Cisco ASA HA Failover Status SNMP Trap/Polling

[Alexander Moorthy]

Hi

We have a Cisco ASA 5520 in HA (Active - Standby). We monitor the CPU,Memory Utilization and Active Session via SNMP polling.

And SNMP trap for linkup ,linkdown and Cold start.

Our requirement is to monitor the HA status and whenever there is a change in the HA - Failover we have to get a snmp trap.

What are the configuration need to be done on the cisco asa.

regards

Alexander M

[varrao · Accepted solution]

Hi Alexander,

You can check the basic chonfiguration on the ASA from these docs:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/monitor.html

and

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094a13.shtml

Just to give you an example:

snmp-server host inside 192.168.168.32 community SNMPMONITORING version 2c

no snmp-server location

no snmp-server contact

snmp-server community SNMPMONITORING

snmp-server enable traps syslog

You can find the ASA MIBs here:

ftp://ftp-sj.cisco.com/pub/mibs/supportlists/asa/asa-supportlist.html

To chcek SNMP OID's for polling, use this:

http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en

Hope this is what you were looking for.

Thanks,

Varun

[Alexander Moorthy]

Thanks Varun.

[varrao]

Hi Alex,

This should be helpful as well:

https://supportforums.cisco.com/docs/DOC-1295

Varun