49.57.500 = Hex-STRING: 0A 00 00 12 
SNMPv2-SMI::enterprises.9.9.171.1.2.2.1.7.1.9.49.48.46.48.46.48.46.49.56.1.9.49.48.46.48.46.48.46.49.57.500 = Hex-STRING: 0A 00 00 13 
SNMPv2-SMI::enterprises.9.9.171.1.2.2.1.8.1.9.49.48.46.48.46.48.46.49.56.1.9.49.48.46.48.46.48.46.49.57.500 = INTEGER: 160500
SNMPv2-SMI::enterprises.9.9.171.1.2.2.1.9.1.9.49.48.46.48.46.48.46.49.56.1.9.49.48.46.48.46.48.46.49.57.500 = INTEGER: 4096
...