topic ASA, SNMP, entPhysicalTable in Network Security

ASA, SNMP, entPhysicalTable

Pavel Pokorny — Mon, 11 Mar 2019 23:52:59 GMT

Hi all,

According

http://www.cisco.com/en/US/docs/security/asa/roadmap/asa_new_features.html, (Table 12 New Features for ASA Version 8.4(1)/ASDM Version 6.4(1))

), ASA should be supporting some information about environment via SNMP.

There is written, that entPhysicalTable (should be OID 1.3.6.1.2.1.47.1.1.1) - The entPhysicalTable reports entries for sensors, fans, power supplies, and related components.

I have 8.4.3, but when I do snmpwalk, I can see no info mentioned above.

Does anybody know the right IODs? I'm interested in temperature sensors (value or state) and fans (no interest in PS, because there is only one).

Thank you

Regards

Pavel

ASA, SNMP, entPhysicalTable

Marcin Latosiewicz — Wed, 12 Sep 2012 10:28:17 GMT

Pavel,

You can always refer to "show snmp-server oidlist" to see which OIDs were implmented.

Example from 5580 running 8.1.2:

1# show snmp-server oidlist | i entPhysical
[84]    1.3.6.1.2.1.47.1.1.1.1.2.       entPhysicalDescr
[85]    1.3.6.1.2.1.47.1.1.1.1.3.       entPhysicalVendorType
[86]    1.3.6.1.2.1.47.1.1.1.1.4.       entPhysicalContainedIn
[87]    1.3.6.1.2.1.47.1.1.1.1.5.       entPhysicalClass
[88]    1.3.6.1.2.1.47.1.1.1.1.6.       entPhysicalParentRelPos
[89]    1.3.6.1.2.1.47.1.1.1.1.7.       entPhysicalName
[90]    1.3.6.1.2.1.47.1.1.1.1.8.       entPhysicalHardwareRev
[91]    1.3.6.1.2.1.47.1.1.1.1.9.       entPhysicalFirmwareRev
[92]    1.3.6.1.2.1.47.1.1.1.1.10.      entPhysicalSoftwareRev
[93]    1.3.6.1.2.1.47.1.1.1.1.11.      entPhysicalSerialNum
[94]    1.3.6.1.2.1.47.1.1.1.1.12.      entPhysicalMfgName
[95]    1.3.6.1.2.1.47.1.1.1.1.13.      entPhysicalModelName
[96]    1.3.6.1.2.1.47.1.1.1.1.14.      entPhysicalAlias
[97]    1.3.6.1.2.1.47.1.1.1.1.15.      entPhysicalAssetID
[98]    1.3.6.1.2.1.47.1.1.1.1.16.      entPhysicalIsFRU
[108]   1.3.6.1.2.1.47.1.3.3.1.1.       entPhysicalChildIndex

HTH,

Marcin

ASA, SNMP, entPhysicalTable

Pavel Pokorny — Wed, 12 Sep 2012 11:10:39 GMT

Hi,

It didn't help.

I was doing whole snmpwalk and because I haven't found anything Cisco promised, I'm asking for info.

I know command mentioned by you.

So, it look like case for TAC.

Pavel

ASA, SNMP, entPhysicalTable

Marcin Latosiewicz — Wed, 12 Sep 2012 11:14:37 GMT

Pavel,

What did Cisco promise? Out of curiosity.

Oidlist shows all implmented OIDs (that I'm aware of).

Marcin

ASA, SNMP, entPhysicalTable

Pavel Pokorny — Wed, 12 Sep 2012 11:25:59 GMT

Marcin,

Did you read my link?

In 8.4.1 there was noted implementation of new SNMP features.

So, I'm questioning here, if someone was more successful then I.

Pavel

ASA, SNMP, entPhysicalTable

Marcin Latosiewicz — Wed, 12 Sep 2012 11:42:29 GMT

Pavel,

"Promised" is not the word I would use, but I'm not a native speaker.

