MIB SNMP Cisco ASA For SSLVPN

[Natha340Mai340]

Hello, I need find the SNMP MIB for monitor my users connected by VPN SSL on my Cisco ASA 5525.

I don´t know if this it is possible or no.

Any tip about where I can find this MIB please post here.

thanks 

[balaji.bandi · Accepted solution]

 OID's added to CISCO-REMOTE-ACCESS-MONITOR mib to provide sesssion statistics info. :

        crasEmailNumSessions (Oid: 1.3.6.1.4.1.9.9.392.1.3.23 )
        crasEmailCumulateSessions (Oid: 1.3.6.1.4.1.9.9.392.1.3.24 )
        crasEmailPeakConcurrentSessions(Oid: 1.3. 6. 1. 4. 1. 9. 9. 392. 1.3. 25 )
        crasIPSecNumSessions (Oid: 1.3. 6. 1. 4. 1. 9. 9. 392. 1. 3. 26 )
        crasIPSecCumulateSessions (Oid: 1.3. 6. 1. 4. 1. 9. 9. 392. 1. 3. 27 )
        crasIPSecPeakConcurrentSessions (Oid: 1.3. 6. 1. 4. 1. 9. 9. 392. 1.3. 28)
        crasL2LNumSessions (Oid: 1.3. 6. 1. 4. 1. 9. 9. 392. 1. 3. 29 )
        crasL2LCumulateSessions (Oid: 1.3. 6. 1. 4. 1. 9. 9. 392. 1. 3. 30 )
        crasL2LPeakConcurrentSessions (Oid: 1.3. 6. 1. 4. 1. 9. 9. 392. 1.3. 31 )
        crasLBNumSessions (Oid: 1.3. 6. 1. 4. 1. 9. 9. 392. 1. 3. 32 )
        crasLBCumulateSessions (Oid: 1.3. 6. 1. 4. 1. 9. 9. 392. 1. 3. 33 )
        crasLBPeakConcurrentSessions(Oid: 1.3. 6. 1. 4. 1. 9. 9. 392. 1. 3.34 )
        crasSVCNumSessions (Oid: 1.3. 6. 1. 4. 1. 9. 9. 392. 1. 3. 35 )
        crasSVCCumulateSessions (Oid: 1.3. 6. 1. 4. 1. 9. 9. 392. 1. 3. 36 )
        crasSVCPeakConcurrentSessions(Oid: 1.3. 6. 1. 4. 1. 9. 9. 392. 1. 3.37)
        crasWebvpnNumSessions (Oid: 1.3. 6. 1. 4. 1. 9. 9. 392. 1. 3. 38 )
        crasWebvpnCumulateSessions (Oid: 1.3. 6. 1. 4. 1. 9. 9. 392. 1. 3.39 )
        crasWebvpnPeakConcurrentSessions (Oid: 1.3. 6. 1. 4. 1. 9. 9. 392. 1. 3. 40 )

following MIB:

http://tools.cisco.com/Support/SNMP/do/BrowseMIB.do?local=en&mibName=CISCO-REMOTE-ACCESS-MONITOR-MIB

[Natha340Mai340]

Hello, thank you but I did´t understand how to identify the username in the return of follow command

snmpwalk -v2c -c my_community 172.16.1.254 1.3.6.1.4.1.9.9.392.1.3.21.1.2

SNMPv2-SMI::enterprises.9.9.392.1.3.21.1.2.8.48.57.56.57.52.50.50.57.85549059 = STRING: "tunnel_ssl_XX1"

SNMPv2-SMI::enterprises.9.9.392.1.3.21.1.2.13.106.101.108.97.115.116.105.99.46.111.108.101.103.101294081 = STRING: "tunnel_ssl_XX1"

For Exemplo, at the first output line what is the sequence number which represents the username ? because the second output line is very different. I should like undestand how to interpretation these sequence number regard where is the username.

I found the follow link about this issue but it no explain how to get the sequence number regard username

https://community.cisco.com/t5/security-documents/asa-ra-vpn-user-information-using-snmp/ta-p/3108476

thanks

[vpnttg001]

Hello,

Check out VPNTTG (VPN Tunnel Traffic Grapher) is a software for SNMP monitoring and measuring the traffic load for IPsec  (Site-to-Site, Remote Access) and SSL (With Client, Clientless) VPN  tunnels on a Cisco ASA. It allows the user to see traffic load on a VPN  tunnel over time in graphical form.

Advantage of VPNTTG over other SNMP based monitoring software's is  following: Other (commonly used) software's are working with static OID  numbers, i.e. whenever tunnel disconnects and reconnects, it gets  assigned a new OID number. This means that the historical data, gathered  on the connection, is lost each time. However, VPNTTG works with VPN  peer's IP address and it stores for each VPN tunnel historical  monitoring data into the Database.

For more information about VPNTTG please visit www.vpnttg.com