Configure IP SLA monitors SNMP in FTD through FMC

sherali mamatkarimov — Wed, 10 Jan 2024 10:08:37 GMT

Hello,

Id´like to configure IP SLA monitors SNMP trap with Zabbix server on FTD through FMC. So i would like to know when the IP SLA is down, but i can't find SNMP OID for this rule. As i research from internet i need RTTMON MIB but it is unaviable neither on FMC nor on FTD

Thanks.

Re: Configure IP SLA monitors SNMP in FTD through FMC

MHM Cisco World — Wed, 10 Jan 2024 10:17:36 GMT

can I know how you config IP SLA monitor
MHM

Re: Configure IP SLA monitors SNMP in FTD through FMC

sherali mamatkarimov — Wed, 10 Jan 2024 10:32:48 GMT

Re: Configure IP SLA monitors SNMP in FTD through FMC

MHM Cisco World — Wed, 10 Jan 2024 10:57:10 GMT

I am not so sure but IP SLA monitor is not function until we use it with track (which config with static route)
you need EEM (with flexconfig) and config track

MHM

Re: Configure IP SLA monitors SNMP in FTD through FMC

sherali mamatkarimov — Wed, 10 Jan 2024 11:08:33 GMT

i configured this from this post https://integratingit.wordpress.com/2020/08/14/ftd-dual-isp-failover/

What does this have to do with SNMP OID?

Re: Configure IP SLA monitors SNMP in FTD through FMC

MHM Cisco World — Wed, 10 Jan 2024 11:14:55 GMT

Yes friend I know this link
and as you seethe IP SLA monitor with static route and it track.
if it not work how it generate any SNMP trap.

MHM

Re: Configure IP SLA monitors SNMP in FTD through FMC

sherali mamatkarimov — Wed, 10 Jan 2024 11:17:34 GMT

SLA monitor works and when ISP1 is downs we can access to network by ISP2, if i run from CLI show track command i can see that track down but i want to know this from my SNMP server

Re: Configure IP SLA monitors SNMP in FTD through FMC

tvotna — Wed, 10 Jan 2024 14:24:32 GMT

I believe this is not supported in the current code. There is an enhancement request, but it wasn't implemented:

CSCvr43663 Add support for polling IP SLA MIB via SNMP on ASA

Re: Configure IP SLA monitors SNMP in FTD through FMC

MHM Cisco World — Wed, 10 Jan 2024 14:27:26 GMT

this all OID of Echo in Firepower
use the root one or sub-root as you wish
Hope it help you
MHM

