Monitoring ISE health using SNMP Polling

[lurru]

What are the best practices for monitoring ISE using SNMP polling? I'm aware of this document:

SNMP Traps To Monitor Cisco ISE Processes

Cisco Identity Services Engine Administrator Guide, Release 2.1 - Monitoring and Troubleshooting [Cisco Identity Servic…

Unfortunately, Traps are not an option due to the tool used. So, I'm looking for a document regarding monitoring of the processes using SNMP polling, or otherwise other options for monitoring ISE health using polling.

Thanks.

[Craig Hyps · Accepted solution]

The SNMP Agent on Cisco ISE provides read-only access to the following MIBs:

• SNMPv2-MIB
• RFC1213-MIB(MIB II)
• IF-MIB
• IP-MIB
• IP-FORWARD-MIB
• TCP-MIB
• UDP-MIB
• HOST-RESOURCES-MIB
• ENTITY-MIB —Three MIB variables are supported on the ENTITY-MIB:
  • Product ID: entPhysicalModelName
  • Version ID: entPhysicalHardwareRev
  • Serial Number: entPhysicalSerialNumber
• DISMAN-EVENT-MIB
• NOTIFICATION-LOG-MIB
• CISCO-CDP-MIB

Appliance OIDs available in CISCO-PRODUCTS-MIB:

• ciscoIse3315K9 ISE_3315_SYSOBJID="1.3.6.1.4.1.9.1.1423"
• ciscoIse3395K9 ISE_3395_SYSOBJID="1.3.6.1.4.1.9.1.1424"
• ciscoIse3355K9 ISE_3355_SYSOBJID="1.3.6.1.4.1.9.1.1425"
• ciscoIseVmK9 ISE_VM_SYSOBJID="1.3.6.1.4.1.9.1.1426"
• ciscoSNS3495K9  ISE_3495_SYSOBJID="1.3.6.1.4.1.9.1.2139"
• ciscoSNS3415K9  ISE_3415_SYSOBJID="1.3.6.1.4.1.9.1.2140"
• ciscoSNS3595K9  ISE_3595_SYSOBJID="1.3.6.1.4.1.9.1.2266"
• ciscoSNS3515K9  ISE_3515_SYSOBJID="1.3.6.1.4.1.9.1.2265"

Additionally, hardware appliances have the CIMC which supports the Cisco UCS MIB Files

/Craig

[lurru]

Thanks Craig. One question though. The documentation for using SNMP traps to monitor ISE processes has this note:

Cisco Identity Services Engine Administrator Guide, Release 2.1 - Monitoring and Troubleshooting [Cisco Identity Servic…

"ISE does not have any MIB for process status or disk utilization. You cannot use snmp walk or snmp get command to query the process status or disk utilization. Cisco ISE uses OID HOST-RESOURCES-MIB::hrSWRunName, UCD_SNMP_OID:dskPercent, and HOST-RESOURCES-MIB:hrSWRunStatus for sending SNMP trap."

If I am understanding the note correctly, you can only use traps to monitor the ISE processes, is that correct? No process monitoring available via polling. Again, I may be understanding that note incorrectly.

But if so, from the list of MIBs that you provided, what other OIDs are recommended for monitoring the correct functioning of ISE nodes?

Thanks.

[Bradley Marshall]

Good question!

[Bradley Marshall]

Great info, thanks!

[rodrigo_palma]

I need to know hardware status
Maybe its in ENTITY-MIB - PhysicalClass?
I cant find this oid