topic Re: Monitoring ISE health using SNMP Polling in Network Access Control

Monitoring ISE health using SNMP Polling

lurru — Thu, 18 May 2017 20:22:16 GMT

What are the best practices for monitoring ISE using SNMP polling? I'm aware of this document:

SNMP Traps To Monitor Cisco ISE Processes

Cisco Identity Services Engine Administrator Guide, Release 2.1 - Monitoring and Troubleshooting [Cisco Identity Servic…

Unfortunately, Traps are not an option due to the tool used. So, I'm looking for a document regarding monitoring of the processes using SNMP polling, or otherwise other options for monitoring ISE health using polling.

Thanks.

Re: Monitoring ISE health using SNMP Polling

Craig Hyps — Fri, 19 May 2017 12:11:42 GMT

The SNMP Agent on Cisco ISE provides read-only access to the following MIBs:

SNMPv2-MIB
RFC1213-MIB(MIB II)
IF-MIB
IP-MIB
IP-FORWARD-MIB
TCP-MIB
UDP-MIB
HOST-RESOURCES-MIB
ENTITY-MIB —Three MIB variables are supported on the ENTITY-MIB:
- Product ID: entPhysicalModelName
- Version ID: entPhysicalHardwareRev
- Serial Number: entPhysicalSerialNumber
DISMAN-EVENT-MIB
NOTIFICATION-LOG-MIB
CISCO-CDP-MIB

Appliance OIDs available in CISCO-PRODUCTS-MIB:

ciscoIse3315K9 ISE_3315_SYSOBJID="1.3.6.1.4.1.9.1.1423"
ciscoIse3395K9 ISE_3395_SYSOBJID="1.3.6.1.4.1.9.1.1424"
ciscoIse3355K9 ISE_3355_SYSOBJID="1.3.6.1.4.1.9.1.1425"
ciscoIseVmK9 ISE_VM_SYSOBJID="1.3.6.1.4.1.9.1.1426"
ciscoSNS3495K9 ISE_3495_SYSOBJID="1.3.6.1.4.1.9.1.2139"
ciscoSNS3415K9 ISE_3415_SYSOBJID="1.3.6.1.4.1.9.1.2140"
ciscoSNS3595K9 ISE_3595_SYSOBJID="1.3.6.1.4.1.9.1.2266"
ciscoSNS3515K9 ISE_3515_SYSOBJID="1.3.6.1.4.1.9.1.2265"

Additionally, hardware appliances have the CIMC which supports the Cisco UCS MIB Files

/Craig

Re: Monitoring ISE health using SNMP Polling

lurru — Mon, 22 May 2017 22:45:20 GMT

Thanks Craig. One question though. The documentation for using SNMP traps to monitor ISE processes has this note:

Cisco Identity Services Engine Administrator Guide, Release 2.1 - Monitoring and Troubleshooting [Cisco Identity Servic…

"ISE does not have any MIB for process status or disk utilization. You cannot use snmp walk or snmp get command to query the process status or disk utilization. Cisco ISE uses OID HOST-RESOURCES-MIB::hrSWRunName, UCD_SNMP_OID:dskPercent, and HOST-RESOURCES-MIB:hrSWRunStatus for sending SNMP trap."

If I am understanding the note correctly, you can only use traps to monitor the ISE processes, is that correct? No process monitoring available via polling. Again, I may be understanding that note incorrectly.

But if so, from the list of MIBs that you provided, what other OIDs are recommended for monitoring the correct functioning of ISE nodes?

Thanks.

Re: Monitoring ISE health using SNMP Polling

Bradley Marshall — Tue, 20 Mar 2018 21:51:36 GMT

Good question!

Re: Monitoring ISE health using SNMP Polling

Bradley Marshall — Tue, 20 Mar 2018 21:52:00 GMT

Great info, thanks!

Re: Monitoring ISE health using SNMP Polling

rodrigo_palma — Tue, 10 Dec 2019 15:07:24 GMT

I need to know hardware status
Maybe its in ENTITY-MIB - PhysicalClass?
I cant find this oid