topic Try this in Network Security

xlate count via SNMP on a ASA

Rasmus Kiilerich — Tue, 12 Mar 2019 04:50:43 GMT

Does anyone know of af OID to get the count of active xlate´s per PAT IP address?

I have a firewall that is performing PAT on several IPs that is defined via object. I need to find a way to get the ammount of xlates on a "per public IP" level.

I know that i can get the "show conn" via SNMP but this is all the connections globally to the ASA and not on a per-PAT bases.

So far the only way i have managed to get something out of the ASA is to do a "show xlate | inc [PUBLIC-IP]" and then count the lines.

Hi,I think this OID will help

Vibhor Amrodia — Wed, 08 Oct 2014 02:21:25 GMT

Hi,

I think this OID will help:-

cnatAddrBindTable and CnatAddrBindSessionCount

Thanks and Regards

Vibhor Amrodia

Those don't seem to be

ALAN HARKRADER — Mon, 16 Feb 2015 13:52:55 GMT

Those don't seem to be supported in ASA 9.x... not in "show snmp-server oidlist".

natAddrMapAddrUsed might be what you're looking for... but, if you have multiple sources NATed to the same destination, finding the appropriate entry in that table will take some doing.

Try this

dukenuk96 — Wed, 10 Feb 2016 08:43:08 GMT

Try this

sh conn count

oid .1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6

The OID ".1.3.6.1.4.1.9.9.147

Rasmus Kiilerich — Thu, 09 Jun 2016 13:54:12 GMT

The OID ".1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6" are sadly not supported