Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Using NPM to monitor the number of current connections on an cisco ASA firewall

I have a firewall exclusively for SIP traffic. I can monitor the average BPS which gives me a general level of the number of channels I'm using on the SIP trunk, but I think if I could monitor the number of connections it would give me the exact number of channels in use at any given time.

Does anyone know if that's possible? The command for seeing the information in the CLI is show conn count.

Thanks!

Michael

Find more posts tagged with

voip

firewall

cisco_sip_snmp_active_calls

npm_10

firewalls

Accepted answers

zabeel_musa

try this command on your ASA..its a hidden cisco command showing what oids are supported on your ASA

show snmp-server oidlist

if its available should give you an output like below with all the oids as well.

-------------------------------------------------
[0]     1.3.6.1.2.1.1.1.        sysDescr
[1]     1.3.6.1.2.1.1.2.        sysObjectID
[2]     1.3.6.1.2.1.1.3.        sysUpTime
[3]     1.3.6.1.2.1.1.4.        sysContact
[4]     1.3.6.1.2.1.1.5.        sysName
[5]     1.3.6.1.2.1.1.6.        sysLocation
[6]     1.3.6.1.2.1.1.7.        sysServices
[7]     1.3.6.1.2.1.2.1.        ifNumber
[8]     1.3.6.1.2.1.2.2.1.1.    ifIndex
[9]     1.3.6.1.2.1.2.2.1.2.    ifDescr
[10]    1.3.6.1.2.1.2.2.1.3.    ifType
[11]    1.3.6.1.2.1.2.2.1.4.    ifMtu

Regards

Zabeel

All comments

zabeel_musa

hi,

the oid im using to monitor connections in use is

1.3.6.1.4.1.9.9.147.1.2.2.2.1.5

This site may be of use to you as well

http://www.oidview.com/mibs/9/CISCO-FIREWALL-MIB.html

Regards

Zabeel

mkadel

That's definitely what I was asking for but not what I was expecting.

We have 72 channels available on our SIP trunk. The SIP trunk is on the outside of the firewall so Orion NPM can't monitor it directly, and it is only used for SIP traffic. I'm hoping to get some metric off the firewall that will tell me exactly how many current calls are happening.

I'm monitoring in IN BPS but because the calls vary from codec to codec each call could be worth anywhere from 64K to 80K of bandwidth. I was hoping the connection value would vary between 1 and 72 but so far I'm between about 100 and 200.

Anyone have any other ideas?

Thanks to Zabeel for answering my uninformed question!

zabeel_musa

try this command on your ASA..its a hidden cisco command showing what oids are supported on your ASA

show snmp-server oidlist

if its available should give you an output like below with all the oids as well.

Regards

Zabeel

bshopp

Also did you look on the content exchange to see if someone else created a UnDP you might be able to use, see search here.

mkadel

Thanks everyone for your help on this. I'm just not sure it's possible to keep track on exactly the number of sip channels in use through an ASA firewall. The number of connections and the BPS give me a rough idea.

I think the issue is that there's really one two players involved: The SIP trunk and the asterisk server. There are also keep-alive messages, snmp polls, and random Cisco traffic to sort through. Oh well.