Show Cisco ASA VPN totals for users and site-to-site VPN's?

Hello,

I have downloaded a few UnDP's to display the current amount of VPN users connected to our Cisco ASA's and another UnDP to show the total VPN's (Client and site-to-site VPN's) however I have been able to find or create one that just show the current site-to-site office VPN's.

Has anyone managed to achive this?

Thanks

Find more posts tagged with

vpn_users

UnDP

site-to-site

Accepted answers

All comments

Yann

Hi,

The following thread should help:

Site-to-Site VPN Tunnel Monitoring through NPM

Yann

GonzoUK

Hi Yann,

That link only seems to show the total amount of connections and not the usernames (clients), unless I'm doing something wrong, I can attach a screenshot?

Yann

hum, could a UnDP on the below OID return the Username?

crasUsername - 1.3.6.1.4.1.9.9.392.1.3.21.1.1

I know it exists the following MIB for VPN monitoring:

CISCO-REMOTE-ACCESS-MONITOR-MIB:ciscoRemoteAccessMonitorMIB (1.3.6.1.4.1.9.9.392)

SNMP Navigator

And

CISCO-IPSEC-FLOW-MONITOR-MIB:ciscoIpSecFlowMonitorMIB (1.3.6.1.4.1.9.9.171)

SNMP Navigator

In the case none of the above helps, if you run a mib walk on the device beginning at the Cisco top OID, do you see a Username in one of the results?

e.g. :

snmpwalk -v 2c -c SecretCommunity xxx.yyy.www.aaa 1.3.6.1.4.1.9 | grep -i myusername

If we are lucky it should pinpoint which MIB should be used to retrieve the username information from the VPN tunnels established.

HTH,

Yann

GonzoUK

Hi Yann,

Thanks for finding the time to help me.

I tried crasUsername - 1.3.6.1.4.1.9.9.392.1.3.21.1.1 and it is unsupported against my ASA (version 8.0(3)).

I've didn't know I had a MIB walker, where is this?