topic Cisco ISE 3.1 SNMP polling in Network Access Control

Cisco ISE 3.1 SNMP polling

avi4feb — Fri, 26 May 2023 19:47:48 GMT

Hi Team, I want to SNMP poll ISE nodes for CPU, Memory utilization but i am having a hard time finding the MIB for the same. Could you please help direct? I plan to use polling than traps from ISE.

I am using Cisco ISE 3.1 on VM

#show version

Cisco Application Deployment Engine OS Release: 3.1
ADE-OS Build Version: 3.1.0.135
ADE-OS System Architecture: x86_64

Re: Cisco ISE 3.1 SNMP polling

Mark Elsen — Sat, 27 May 2023 05:35:30 GMT

- It looks like ISE only supports sending SNMP traps : https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215521-configure-and-understand-snmp-traps-to-m.html

Re: Cisco ISE 3.1 SNMP polling

thomas — Wed, 14 Jun 2023 14:46:55 GMT

Please see the ISE CLI Reference Guides for the commands to configure SNMP and the available MIBs for querying:

snmp-server enable

MIBs

The SNMP agent on the Cisco ISE provides read-only access to the following MIBs for all versions of SNMP:

SNMPv2-MIB
RFC1213-MIB
IF-MIB
IP-MIB
IP-FORWARD-MIB
TCP-MIB
UDP-MIB
HOST-RESOURCES-MIB
ENTITY-MIB-Only 3 MIB variables are supported on the ENTITY-MIB:
Product ID: entPhysicalModelName

Version ID: entPhysicalHardwareRev

Serial Number: entPhysicalSerialNumber
DISMAN-EVENT-MIB
NOTIFICATION-LOG-MIB
CISCO-CDP-MIB

You can query for the system object identifiers for SNS devices. The system object identifier for ISE 3315 is the default value displayed if a new device series has been introduced but is not updated in Cisco ISE release and patch releases.

For example:

ise/admin(config)# snmpwalk -v 2c -c snmpV2cCommunityString iseFQDN-or-IP
SNMPv2-MIB::sysObjectID.0SNMPv2-MIB::sysObjectID.0 = OID: SNMPv2