topic ASA / Multiple Context SNMP in Network Security

ASA / Multiple Context SNMP

peter.ferl — Mon, 11 Mar 2019 18:06:41 GMT

Is it possible to retrieve following SNMP datas for a ASA running in multiple Context Mode?

- overall CPU load

- overall Connections

- overall usage of physical Interfaces

- overall ...

Thanks,

Peter

Re: ASA / Multiple Context SNMP

Diego Armando Cambronero Arias — Mon, 05 Jul 2010 14:08:13 GMT

Check this link

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/monitor.html#wp1064617

Hope it helps.

Re: ASA / Multiple Context SNMP

peter.ferl — Tue, 06 Jul 2010 11:38:07 GMT

Sorry,

this is more or less for logging.

What I need is how to do an SNMP query to reflect the overall Status of the box.

But anyway,

Thx,

Peter

ASA / Multiple Context SNMP

jennam — Fri, 30 Aug 2013 01:28:02 GMT

I'm also looking for this information.

Has the OP figured out a solution or does anyone else know how to query the overall status of an ASA?

ASA / Multiple Context SNMP

FlorianBerthelot — Mon, 02 Dec 2013 23:22:08 GMT

Hi,

if anybody found a way to do this thank you for sharing

Best regards

Re: ASA / Multiple Context SNMP

tudor bucenica — Thu, 18 Jan 2018 14:57:12 GMT

Hi Peter,

Where you able to find a solution for this? I'm looking for the same information and i am not able to find it. The admin context doesn't give out info about the overall performance. You can get that from the sys context but that doesn't do SNMP so...

I am looking through the OID list but i couldn't find a solution 'till now.

Thank you in advance!

Tudor

Re: ASA / Multiple Context SNMP

tudor bucenica — Fri, 19 Jan 2018 08:39:33 GMT

Hi,

I was able to retrive system context CPU values from the admin context using the following to OIDs:

[257] 1.3.6.1.4.1.9.9.109.1.1.1.1.7. cpmCPUTotal1minRev
[258] 1.3.6.1.4.1.9.9.109.1.1.1.1.8. cpmCPUTotal5minRev

Depending on the ASA model it will show a different output (depending on the number of cores)

For example for a ASA5585-SSP-60 - 2 CPUs (24 cores)
[linuxbox ~]$ snmpwalk -c blablabla -v 2c 10.20.30.40 1.3.6.1.4.1.9.9.109.1.1.1.1.7
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.1 = Gauge32: 0
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.2 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.3 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.4 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.5 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.6 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.7 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.8 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.9 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.10 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.11 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.12 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.13 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.14 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.15 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.16 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.17 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.18 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.19 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.20 = Gauge32: 13
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.21 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.22 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.23 = Gauge32: 13
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.24 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.25 = Gauge32: 12
SNMPv2-SMI::enterprises.9.9.109.1.1.1.1.7.26 = Gauge32: 12

I'm not sure what 7.1 stands for. I picked the second one: 1.3.6.1.4.1.9.9.109.1.1.1.1.7.2

For memory values i've raised a case with Cisco because i wasn't able to do it. From what i read the same CPU functionality is not available. I'll keep you posted!

Cheers,
Tudor