Check newer ASA + MIBs I can see

# show snmp-server oidlist | i entPhy

[88] 1.3.6.1.2.1.47.1.1.1.1.2. entPhysicalDescr

[89] 1.3.6.1.2.1.47.1.1.1.1.3. entPhysicalVendorType

[90] 1.3.6.1.2.1.47.1.1.1.1.4. entPhysicalContainedIn

[91] 1.3.6.1.2.1.47.1.1.1.1.5. entPhysicalClass

[92] 1.3.6.1.2.1.47.1.1.1.1.6. entPhysicalParentRelPos

[93] 1.3.6.1.2.1.47.1.1.1.1.7. entPhysicalName

[94] 1.3.6.1.2.1.47.1.1.1.1.8. entPhysicalHardwareRev

[95] 1.3.6.1.2.1.47.1.1.1.1.9. entPhysicalFirmwareRev

[96] 1.3.6.1.2.1.47.1.1.1.1.10. entPhysicalSoftwareRev

[97] 1.3.6.1.2.1.47.1.1.1.1.11. entPhysicalSerialNum

[98] 1.3.6.1.2.1.47.1.1.1.1.12. entPhysicalMfgName

[99] 1.3.6.1.2.1.47.1.1.1.1.13. entPhysicalModelName

[100] 1.3.6.1.2.1.47.1.1.1.1.14. entPhysicalAlias

[101] 1.3.6.1.2.1.47.1.1.1.1.15. entPhysicalAssetID

[102] 1.3.6.1.2.1.47.1.1.1.1.16. entPhysicalIsFRU

[112] 1.3.6.1.2.1.47.1.3.3.1.1. entPhysicalChildIndex

[220] 1.3.6.1.2.1.99.1.1.1.1. entPhySensorType

[221] 1.3.6.1.2.1.99.1.1.1.2. entPhySensorScale

[222] 1.3.6.1.2.1.99.1.1.1.3. entPhySensorPrecision

[223] 1.3.6.1.2.1.99.1.1.1.4. entPhySensorValue

[224] 1.3.6.1.2.1.99.1.1.1.5. entPhySensorOperStatus

[225] 1.3.6.1.2.1.99.1.1.1.6. entPhySensorUnitsDisplay

[226] 1.3.6.1.2.1.99.1.1.1.7. entPhySensorValueTimeStamp

[227] 1.3.6.1.2.1.99.1.1.1.8. entPhySensorValueUpdateRate

show snmp-server oidlist | i Power

[268] 1.3.6.1.4.1.9.9.117.1.1.1.1.1. cefcPowerRedundancyMode

[269] 1.3.6.1.4.1.9.9.117.1.1.1.1.2. cefcPowerUnits

[272] 1.3.6.1.4.1.9.9.117.1.1.2.1.1. cefcFRUPowerAdminStatus

[273] 1.3.6.1.4.1.9.9.117.1.1.2.1.2. cefcFRUPowerOperStatus

[275] 1.3.6.1.4.1.9.9.117.1.1.3. cefcMaxDefaultInLinePower

etc etc etc.

have a look at:

ftp://ftp.cisco.com/pub/mibs/v2/CISCO-ENTITY-FRU-CONTROL-MIB.my

ftp://ftp.cisco.com/pub/mibs/v2/ENTITY-MIB.my

ftp://ftp.cisco.com/pub/mibs/v2/CISCO-ENTITY-SENSOR-EXT-MIB.my

ftp://ftp.cisco.com/pub/mibs/v2/ENTITY-SENSOR-MIB.my

It might be that we are really missing, but I guess it would be great to know what you're looking for.

ASA, SNMP, entPhysicalTable

Pavel Pokorny — Wed, 12 Sep 2012 12:30:27 GMT

Hi,

As I told in my first note, I would like to see temperature (state or value) of the unit, and state of fans.

I'm using ASA5520 wiht 8.4.3.

In above mentioned release notes, I can see no note (please correct me, if I'm wrong), that this "feature" is limited to some models (ie. 5580). So, I think that my question is simple.

Please show me that is somewhere written, that this feature doesn't work on 5520 with 8.4.3 (in release notes of 8.4.1 was introduced as new feature). Without this I think I can demand on word promised :-).

Thank you

Pavel

ASA, SNMP, entPhysicalTable

Marcin Latosiewicz — Wed, 12 Sep 2012 12:34:15 GMT

Pavel,

"Stated", not "promised".

Mind that you will see those things only if device has a separate entity for it, according to my understanding.

I.e. "show env" will show that staus.

Feel free to follow this one up with TAC 😉

ASA, SNMP, entPhysicalTable

Pavel Pokorny — Wed, 12 Sep 2012 13:40:35 GMT

Marcin,

Again, can you see in release notes some model restriction?

I can't. If there is any, please show it.

Thank you for your time.

Pavel

ASA, SNMP, entPhysicalTable

Marcin Latosiewicz — Wed, 12 Sep 2012 15:27:02 GMT

Pavel,

Please remember I'm not in that team working with those technologies ... but according to my kwowledge the counters in SNMP are related to "show env" outputs (at least for Fans, temp and voltage)

I.e

# show env

Cooling Fans:

-----------------------------------

Cooling Fan 1: OK

Cooling Fan 2: OK

Cooling Fan 3: OK

Cooling Fan 4: OK

Cooling Fan 5: OK

Cooling Fan 6: OK

Power Supplies:

-----------------------------------

Power Supply Unit Redundancy: N/A

Power Supply 1: OK

Power Supply 2: Not Present

Temperature:

-----------------------------------

Processors:

--------------------------------

Processor 1: 50 C - OK

Processor 2: 50 C - OK

Chassis:

--------------------------------

Ambient 1: 31 C - OK

Ambient 2: 32 C - OK

Ambient 3: 32 C - OK

Ambient 4: 35 C - OK

show inv

Name: "Chassis", DESCR: "ASA 5580-20 Adaptive Security Appliance"

PID: ASA5580-20 , VID: V01 , SN:

Name: "module 3", DESCR: "ASA 5580 4 port GE Copper Interface Card"

PID: ASA5580-4GE-CU , VID: D4577408, SN:

The first command is not available on 55x0 platforms except 5580. Thus I would bet monitoring of those values is not available on those platforms.

But just to stress out, it's not based on any documentation, just my experience, so definately something you can clarify with TAC.

Marcin

ASA, SNMP, entPhysicalTable

Pavel Pokorny — Wed, 12 Sep 2012 18:42:42 GMT

Hi Marcin,

I'm aware what you say. I wanted to try to ask here, before asking TAC.

All right now, I'll try to contact TAC.

Thanks anyway.

Pavel

ASA, SNMP, entPhysicalTable

Julio Carvajal — Wed, 12 Sep 2012 19:09:12 GMT

Hello Pavel,

Let us know the result

Regards,

ASA, SNMP, entPhysicalTable

Pavel Pokorny — Wed, 12 Sep 2012 19:39:46 GMT

😉