Cisco ASA templates - YMMV

Ilukester · Joined: 27 Dec 2008 Posts: 1

Hi, I am totally new to this whole Mib's thing. Some how I have my Total Sessions graph working but I don't have any other graph working. Could someone tell me how to fix this problem. Is it the Mibs? And how and which mibs would I need to install?
Thank you in advance. And if I figure it out i will post how I did up here.

southcat · Joined: 31 Oct 2008 Posts: 9

ericgearhart · Joined: 11 Feb 2009 Posts: 11

Hi folks

I did some work to clean up the ASA memory graph template, so that the Max value is not cut off, I added a 'Min' value and I moved the row labels to the top as column headers

I figured I'd give at least something back to the vibrant Cacti community

bitgod · Joined: 31 Mar 2005 Posts: 25 Location: Texas, USA

Thanks for the ASA templates. I find these graphs are working well for PIX & ASAs running everything from 6.3(5), 7.2(3), 7.2(4) to 8.0(4).

I've run into one issue, which I don't believe is related to these templates, but someone here may be able to help. I'm not getting any graphs for traffics... I've got errors/discards, connections, cpu, memory - all working great. But the traffic sections just comes up with the names it correctly pulled as hyperlinks, and no graph image at all. If you follow the link you see the names for the 1 minute average, 5 minute, weekly, and so on... but still no graph image at all.

To troubleshoot this so far... I've confirmed my settings are set probably for my version of rrdtools and netsnmp. I've tried SNMP version 1 and 2c. I've also tried all the different options of in/out bits, bytes, 64 bit counters, 95th percentile. I've done a verbose query and see its getting data... but still to no avail.

Seeing that it is ONLY the "SNMP - Interface Statistics" Data Query that is failing, and its failing on PIX & ASAs on different version of code... can anyone provide me some guidance on what to look at trying next?

Thank you!

Regards,

gandalf · Posted: Sat Apr 18, 2009 6:05 am Post subject:

Thanks for posting this. We now encourage contributors to publish their work at the central cacti repository at http://docs.cacti.net/templates
Reinhard

bitgod · Joined: 31 Mar 2005 Posts: 25 Location: Texas, USA

FYI, my problem with traffic graphs not working was fixed in 0.8.7d with the official snmp.php patch.

hinze57 · Joined: 12 Sep 2007 Posts: 6 Location: Colorado

For the record, this is an awesome template and we rely on it heavily.

I was just wondering if anyone knows what OID's or such to add to graph SSL VPN connections.

Thanks,

ravenlord2009 · Joined: 27 May 2009 Posts: 2

Hello

Can somebody help I am searching for the oid for the l2l Session counter? We want to graph only the l2l session seperated from the r2s sessions. We use an asa 5540 with 8.0(4) ios. In the past we did this with our concentrator 3030.

hinze57 · Joined: 12 Sep 2007 Posts: 6 Location: Colorado

I am not at work so can't do this right now, but hop on your ASA and run "show snmp-server oidlist" and it'll kick out all of the MIBs/OIDs it understands. That is how I found the SSL VPN Connection count. Although I'm still testing to see if I am polling the correct one!

ravenlord2009 · Joined: 27 May 2009 Posts: 2

Thanks. But I found only OID counters for IPSec, IKE, r2s, ssl sessions. All work fine. I found no counter for l2l session or tunnels only.

asa supports the following mibs:
ftp://ftp-sj.cisco.com/pub/mibs/supportlists/asa/asa-supportlist.html
ftp://ftp.cisco.com/pub/mibs/v2/CISCO-IPSEC-FLOW-MONITOR-MIB.my

I think there is no counter for the l2l sessions.

MrRat · Joined: 07 Jan 2010 Posts: 26

I get errors for the null0 interfaces on each of my ASA's