cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
13483
Views
10
Helpful
8
Replies
Highlighted

ASA SSL SNMP OID's

I'm monitoring our Cisco ASA via SNMP.

So far I found :

- Total number of RAS sessions : 1.3.6.1.4.1.9.9.392.1.3.1.0

- Number of IPSec VPN tunnels : 1.3.6.1.4.1.9.9.171.1.3.1.1.0

- Total number of SSL Sessions : 1.3.6.1.4.1.3076.2.1.2.26.1.2.0

I'm looking for these OID's :

- Number of SSL Sessions via the Anyconnect VPN client (SSL VPN)

- Number of Clientless SSL sessions

Thanks in advance

8 REPLIES 8
Highlighted
Rising star

Re: ASA SSL SNMP OID's

see if these one works for you:

SSL Stats are in ALTIGA-SSL-STATS-MIB. You are looking for alSslStatsActiveSessions.

snmpwalk -c -v -OS .1.3.6.1.4.1.3076.2.1.2.26.1

http://tools.cisco.com/Support/SNMP/do/BrowseMIB.do?local=en&mibName=ALTIGA-GLOBAL-REG#

Highlighted
Beginner

Hi community,

Hi community,

Knowing that this post is 8 years old, is it still possible to get a response on it or should i open a new thread?

I am wondering if anyone managed to come up with a solution to monitor seperately active and inactive sessions on an asa 5525. there only seems to be one oid for combining the sessions. Currently we are looking at the total sessions for atm anyconnect but want to see it split.

Regards,

Dino

Highlighted

Re: ASA SSL SNMP OID's

Anyone ?

Help would be very much appreciated

Highlighted
Rising star

Re: ASA SSL SNMP OID's

Did you check my last post? was it not useful?

Highlighted

Re: ASA SSL SNMP OID's

Hi, thanks for the reply but I already found the MIB containing the "Total number of SSL Sessions" : 1.3.6.1.4.1.3076.2.1.2.26.1.2.0 ".

I'm looking for separate SSL connection OID's :

- Number of SSL Sessions via the Anyconnect VPN client (SSL VPN)

- Number of Clientless SSL sessions

Highlighted
Beginner

ASA SSL SNMP OID's

I have found some resources here, might be helpful for you:

http://www.mibdepot.com/cgi-bin/getmib3.cgi?i=1&n=CISCO-REMOTE-ACCESS-MONITOR-MIB&r=cisco&f=CISCO-REMOTE-ACCESS-MONITOR-MIB.my&v=v2&t=tree

crasSVCNumSessions 1.3.6.1.4.1.9.9.392.1.3.35.0

crasWebvpnNumSessions 1.3.6.1.4.1.9.9.392.1.3.38.0

Highlighted
Beginner

Re: ASA SSL SNMP OID's

Below are some useful OIDs

 

to get IP of connected active users 1.3.6.1.4.1.9.9.392.1.3.21.1.8
Number of maximum users can be connected 1.3.6.1.4.1.9.9.467.1.1.5
Number of IPsec client connected .1.3.6.1.4.1.9.9.392.1.3.26
Number of current anyconnect client connected .1.3.6.1.4.1.3076.2.1.2.26.1.2.0

Highlighted
Participant

Re: ASA SSL SNMP OID's

Would love to know the OIDs that relate to each of these values, particularly each type of AnyConnect user.

 

---------------------------------------------------------------------------
VPN Session Summary
---------------------------------------------------------------------------
Active : Cumulative : Peak Concur : Inactive
----------------------------------------------
AnyConnect Client : 43 : 17172 : 96 : 1
SSL/TLS/DTLS : 6 : 3295 : 21 : 0
IKEv2 IPsec : 37 : 13877 : 82 : 1
Clientless VPN : 1 : 17837 : 47
Browser : 1 : 17837 : 47
IKEv1 IPsec/L2TP IPsec : 23 : 3336 : 29
Site-to-Site VPN : 20 : 1200779 : 28
IKEv2 IPsec : 4 : 2013 : 7
IKEv1 IPsec : 16 : 1198766 : 24
---------------------------------------------------------------------------
Total Active and Inactive : 88 Total Cumulative : 1239124
Device Total VPN Capacity : 750
Device Load : 12%
---------------------------------------------------------------------------