This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Cisco ASA 5525-X VPN Session Monitoring via UDP

dunky2k over 8 years ago

Hi there,

Been looking to setup a page that will list all of our VPN session in NPM, I have looked through the various threads here already and have something in place but I can't seem to be able to get the username field displayed to show me exactly who's connected, I only every get a value of 1 for the 'crasSVCNumSessions' or more if there are more than 1 user connected.

I have ran the 'show snmp-server oidlist' on the ASA device and I get an OID of 1.3.6.1.4.1.9.10.135.1.1.1.3 that should show crasVpnUsername however when I do a MIB walk using the engineers toolset for the device this OID is not listed and hence I cannot select it, nor can I create a custom poller using UDP as again it doesn't recognise the OID I want to select.

Any ideas as to why the Cisco ASA device lists this but MIB Walker or UDP doesn't?

We are currently running NPM v10.7.

Top Replies

0 silverbacksays over 8 years ago

Very odd. I'm not sure if the snmpwalk.exe tool within the Orion install directory is the same as the one with the Toolset, but it might be worth running this tool against the node, to compare the results. Also, try running the walk using both SNMPv2 and SNMPv3. Perhaps it's only exposed when queried using SNMPv3, although I've not heard of MIBs being excluded by SNMP version before.
Bit of googling turned up this thread from the Cisco support forums:
https://supportforums.cisco.com/document/51116/asa-ra-vpn-user-information-using-snmp
Hopefully my suggestion above, or the discussion in the Cisco thread will help you!
Cancel
Vote Up 0 Vote Down

Cancel
0 dunky2k over 8 years ago in reply to silverbacksays

Thanks for the reply.
I ran the snmpwalk.exe from Orion and it doesn't show the OID that i'm looking for either.
It appears that some of the OID,s on the ASA are marked as 'not-accessible' perhaps this is my issue, need to find a way of accessing these.
Cancel
Vote Up 0 Vote Down

Cancel
0 silverbacksays over 8 years ago in reply to dunky2k

I guess your next avenue towards resolution is a support call with Cisco and perhaps a support ticket with SolarWinds. The gurus there should be able to advise if it's possible or not, and if so how you do it
Cancel
Vote Up 0 Vote Down

Cancel
0 dunky2k over 8 years ago in reply to silverbacksays

I raised a ticket with Solarwinds who advised that I didn't need to walk the MIB if I knew the OID, I could just create the custom poller with the info that I had even if it wasn't being displayed in the MIB database.
When I try that however, it says that the value returns no data for the selected device, so yes I might have to have a word with Cisco themselves, that should be interesting.
Thanks for your help though.
Cancel
Vote Up +1 Vote Down

Cancel
0 silverbacksays over 8 years ago in reply to dunky2k

No problem, good luck with it! Let us know how you get on.
Cancel
Vote Up 0 Vote Down

Cancel
0 arachenta over 8 years ago

Were you able to resolve this?
dunky2k‌
Cancel
Vote Up 0 Vote Down

Cancel
0 dunky2k over 8 years ago in reply to arachenta

Hi there,
I wasn't able to figure out what I originally wanted to do, however I did get a workaround to give me this information displayed on a report.
Effectively I wrote an advanced sql to extract the data I required and then produce a report to display that information I needed.
Cancel
Vote Up +1 Vote Down

Cancel
0 arachenta over 8 years ago in reply to dunky2k

Thanks for getting back to me.
Cancel
Vote Up 0 Vote Down

Cancel
0 AlexSoul over 7 years ago in reply to dunky2k

Hi, would you be able to share this SQL with us here?
Thanks a million,
Alex
Cancel
Vote Up +1 Vote Down

Cancel
0 silverbacksays over 7 years ago in reply to AlexSoul

I second this! If you could share the query, it would help others replicate this
Cancel
Vote Up 0 Vote Down

Cancel