Cisco VPN :: ASA5505 Remote SNMP Monitoring Over VPN
Apr 3, 2012
We currently have a few 5505s installed at client sites which are connected via s2s ipsec VPN to our datacenter's 5510. We are using Nagios to monitor the local data center and remote client infrastructure (over the VPNs) which has been working well.
We would like to also monitor the remote 5505s using SNMP over the s2s tunnels but it doesn't seem to be working, the connection is timing out. We've configured the remote 5505s with the same snmp statement we used on the 5510 (snmp-server host inside <remote datacenter IP> poll community ***** version 2c) yet the Nagios SNMP check cannot connect to the remote 5505s. We've also tried the command using 'outside' without any luck, not sure how to get SNMP to route over the VPN.
View 15 Replies
ADVERTISEMENT
Jan 27, 2013
I am trying to poll the 5 minute average CPU utilization of my Cisco Aironet 1252 (IOS version 12.4(25d)JA) using SNMP OID .1.3.6.1.4.1.9.2.1.58.0.However for some reason I am not getting any response back from the aironet. Note I am able to retrive the memory utilization without a problem.
View 1 Replies
View Related
Mar 26, 2012
I am trying to add ACS 1121 (ver 5.3) to monitoring and seems that MIB are missing. Need MIB for this device which I can use in monitoring tool.
View 1 Replies
View Related
Jun 15, 2011
how snmp monitoring works when we have WLC in the networking.Before the WLC 5508 instalation, we had the Nagios monitoring each Access Point in the networking. Today, the Nagios still monitoring the networking, but the Nagios cannot get the same information of the APs (CPU, status interface, memory, etc).Now, the WLC controls each AP, the IP address, netmask, community (of all AP) are the same before the WLC instalation. I have tried to configure the SNMP information in Management>>SNMP>>Communities, but these configuration are from WLC and not from each AP.
How can I configure the SNMP setting in my AP to still use the Nagios to monitoring the networking?
View 1 Replies
View Related
Aug 13, 2012
I have 5 installations of ACS appliances (ACS 1121 running ACS 5.3). Is there a way to monitor them via SNMP? The AD client keeps dying on one of them, and even with the newest patch it's not up. Also, i want to monitor them up/down, CPU, memory... basic network monitoring to make sure my devices are healthy.
Any one know if that can be configured? I figured i'd ask here before opening a TAC.
View 2 Replies
View Related
Oct 3, 2006
I am building a few 3750 stacks, I want to be able to poll/monitor each individual switch in the stack but as it only has 1 ip associated with the stack how can I do this. I am polling the uplink interfaces but as I only have uplinks on the top and bottom switch I am blind to a switch going down in the middle of the stack.
View 4 Replies
View Related
May 23, 2011
I'm a C# programmer and as part of my software I need to monitor some Cisco Catalyst 3560V2 24 switches using SNMP (By reading MIB/S data).Apparently this switch supports more than 50 different MIBs.My question is which MIB/MIBS contains general health data (parameters) that may determine if the switch is OK, Degraded or Malfunctioned.
View 0 Replies
View Related
Mar 27, 2008
I am trying to monitor my ASA 5505. This asa is connect via a ip-sec tunnel to our network. I have no problems with snmp monitoring devices behind the ASA, but when trying to monitor the asa itself I do not get a SNMP response.
View 2 Replies
View Related
Apr 10, 2012
I was positively surprised to find the optical transmit/receive values using the show fiber-ports optical-transceiver detailed command on a SG300-10.
Now I'm wondering if there is also a SNMP-MIB to query these values? I've already tried the CISCO-ENTITY-SENSOR-MIB used by the larger devices running Cisco IOS, but this didn't work.
View 3 Replies
View Related
Oct 21, 2012
I have two 6509E's configured with VSS. In this configuration, is it possible to monitor the CPU and memory of each switch independently using SNMP?
View 1 Replies
View Related
Nov 5, 2011
I'm running 12.2(33)SXJ1 on a 6500 with several IPv6 BGP peers. Is there any way to monitor the BGP status of IPv6 peers? I've been through the BGP4 mib and cant seem find a way to check the status of IPv6 peers.
