ASA CPU Utilization not support on Ciscoworks?

[damiangoh]

Hi Guys,

I dont seems to see CPU Utilization Details & Memory Utilization Details in Device Center nor HUM for ASA.

Is it not supported or likely config issue?

CiscoWorks Common Services 3.1.1

Campus Manager 5.0.3

CiscoView 6.1.7

CiscoWorks Assistant 1.0.1

Device Fault Manager 3.0.3

Internetwork Performance Monitor 4.0.1

Integration Utility 1.7.1

LMS Portal 1.0.1

Resource Manager Essentials 4.1.1

Health and Utilization Monitor 1.0.0

ASA 8.0(3)

[Joe Clarke]

What pollers have you setup in HUM to track CPU and memory utilization for the ASA? The ASA does support the CISCO-MEMORY-POOL and CISCO-PROCESS-MIB objects, so you should be able to define a poller to track them.

[damiangoh]

My poller are using the Cisco default template. No new templates are created.

i noticed the following status errors.

cpmCPUTotal5minRev ASA 5510 Adaptive Security Appliance Transient 1 Request Timed-Out. Device may be down. 04 Aug 2008, 20:47:17 SGT

ciscoMemoryPoolFree System memory Transient 2 Request Timed-Out. Device may be down. 03 Aug 2008, 22:27:13 SGT

i have verified that the device is up.

[Joe Clarke]

Can you manually perform an snmpwalk of these objects from the LMS server? You can use the SNMP Walk utility in Device Center. If the names do not work as starting OIDs, then use:

.1.3.6.1.4.1.9.9.109.1.1.1.1.8

.1.3.6.1.4.1.9.9.48.1.1.1.6

It looks like an SNMP access issue.

[damiangoh]

I got this results. Anything else i should be looking at?

The following is a SNMP walk of device 10.60.95.254 starting from .1.3.6.1.4.1.9.9.109.1.1.1.1.8

SNMP Walk Output

--------------------------------------------------------------------------------

.1.3.6.1.4.1.9.9.109.1.1.1.1.8

CISCO-PROCESS-MIB::cpmCPUTotal5minRev = No Such Object available on this agent at this OID

The following is a SNMP walk of device 10.60.95.254 starting from .1.3.6.1.4.1.9.9.48.1.1.1.6

SNMP Walk Output

--------------------------------------------------------------------------------

.1.3.6.1.4.1.9.9.48.1.1.1.6

CISCO-MEMORY-POOL-MIB::ciscoMemoryPoolFree.1 = Gauge32: 188100728 bytes

[Joe Clarke]

The first indicates that this particular object is not supported by the ASA. Try walking the entire cpmCPUTotalTable (.1.3.6.1.4.1.9.9.109.1.1.1). Which objects return data?

The second looks good. Neither outputs explain the error HUM is showing. It might be a good idea to start a packet capture filtering on udp/161 traffic to this device, then let the HUM poller run. Check the capture for any problems.

[damiangoh]

The following is a SNMP walk of device 10.60.95.254 starting from .1.3.6.1.4.1.9.9.109.1.1.1

SNMP Walk Output

--------------------------------------------------------------------------------

.1.3.6.1.4.1.9.9.109.1.1.1

Hi Clarke,

Thanks for your response.

CISCO-PROCESS-MIB::cpmCPUTotalPhysicalIndex.1 = INTEGER: 1

CISCO-PROCESS-MIB::cpmCPUTotal5sec.1 = Gauge32: 3

CISCO-PROCESS-MIB::cpmCPUTotal1min.1 = Gauge32: 4

CISCO-PROCESS-MIB::cpmCPUTotal5min.1 = Gauge32: 3

I saw a the logs in my ASA that is denying

%PIX|ASA-3-212005: incoming SNMP request (525bytes) on interface

inside exceeds data buffer size, discarding this SNMP request.

[Joe Clarke · Accepted solution]

Ah, I have seen this before. Define a poller specifically for the ASA. The poller should contain only two templates: one polling cpmCPUTotal5min.1, and the other polling ciscoMemoryPoolFree.1. This should keep the packet size down, and allow you to get what you want.

[Ian Beck]

Hi Jo,

I am having a similiar problem getting ASA CPU result's and what to try this fix.

Just need to understand the Template part and where the info comes from.

Thanks

Ian

[Ian Beck]

Hi,

Think I havie found it and am trying now.

Thanks