Hi,
I'm looking for a way to create a licensing report for all of our ASAs. Same as if I'd run 'show license' on each one of them. Is there anyone here that knows an easy way to provide this type of report?
Thanks in advance!
Regards,
Robin
BUMP!
A huge problem with Cisco's SNMP implementation on ASAs is that there is a great deal of data that has not been implemented in the SNMP agent despite being defined.
Looking at my ASA running 9.2(3)4, the only useful OID I can find regarding this is 1.3.6.1.4.1.9.9.392.1.1.1 (crasMaxSessionsSupportable).
There is a ciscoLicenseMIB defined at OID 1.3.6.1.4.1.9.9.359, but Cisco's own SNMP object navigator reports that there are no supporting images.
Wow, going to use basically the same answer twice in one day, and the answer is based off something I just did the other day! I actually had this problem the other day where I wanted to create a report to find out the licensing on a bunch of 2911's, I tried figuring out how to do a UnDP to do it, but it didn't really get me what I wanted.
So, I did figure out that if I wanted to execute the "show license" command on all my 2900's, I could to it in the "Configs" / "Config Management" screen by doing an "Execute Script". Now, on my 2900's the "show license" command actually worked, but on the ASA's I have access to, this command doesn't exist. So, either your running a newer OS than us (definitely possible!) or your actually looking to do a "show activation-key". You could just use that command, or if you just wanted the "Total VPN Peers", you could use the command "show activation-key | i Total VPN Peers", it really depends on what you want.
Once you've done that, all your output is stored in the database from the "Transfer" queue, so don't empty it out by clearing complete jobs or anything till you get your output. To get your output, either use SQL or SWQL, I'll do it with SWQL below.
SELECT NT.NodeProperties.Nodes.IPAddress, NT.NodeProperties.Nodes.SysName, NT.NodeProperties.Nodes.MachineType, NT.DeviceOutput
FROM NCM.TransferResults NT
WHERE (RequestedScript LIKE 'show activation-key%')
This will output everything into a excel-like table in SWQL Studio that you can export to CSV and then into Excel. You can clean it up first with a text editor like VI and use excel or something to put it in a format you like.
HTH!
cnorborg, I'm trying to use your process (above) to get the license information from some Cisco 4510's, and I'm missing something basic, it's not working.
Can you show me in ridiculous baby-steps-detail how to get the data? Maybe you can see what I'm missing.
I want to report on the output of the "show license in-use" command only my Cisco 4510's. The output of the command looks like this:
(Node Name) show license in-use
License Store: Primary License Storage
StoreIndex: 1 Feature: entservices Version: 1.0
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium
License Store: Dynamic License Storage
I thought the process would be as follows:
WHERE (RequestedScript LIKE 'show license in-use%')
I could click "Enable Search", and then perhaps search for 4510's? I'm not certain how to use this area, and your advice would be appreciated
The Preview shows no output. The "Custom Query" option seems not to be appropriate for my needs.
When I delete this Report and start over, I find no way to select my 4510's AND to run the SWQL script.
I'm missing some basic Report-building skill, and I don't know where to turn. Can you offer advice?
Rick Schroeder
Are you trying to do this with just NPM? If so, I don't know of a way to do it. NCM allows you to execute commands on a device, not NPM. The reason I'm wondering is your doing the whole "Admin / Alerts & Reports" rather than going into the "Configs / Config Management" as I mentioned previously.
You have to use the "Execute Script" for something to show up in the "TransferResults" table.
Thanks, Craig. I got it figured out via this thread: What method can I use to have Solarwinds NPM/NCM show me the output of "show license in-use" for only my Cisco 4510's? The solution works well!
