topic Re: How to monitor Local IP Pools on ASA in Network Security

How to monitor Local IP Pools on ASA

bforan — Fri, 21 Feb 2020 12:13:46 GMT

Is there a way to monitor the availability or usage of Local IP pools on an ASA? Maybe an OID string that can be pulled by an NMS system. I would like to be alerted prior to the pool being exhausted.

Re: How to monitor Local IP Pools on ASA

Jatin Katyal — Mon, 31 Jan 2011 09:37:03 GMT

As far as I know you can check this from your external authentication server so if its cisco acs acting a s radius server for your vpn clients then check under reports and activities >> logged-in user. It will show you the connected user along with the ip address they have got.

Lists all users receiving services for a single AAA client or all AAA clients. Users accessing the network with Cisco Aironet equipment appear on the list for the access point that they are currently associated with, provided that the firmware image on the Cisco Aironet Access Point supports sending the RADIUS Service-Type attribute for rekey authentications.

Note To use the logged-in user list feature, you must configure AAA client to perform authentication and accounting using the same protocol—either TACACS+ or RADIUS.

The same can be checked from the ASA by running
show vpn-session db
http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/s7_72.html#wp1135352

From ASDM go to Monitoring VPN >> sessions.

Hope this helps.

Rgds

Jatin

Do rate helpful posts~

Re: How to monitor Local IP Pools on ASA

Daniel Shriver — Fri, 27 Mar 2020 13:59:17 GMT

On the context that is serving your Anyconnect sessions.

Issue the following command:

sh ip local pool <Pool Name>

The solution came from my Colleague Jason Pitts. Just wanted to give credit where credit is due.\

V/R
Dan

Re: How to monitor Local IP Pools on ASA

Daniel Shriver — Fri, 27 Mar 2020 13:59:51 GMT

Re: How to monitor Local IP Pools on ASA

Marius Gunnerud — Sat, 28 Mar 2020 22:29:46 GMT

Here is a list of OIDs that you might consider using. Hope it helps.

http://www.oidview.com/mibs/9/CISCO-IP-LOCAL-POOL-MIB.html