Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Monitoring used vs available Remote VPN users on Cisco ASA in NPM

I am trying to create an alert and an hourly report based on a threshold breached for Cisco ASA remote VPN peers. On account of COVID-19 we will suddenly have an influx of people working from home and our licensing may not be up to the task as we've never seen this level of working from home before so we'd like to monitor the number of total active users. I have found the OIDs we need to use-I'd like to create a graph and an alert based on a threshold. The two OIDs are:
1.3.6.1.4.1.9.9.392.1.3.1 - crasNumSessions (the total number of remote VPN sessions active)
1.3.6.1.4.1.9.9.392.1.1.1 - crasMaxSessionsSupportable (the denominator for the percentage of the threshold used)

I don't know where to start on this-I've managed to add a custom graph using the first OID but I don't know how to get this to compare this to the number available. I've already created a custom poller for this, but that doesn't necessarily seem to be what I want, as it seems to change all the polling on the ASAs I'm monitoring. The first OID appears to be available to monitor via custom chart as Node>VPN RA Detail>Active sessions, but the second one doesn't appear in there. Is there a way to modify the existing poller or do I need to define a new one from scratch and add this in to enable that second OID? I'm not familiar with custom SQL queries, either-perhaps that's what's needed?

Find more posts tagged with

Accepted answers

All comments

cnorborg

Just a thought, I think it would be easy to use this.

In the UnDP application on the server, that you used to set up the pollers, you can also set up something called "Transform"'s. It allows you to perform math on one or more pollers. Maybe subtract the current number from the max, which should give you what's still available?

You can either chart that, or set up an alert when it gets near 0 or under a threshold?

I think it should be fairly simple to set up?

bobmarley

The steps are create a custom poller - then create a view (or report). It looks like you already made your poller so here is

how to make the view.

From the main Orion page Settings->All Settings->Manage Views-->Add

From there give it a name, and leave view type 'Summary' and hit Submit

On the next screen hit + to add a resource and search for poller.

This is the one for custom pollers. Go ahead and add that resource and submit it. On the next screen click Preview

Should look like this. Click Edit.

On the Edit screen select your poller name and select your nodes and finished!

If you want to use Reports here is the SWQL query to use. Replace your own poller name and node ID's - in bold

SELECT TOP 10000 DisplayName, NodeID, AssignmentName, CurrentValue, ID, CustomPollerName

FROM Orion.NPM.CustomPollerAssignmentOnNode

Where (NodeID = "12345" OR NodeID = "67891" OR NodeID = "23457" OR NodeID = "13579" OR NodeID = "98765" OR NodeID = "4321") AND DisplayName LIKE 'CiscoASANumberOfSessions'

ferrarie

@bobmarley , I am trying to follow your steps but the "Select an UnDP:" option is not allowing me to select anything:

rmeskill

I think the upnp has to be assigned to the node you want to display. This worked precisely as expected for me-thanks!

bobmarley

Yes, you have it! Create custom poller using the OID above, assign it to your nodes, and then create a report. You could also create an alert as well if needed.

If you want to use a SWQL query to create a widget here is the query. Use the NodeID for your specific ASA devices and whatever you named your poller.

SELECT TOP 10000 DisplayName, NodeID, AssignmentName, CurrentValue, ID, CustomPollerName

FROM Orion.NPM.CustomPollerAssignmentOnNode

Where (NodeID = "10000" OR NodeID = "10001" OR NodeID = "10002" OR NodeID = "10003" OR NodeID = "10004" OR NodeID = "10005") AND DisplayName LIKE 'YourCustomPollerNameGoesHere'

cathsheh1

Question,

I was able to get my report working..looking something like the below....however, i would like to also add the average of the InTotalBytes and OutTotalBytes to each location and i have not been able to get this figured out....so far this is what i have and it is not working....

SELECT TOP 1000 Nodes.Caption, CustomPollerAssignmentView.CurrentValue, AVG(ASA_RemoteAccessSessions.InTotalBytes) AS "Avg Total IN Bytes",
AVG(ASA_RemoteAccessSessions.OutTotalBytes) AS "Avg Total IN Bytes"
FROM Nodes
INNER JOIN CustomPollerAssignmentView ON Nodes.NodeID = CustomPollerAssignmentView.NodeID
INNER JOIN ASA_RemoteAccessSessions ON Nodes.NodeID = ASA_RemoteAccessSessions.NodeID
Where (Nodes.NodeID = '101' OR Nodes.NodeID = '215' OR Nodes.NodeID = '1443' OR Nodes.NodeID = '1496' OR Nodes.NodeID = '1497' OR Nodes.NodeID = '1861')
AND CustomPollerAssignmentView.CustomPollerName = 'crasNumSessions' and ASA_RemoteAccessSessions.ConnectedTime >= dateadd(day,datediff(day,1,GETDATE()),0)
order by Nodes.Caption Asc

any help would be much appreciated....