View 4 Replies
View Related
Feb 5, 2012
We have C7206VXR NPE-G2 platform with transceiver which support DOM.Could we monitor DOM tx/rx level statistic through snmp for 7206 platform?In CLI result of command "sh interf GigabitEthernet0/1 transceiver" give some information.We tried search for some MIB In "MIB locator" on cisco.com.
View 2 Replies
View Related
Jun 19, 2012
Is temperature monitoring via snmp supported on Cisco 2801 routers? when i perform a snmpwalk i donot get the associated value for the oids.
View 2 Replies
View Related
May 1, 2012
I am using ASA 5510 Firewall and i have established VPN tunnels too , now i want to Monitor the bandwidth utilization , i have installed PRTG Monitor application and want to add the firewall , how to enable the SNMP in ASA .
View 1 Replies
View Related
Apr 4, 2013
I'm currently implementing Microsoft System Center 2012 Operations Manager, the curent stage of the project is to add the network devices to SCOM via SNMP in order to monitor them, I am able to add them all and monitor; however, my ASA 5510, although SCOM discovers the ASA via SNMP and adds it to the network monitoring list, it loses SNMP connectivy every 30 minutes, and 15 later it reconnect with SCOM, then after another 15 minutes it loses the connection again, and so on and so for.
View 1 Replies
View Related
Nov 14, 2012
"how to monitoring VPN Login Session?" I want to the history of VPN User login to my VPN. How could I know?Which software can made me easy to monitoring and store those log in my SNMP Server? How to do that?
View 1 Replies
View Related
May 31, 2012
I am having issues with monitoring our Cisco ASA5505 devices with "SolarWinds Orion NPM 10.2" through the use of SNMPv2. On some devices we see that SNMP polling stops and that the ASA's interfaces would show up as unknown - usually when the link to the device goes down/up or after a random ammount of time. At that point SNMP polling data is no longer updated and all we can rely on is ICMP for device status. I can resolve the issue by restarting the remote ASA OR restarting the SolarWinds server after which polling resumes. We are only seeing this behaviour with our remote ASA's.
Our setup is as follows:
Head End: Cisco ASA 5520 [ASA 8.3(2)]
Remote: Cisco ASA 5505 [ASA 8.3(2)]
I have found a SolarWinds article listed below that possibly identifies the issue that we are having but am not sure where to start.
[URL]
View 8 Replies
View Related
Sep 1, 2011
I have a customer with an ASA5505 where it will not reply to SNMP polls from any source, i have followed the configuration guide [URL].at and tested another ASA in our internal network and i have that working fine on our LAN, here is the snmp and logging sections of the show-run on the ASA, it there anything obvious im missing to make the SNMP work on this device?
snmp-server host outside 203.XX.75.122 community XXXX
snmp-server host outside 203.XX.84.196 community XXXX
snmp-server host outside 203.XX.86.82 community XXXX
snmp-server host outside 82.XX.244.3 community XXX
[Code] .....
View 3 Replies
View Related
Feb 13, 2013
I have a ASA5505 with version 8.4(3) that it's working as a DHCP server and I would like to get information about IPs availables (or assignated) on theirs pools via SNMP but I can't find the MIB or OID that I need.
What MIB that I need?
View 1 Replies
View Related
Sep 7, 2011
How I can actively monitor the interfaces and overall status of 2 x ASA 5500s in an Active/Standby configuration?
I can setup monitoring of the interfaces on the Active member but I'm not sure how to manage the Standby member?
View 1 Replies
View Related
Jul 12, 2012
Is there any free tool like lanvisor ???I have 50 computers in my lan and wish to monitor all those computers during their online examinations ... I need a free tool which will autostart in all clients so that i can sit in one computer monitoring everyone.
