Cisco - Firewall ASA - Monitoração de Recursos - OIDs
Autor: Paulo | Publicado: 2016-12-10T02:18:00-02:00








Neste post estão relacionados os OIDs para monitoração via SNMP dos principais recursos do Firewall Cisco ASA. Foram incluídos identificadores para monitoração de CPU, memória, número de conexões e tráfego de rede. Foram 
adicionados também os objetos para monitoração do serviço de VPN 
correspondentes às sessões de clientes, túneis, entre outros. Os OIDs (Object Identifier) são identificadores de objetos em uma MIB (Management Information Base).


&nbsp;Informações básicas do appliancesysName &nbsp;&nbsp;&nbsp;&nbsp; 1.3.6.1.2.1.1.5sysDescr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1.3.6.1.2.1.1.1sysContact&nbsp;&nbsp; 1.3.6.1.2.1.1.4sysLocation&nbsp; 1.3.6.1.2.1.1.6sysUpTime&nbsp;&nbsp; 1.3.6.1.2.1.1.3&nbsp; 


CPU (%)cpmCPUTotalPhysicalIndex &nbsp; &nbsp;1.3.6.1.4.1.9.9.109.1.1.1.1.2. cpmCPUTotal5sec &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1.3.6.1.4.1.9.9.109.1.1.1.1.3.cpmCPUTotal1min &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1.3.6.1.4.1.9.9.109.1.1.1.1.4. cpmCPUTotal5min &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1.3.6.1.4.1.9.9.109.1.1.1.1.5.



Memória (Free e Usage em byte)ciscoMemoryPoolUsed &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;1.3.6.1.4.1.9.9.48.1.1.1.5.ciscoMemoryPoolFree &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1.3.6.1.4.1.9.9.48.1.1.1.6.



Interface - Informação GeralifName&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; 1.3.6.1.2.1.31.1.1.1.1ifNumber  &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 1.3.6.1.2.1.2.1. &nbsp; &nbsp; ifIndex&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;       1.3.6.1.2.1.2.2.1.1. &nbsp; ifDescr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;     1.3.6.1.2.1.2.2.1.2. &nbsp; ifType&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;        1.3.6.1.2.1.2.2.1.3. &nbsp; ifMtu&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp;&nbsp; 1.3.6.1.2.1.2.2.1.4.&nbsp;&nbsp;&nbsp; ifSpeed&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;       1.3.6.1.2.1.2.2.1.5. &nbsp; ifPhysAddress       1.3.6.1.2.1.2.2.1.6. &nbsp; ifAdminStatus&nbsp;&nbsp; &nbsp; &nbsp;&nbsp; 1.3.6.1.2.1.2.2.1.7.ifOperStatus          1.3.6.1.2.1.2.2.1.8. &nbsp; ifHighSpeed&nbsp;&nbsp;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; 1.3.6.1.2.1.31.1.1.1.15.&nbsp;&nbsp; ipAdEntAddr&nbsp;        1.3.6.1.2.1.4.20.1.1 ipAdEntNetMask&nbsp;&nbsp; 1.3.6.1.2.1.4.20.1.3.



Interface - Tráfego / Pacotes Descartados / Erro
Bytes IN/OUT (Counter32)ifInOctets   &nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; 1.3.6.1.2.1.2.2.1.10. &nbsp; ifOutOctets&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;        1.3.6.1.2.1.2.2.1.16.Bytes IN/OUT (Counter64)ifHCInOctets&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1.3.6.1.2.1.31.1.1.1.6. ifHCOutOctets&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1.3.6.1.2.1.31.1.1.1.10. Pacotes IN/OUTifHCInUcastPkts&nbsp;&nbsp;&nbsp; &nbsp;&nbsp; 1.3.6.1.2.1.31.1.1.1.7. ifHCOutUcastPkts&nbsp;&nbsp;&nbsp; 1.3.6.1.2.1.31.1.1.1.11.Discards IN/OUTifInDiscards&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;      1.3.6.1.2.1.2.2.1.13. &nbsp; ifOutDiscards           1.3.6.1.2.1.2.2.1.19. &nbsp; ERRORs IN/OUTifInErrors   &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 1.3.6.1.2.1.2.2.1.14. &nbsp; ifOutErrors&nbsp;&nbsp;&nbsp;           1.3.6.1.2.1.2.2.1.20. &nbsp;&nbsp;



Número de Conexões 1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6&nbsp; &nbsp; &nbsp; 



ACESSO REMOTO


Número de Sessões AtivascrasNumSessions&nbsp;&nbsp;&nbsp; 1.3.6.1.4.1.9.9.392.1.3.1.&nbsp;&nbsp;&nbsp;&nbsp; crasNumUsers&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; 1.3.6.1.4.1.9.9.392.1.3.3.&nbsp;&nbsp;&nbsp;&nbsp; crasNumGroups&nbsp;&nbsp;&nbsp; &nbsp; 1.3.6.1.4.1.9.9.392.1.3.4.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 



Número de Sessões IPsec AtivascrasIPSecNumSessions&nbsp;&nbsp; 1.3.6.1.4.1.9.9.392.1.3.26.&nbsp; 



Número de Sessões Site-To-Site (IPSec) AtivascrasL2LNumSessions&nbsp;&nbsp; 1.3.6.1.4.1.9.9.392.1.3.29.&nbsp;&nbsp;&nbsp;&nbsp; 



Número de Sessões SVC (SSL VPN Client) AtivascrasSVCNumSessions&nbsp;&nbsp;&nbsp; 1.3.6.1.4.1.9.9.392.1.3.35.&nbsp; 



Número de Sessões Web VPN AtivascrasWebvpnNumSessions&nbsp;&nbsp; 1.3.6.1.4.1.9.9.392.1.3.38.&nbsp; 



Número de Túneis IKE IPSec Phase-1 AtivoscikeGlobalActiveTunnels&nbsp; 1.3.6.1.4.1.9.9.171.1.2.1.1.Octetos IN/OUTcikeGlobalInOctets&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1.3.6.1.4.1.9.9.171.1.2.1.3.&nbsp;&nbsp; cikeGlobalOutOctets&nbsp;&nbsp; 1.3.6.1.4.1.9.9.171.1.2.1.11. Pacotes IN/OUTcikeGlobalInPkts&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1.3.6.1.4.1.9.9.171.1.2.1.4.&nbsp;&nbsp; cikeGlobalOutPkts&nbsp;&nbsp; 1.3.6.1.4.1.9.9.171.1.2.1.12.&nbsp; Pacotes Descartados IN/OUTcikeGlobalInDropPkts&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1.3.6.1.4.1.9.9.171.1.2.1.5.&nbsp;&nbsp; cikeGlobalOutDropPkts&nbsp;&nbsp; 1.3.6.1.4.1.9.9.171.1.2.1.13.&nbsp;&nbsp; 




&nbsp;_________________________________________

As informações contidas neste post são baseadas em documentos publicados no site da Cisco&nbsp;&nbsp;e obtidas através da experiência com o próprio equipamento.&nbsp;Para o exemplo mostrado foi utilizado um Firewall ASA modelo 5580 com versão de IOS 9.0.