topic Re: Using SNMP to monitor DMVPN NHRP in Network Security

Using SNMP to monitor DMVPN NHRP

mbrown — Fri, 21 Feb 2020 09:03:23 GMT

Are there any SNMP OIDs for monitoring dynamic DMVPN NHRP entries? I'd like to poll my hub router for a list of active DMVPN spokes, and NHRP seems like the best thing to check, but I can't find any MIBs for NHRP outside of the Frame Relay context.

Thanks!

-Mason

Re: Using SNMP to monitor DMVPN NHRP

fmeetz — Mon, 24 Jul 2006 15:40:48 GMT

This might help you out...

http://www.cisco.com/en/US/partner/products/sw/iosswrel/ps5187/prod_release_note09186a00803704f4.html

Re: Using SNMP to monitor DMVPN NHRP

mbrown — Wed, 26 Jul 2006 20:15:28 GMT

Thanks for the link, but could you be a bit more specific about what it shows? I've searched through these release notes for "snmp", "nhrp", and "dmvpn" but didn't find what I was looking for.

-Mason

Re: Using SNMP to monitor DMVPN NHRP

martindesrosiers — Mon, 28 Aug 2006 18:01:13 GMT

I use these OID for my DMVPN query.

***HUB***

Active IKE sessions (count)

get .1.3.6.1.4.1.9.9.171.1.2.1.1.0

Active IPSec sessions (count)

get .1.3.6.1.4.1.9.9.171.1.3.1.1.0

IKE Peer's IP address (list)

walk .1.3.6.1.4.1.9.9.171.1.2.2.1.7.0

***SPOKE***

IKE History (ID)

walk .1.3.6.1.4.1.9.9.171.1.4.2.1.1.8

IKE History (reason based on ID)

walk .1.3.6.1.4.1.9.9.171.1.5.2.1.1.2

I don't know if it's exactly what you want. But if it's not, you can walk the cisco mib 1.3.6.1.4.1.9 in a text file and grab what you want. It's like this that I've found my OID

Enjoy 🙂

Re: Using SNMP to monitor DMVPN NHRP

mbrown — Thu, 31 Aug 2006 20:01:53 GMT

Thanks for the info. I'm sure this is what I'm looking for, but my router isn't responding to anything under the .171 OID. Doing an snmpwalk against 1.3.6.1.4.1.9.9, it jumps from 1.3.6.1.4.1.9.9.168 to 1.3.6.1.4.1.9.9.176. I'm running 12.4(9)T Advanced Security. What version are you running that has this MIB available? Or do I need to adjust the snmp-server views or something? I've never done that before, but this would be a good reason to try it out.

Thanks!

-Mason

Re: Using SNMP to monitor DMVPN NHRP

martindesrosiers — Fri, 01 Sep 2006 11:16:52 GMT

I use 12.3(11)T6 Advanced Security on my 3825 and 831 routers.

Even if you adjust the setting that you want, if you snmp walk skip the .171 OID, you wont be able to have it, I think :(. You need to use another IOS version.