"ciscoIpSlaEchoMIB" "1.3.6.1.4.1.9.9.636"
"ciscoIpSlaEchoMIBNotifs" "1.3.6.1.4.1.9.9.636"
"ciscoIpSlaEchoMIBObjects" "1.3.6.1.4.1.9.9.636.1"
"ciscoIpSlaEchoMIBConform" "1.3.6.1.4.1.9.9.636.2"
"cipslaIcmpEchoTmplTable" "1.3.6.1.4.1.9.9.636.1.1"
"cipslaUdpEchoTmplTable" "1.3.6.1.4.1.9.9.636.1.2"
"cipslaTcpConnTmplTable" "1.3.6.1.4.1.9.9.636.1.3"
"cipslaIcmpEchoTmplEntry" "1.3.6.1.4.1.9.9.636.1.1.1"
"cipslaIcmpEchoTmplName" "1.3.6.1.4.1.9.9.636.1.1.1.1"
"cipslaIcmpEchoTmplDescription" "1.3.6.1.4.1.9.9.636.1.1.1.2"
"cipslaIcmpEchoTmplSrcAddrType" "1.3.6.1.4.1.9.9.636.1.1.1.3"
"cipslaIcmpEchoTmplSrcAddr" "1.3.6.1.4.1.9.9.636.1.1.1.4"
"cipslaIcmpEchoTmplTimeOut" "1.3.6.1.4.1.9.9.636.1.1.1.5"
"cipslaIcmpEchoTmplVerifyData" "1.3.6.1.4.1.9.9.636.1.1.1.6"
"cipslaIcmpEchoTmplReqDataSize" "1.3.6.1.4.1.9.9.636.1.1.1.7"
"cipslaIcmpEchoTmplTOS" "1.3.6.1.4.1.9.9.636.1.1.1.8"
"cipslaIcmpEchoTmplVrfName" "1.3.6.1.4.1.9.9.636.1.1.1.9"
"cipslaIcmpEchoTmplThreshold" "1.3.6.1.4.1.9.9.636.1.1.1.10"
"cipslaIcmpEchoTmplHistLives" "1.3.6.1.4.1.9.9.636.1.1.1.11"
"cipslaIcmpEchoTmplHistBuckets" "1.3.6.1.4.1.9.9.636.1.1.1.12"
"cipslaIcmpEchoTmplHistFilter" "1.3.6.1.4.1.9.9.636.1.1.1.13"
"cipslaIcmpEchoTmplStatsHours" "1.3.6.1.4.1.9.9.636.1.1.1.14"
"cipslaIcmpEchoTmplDistBuckets" "1.3.6.1.4.1.9.9.636.1.1.1.15"
"cipslaIcmpEchoTmplDistInterval" "1.3.6.1.4.1.9.9.636.1.1.1.16"
"cipslaIcmpEchoTmplStorageType" "1.3.6.1.4.1.9.9.636.1.1.1.17"
"cipslaIcmpEchoTmplRowStatus" "1.3.6.1.4.1.9.9.636.1.1.1.18"
"cipslaUdpEchoTmplEntry" "1.3.6.1.4.1.9.9.636.1.2.1"
"cipslaUdpEchoTmplName" "1.3.6.1.4.1.9.9.636.1.2.1.1"
"cipslaUdpEchoTmplDescription" "1.3.6.1.4.1.9.9.636.1.2.1.2"
"cipslaUdpEchoTmplControlEnable" "1.3.6.1.4.1.9.9.636.1.2.1.3"
"cipslaUdpEchoTmplSrcAddrType" "1.3.6.1.4.1.9.9.636.1.2.1.4"
"cipslaUdpEchoTmplSrcAddr" "1.3.6.1.4.1.9.9.636.1.2.1.5"
"cipslaUdpEchoTmplSrcPort" "1.3.6.1.4.1.9.9.636.1.2.1.6"
"cipslaUdpEchoTmplTimeOut" "1.3.6.1.4.1.9.9.636.1.2.1.7"
"cipslaUdpEchoTmplVerifyData" "1.3.6.1.4.1.9.9.636.1.2.1.8"
"cipslaUdpEchoTmplReqDataSize" "1.3.6.1.4.1.9.9.636.1.2.1.9"
"cipslaUdpEchoTmplTOS" "1.3.6.1.4.1.9.9.636.1.2.1.10"
"cipslaUdpEchoTmplVrfName" "1.3.6.1.4.1.9.9.636.1.2.1.11"
"cipslaUdpEchoTmplThreshold" "1.3.6.1.4.1.9.9.636.1.2.1.12"
"cipslaUdpEchoTmplHistLives" "1.3.6.1.4.1.9.9.636.1.2.1.13"
"cipslaUdpEchoTmplHistBuckets" "1.3.6.1.4.1.9.9.636.1.2.1.14"
