I've been doing some reading around and it appears to be reasonably simple to monitor the connection rate and total connections through an ASA. However, I'm looking to be able to monitor the number of connections and their states at a given time - i.e. as per the output available from'show conn'
Has anyone achieved this using this using SNMP? I've not managed to spot a OID that would make this available?
As a last resort I could script this via SSH etc but it's not really the most elegant of solutions :-)
I dont have an ASA to try this on, but I believe the CISCO-FIREWALL-MIB would be the one you need. Specifically, the cfwConnectionStatTable (18.104.22.168.22.214.171.124.126.96.36.199.2), looks like the one which will contain information on each connection, similar to the "show conn" CLI command.
Thanks for the response. Unfortunately that OID gives the current & max count of connections but does not actually return the state of those connections -
[XXXXXXX@xxx-xxxx-xxxxx-001 ~]$ snmpwalk -v 2c -r 1 -t 1 -c xxxxxxxxx xxx.xx.xx.xxx 188.8.131.52.184.108.40.206.220.127.116.11.2 SNMPv2-SMI::enterprises.18.104.22.168.22.214.171.124.3.40.6 = STRING: "number of connections currently in use by the entire firewall" SNMPv2-SMI::enterprises.126.96.36.199.188.8.131.52.3.40.7 = STRING: "highest number of connections in use at any one time since system startup" SNMPv2-SMI::enterprises.184.108.40.206.220.127.116.11.4.40.6 = Counter32: 0 SNMPv2-SMI::enterprises.18.104.22.168.22.214.171.124.4.40.7 = Counter32: 0 SNMPv2-SMI::enterprises.126.96.36.199.188.8.131.52.5.40.6 = Gauge32: 8681 SNMPv2-SMI::enterprises.184.108.40.206.220.127.116.11.5.40.7 = Gauge32: 8716 [XXXXXXX@xxx-xxxx-xxxxx-001 ~]$
I may need to look at options for scripting this via the CLI.
Hi team!I configuring ASA5506X with dual ISP obtaning ip addresses with dhcp...1. does this config looking correct?2. whay ASA doesn't accept both commands dhcp-client client-id interface OUTSIDE
dhcp-client client-id interface YOTA
Cisco helps build IT agility and business resiliency by introducing new technology innovations that help
Respond and adapt to disruptions
Accelerate your digital journey and cloud adoption
Transform your operating model with insights and automatio...
Oct 20, 2020 is an inspirational date for many of us in networking industry to be proud of. It is the birthday of Cisco Catalyst 8500 Series Edge Platforms – one of the most powerful purpose-built SD-WAN Edge platforms ever, making up to 60Gbps throughput...
Hi, Hope this can help someone. To connect local network storage, mine is DS1817+. Create port forward and connect thru internet.Do reply here if you have better or easier configuration! =D Configuration on Cisco Router:ip nat inside source stat...
Cisco SD-WAN Cloud OnRamp allows you to simplify and secure connectivity to cloud applications and public clouds. Interested in testing out the latest Cisco Cloud OnRamp solutions?
Sign up to try out various use cases with the Cisco SD-WAN Cloud ...