cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
245
Views
0
Helpful
1
Replies

reverse telnet and traps

aliver
Level 1
Level 1

There are some cisco 2511 working as console-servers, connecting many devices via reverse telnet.

Task - monitoring of connections to these devices (who(ip) and when is connected). Best way - SNMP trap from cisco about it.

however I found only MIB cisco.local.lts (polling terminal sessions state)...

what about trap?

or there are another, better, ways?

1 Reply 1

ckodadek
Cisco Employee
Cisco Employee

The only trap similar to what you are looking for is the tcpConnectionClose trap

-----------

.1.3.6.1.4.1.9.0.1

tcpConnectionClose OBJECT-TYPE

-- FROM CISCOTRAP-MIB

TRAP

VARBINDS { tslineSesType, tcpConnState, loctcpConnElapsed, loctcpConnInBytes, loctcpConnOutBytes, tsLineUser }

DESCRIPTION "A tty trap signifies that a TCP connection,

previously established with the sending

protocol entity for the purposes of a tty

session, has been terminated."

----------

however these will only be sent on the session close, and will also be sent by more than just an exec/cmd-line session (i.e. dlsw peer tcp connections closing, etc. but since these are terminal servers you probably don't have that issue).

They are enabled by default on most platforms (i.e. once any traps are enabled), or are enabled by the 'snmp-server enable traps tty' command on later IOS versions (12.3) that support disabling them.