I just got CPU, Memory, Connections, IPSec Phase 1, IPSec, Phase 2, and SSL VPN Users done for ASA. I guess I am going to have to write a collector to get what I really want: Enumeration of IPSec tunnels and stats on each.
Nicholas Weaver Manager IT Infrastructure 817-546-2770 [phone/fax] 817-914-6166 [mobile] [EMAIL PROTECTED] ThinkCash 4150 International Plaza, Suite 400 Fort Worth, TX 76107 Privileged and Confidential. This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain privileged and/or confidential information. If you have received this e-mail in error, please notify me immediately by a return e-mail and delete this e-mail. You are hereby notified that any dissemination, distribution or copying of this e-mail and/or any attachments thereto, is strictly prohibited. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of rlund Sent: Thursday, March 06, 2008 11:00 AM To: [email protected] Subject: [zenoss-users] Re: Error Modeling Cisco ASA Firewall terrahwk wrote: > > ftanner wrote: > > My biggest beef with Zenoss, with regards to Cisco ASA firewalls, is that the device OIDs that it chooses are either incomplete or erroneous. > > > > It doesn't give the proper CPU utilization. > > I just added our ASA (running ASA version 7.2) to zenoss 7.1.2. I had the issue reported in the top of this thread, but applying the patch fixed the problem and the ASA is now imported correctly. > > The rest of this post is a little off-topic, but I added my ASA to class "Network/Router/Firewall". There is no CPU graph for the template attached to this device class. > > Anyway, I checked the Cisco web site where it states to use MIB's CISCO-PROCESS-MIB-V1SMI.my: > Article (might need a Cisco login) : http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps2030/products_ tech_note09186a0080094a13.shtml > > Specific OID (ASA OS 6.2.x and later) : > ftp://ftp.cisco.com/pub/mibs/oid/CISCO-PROCESS-MIB.oid > > So I added a graph using the five minute average OID cpmCPUTotal5min ("1.3.6.1.4.1.9.9.109.1.1.1.1.5.1") > > This works a treat. (Actually, the same OID works for all the routers I've tested as well. The revers isn't true - Zenoss uses .private.enterprises.cisco.local.lcpu.avgBusy5 for the routers it seems, as you say, this doesn't work on an ASA) > > edit: forgot to mention the OID for CPU usage needs a .1 on the end. I edited my comment accordingly I have this same ASA , where, how, do you do this at/in Zenoss? Thanks -------------------- m2f -------------------- Read this topic online here: http://community.zenoss.com/forums/viewtopic.php?p=17002#17002 -------------------- m2f -------------------- _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users _______________________________________________ zenoss-users mailing list [email protected] http://lists.zenoss.org/mailman/listinfo/zenoss-users