"cipslaUdpEchoTmplHistFilter" "1.3.6.1.4.1.9.9.636.1.2.1.15"
"cipslaUdpEchoTmplStatsHours" "1.3.6.1.4.1.9.9.636.1.2.1.16"
"cipslaUdpEchoTmplDistBuckets" "1.3.6.1.4.1.9.9.636.1.2.1.17"
"cipslaUdpEchoTmplDistInterval" "1.3.6.1.4.1.9.9.636.1.2.1.18"
"cipslaUdpEchoTmplStorageType" "1.3.6.1.4.1.9.9.636.1.2.1.19"
"cipslaUdpEchoTmplRowStatus" "1.3.6.1.4.1.9.9.636.1.2.1.20"
"cipslaTcpConnTmplEntry" "1.3.6.1.4.1.9.9.636.1.3.1"
"cipslaTcpConnTmplName" "1.3.6.1.4.1.9.9.636.1.3.1.1"
"cipslaTcpConnTmplDescription" "1.3.6.1.4.1.9.9.636.1.3.1.2"
"cipslaTcpConnTmplControlEnable" "1.3.6.1.4.1.9.9.636.1.3.1.3"
"cipslaTcpConnTmplSrcAddrType" "1.3.6.1.4.1.9.9.636.1.3.1.4"
"cipslaTcpConnTmplSrcAddr" "1.3.6.1.4.1.9.9.636.1.3.1.5"
"cipslaTcpConnTmplSrcPort" "1.3.6.1.4.1.9.9.636.1.3.1.6"
"cipslaTcpConnTmplTimeOut" "1.3.6.1.4.1.9.9.636.1.3.1.7"
"cipslaTcpConnTmplVerifyData" "1.3.6.1.4.1.9.9.636.1.3.1.8"
"cipslaTcpConnTmplTOS" "1.3.6.1.4.1.9.9.636.1.3.1.9"
"cipslaTcpConnTmplThreshold" "1.3.6.1.4.1.9.9.636.1.3.1.10"
"cipslaTcpConnTmplHistLives" "1.3.6.1.4.1.9.9.636.1.3.1.11"
"cipslaTcpConnTmplHistBuckets" "1.3.6.1.4.1.9.9.636.1.3.1.12"
"cipslaTcpConnTmplHistFilter" "1.3.6.1.4.1.9.9.636.1.3.1.13"
"cipslaTcpConnTmplStatsHours" "1.3.6.1.4.1.9.9.636.1.3.1.14"
"cipslaTcpConnTmplDistBuckets" "1.3.6.1.4.1.9.9.636.1.3.1.15"
"cipslaTcpConnTmplDistInterval" "1.3.6.1.4.1.9.9.636.1.3.1.16"
"cipslaTcpConnTmplStorageType" "1.3.6.1.4.1.9.9.636.1.3.1.17"
"cipslaTcpConnTmplRowStatus" "1.3.6.1.4.1.9.9.636.1.3.1.18"
"ciscoIpSlaEchoMIBCompliances" "1.3.6.1.4.1.9.9.636.2.1"
"ciscoIpSlaEchoMIBGroups" "1.3.6.1.4.1.9.9.636.2.2"
"ciscoIpSlaEchoMIBCompliance" "1.3.6.1.4.1.9.9.636.2.1.1"
"ciscoIpSlaIcmpEchoTmplGroup" "1.3.6.1.4.1.9.9.636.2.2.1"
"ciscoIpSlaUdpEchoTmplGroup" "1.3.6.1.4.1.9.9.636.2.2.2"
"ciscoIpSlaTcpConnTmplGroup" "1.3.6.1.4.1.9.9.636.2.2.3"

topic Re: Configure IP SLA monitors SNMP in FTD through FMC in Network Security

Configure IP SLA monitors SNMP in FTD through FMC

Re: Configure IP SLA monitors SNMP in FTD through FMC

Re: Configure IP SLA monitors SNMP in FTD through FMC

Re: Configure IP SLA monitors SNMP in FTD through FMC

Re: Configure IP SLA monitors SNMP in FTD through FMC

Re: Configure IP SLA monitors SNMP in FTD through FMC

Re: Configure IP SLA monitors SNMP in FTD through FMC

Re: Configure IP SLA monitors SNMP in FTD through FMC

Re: Configure IP SLA monitors SNMP in FTD through FMC