View 1 Replies
View Related
Feb 2, 2011
I need to track and record all functionality, connectivity speeds and applications of a remote laptop. Here's the basic set up of my problem:We have 40 medical facilities in five Western States, each with up to 30+ pieces of hardware including thin clients, PCs, laptop computers and wall mounted touch screen kiosks operating on a variety of OS including primarily XP pro, then Linux and transitioning into Win 7.We have installed Aruba wireless network in each building on which our mobile medical cart laptops connect. Each facility has a different mix of primary and backup/failover ISP from DSL, Cable, T1 to Bonded T. All are at or exceed 22MB down, 5MB up save the T1s at their dedicated 1.5 and we monitor speeds and network stats trhough our gateway device. PfSense.All employees connect through an RDP (Remote Connection) to our hosting company in Atlanta, GA where the farm of about 28 servers reside hosting our medical, email and office applications.We regularly are contacted by nursing and clinical office staff complaining that "the network is slow". We review connection speeds, loads, ping times and confirm that there are no ISP Speed issues that are causing the "Slowness". However when we review exactly what the nurses mean by "slow" it invariably turns to how long it takes to log in to the RDP sessions and access then run their medical applications in the RDP. They often sit and wait for the RDP to load for five minutes or more and complain of waiting for their typing to catch up in the applications they work in.
We believe the slowness occurs once they are connected in the RDP and that their problems are occurring at the hosting company's facility, getting through their firewall, through profile management and server hardware/software but we can not prove this is the case because the hosting company always claims they see perfectly acceptable speeds and access on their side and we are locked out from access to monitor tehir environment. Changing hosting companies is probelmatic because they are specialised in our industry and leaving would be diffcult. I need some software that I can install on a few machines in a select few of our facilities that will track and record the actual user experience so that we can watch and review exactly what is happening, what the network stats look like and precisely where the user is experiencing "slowness".
View 3 Replies
View Related
Jan 5, 2012
I've just gotten a SG200-08 (SLM2008T-EU), which I would like to monitor remotely from Cacti using SNMP. It seems however, that this switch has no SNMP support - is this correct? Does this mean that there is no way to monitor traffic over the switch's ports short of making a script access the web UI?
View 1 Replies
View Related
Jun 8, 2012
Any temperature monitoring unit we can install in our server room that we can use to moniter the room temperature? We had a near catastrophe recently when the air conditioning unit failed to restart following a power outage.
View 3 Replies
View Related
Apr 14, 2012
I am using asa 5520 and asa 5540 for remote access vpn connections. Is it possible to do active monitoring of my vpn connections so that there would be alerts for vpn tunnels that fail to establish due to other reasons other than user authentication?
View 5 Replies
View Related
Mar 26, 2012
I am configuring new ACS 1121 appliance with version 5.3 and wanted to know how to configure Remote Database settings in ACS5.3 Is that necessary to configure that option ?
Also one more thing I can see that ACS 5.3 generates lots of logs is there any solution to reduce such logs. It seems many unuseful logs which are system related are getting logged into device which might no be good for memory requirements of device.
View 6 Replies
View Related
Apr 13, 2013
-cisco 2651xm router
-cisco 1760 router
I have a cisco 2651xm router here at home, and at another remote location I have a cisco 1760 router, both are connected to the internet via adsl (WIC1-ADSL card).The problem is that from home I can't connect to the snmp-service on the 1760 router. I'm using a PC that's on the LAN of the 2651XM router, the blockage is in the 2651XM router, because if I swap it for a cheap plastic domestic router I can get snmp data from the 1760 router, and this is without any port forwarding in the domestic router. What config do I need on the 2651XM router so it will pass this traffic?
View 3 Replies
View Related
Aug 4, 2011
I have been searching for days trying to find out what could be wrong with the configuration of an ASA5505 running Firmware version 7.2(2). I am trying to set up a hairpin connection between my laptop on the VPN tunnel (192.168.25.12) to access the server across the L2L VPN (192.168.1.10) on the diagram below.
The remote VPN function is working, as I can RDP to the 192.168.25.10 server from my laptop, and the L2L VPN is working since I can RDP from server 192.168.25.10 to server 192.168.1.10. I am trying specifically to run RDP from my laptop without having to log into the .25 network.
I have tried multiple changes to my NAT tables and my ACL configurations to no avail.[code]
View 8 Replies
View Related
Jul 28, 2011
I have a ASA 5505.|I configured it for remote access VPN from cisco VPN client.the ASA receives a public ip address on outside interface via PPPoE.I can connect to public ip of outside interface and address 10.1.1.2 is assigned to my Cisco vpn client.the problem is that I Cannot ping or reach ASA internal IP address 172.16.29.1 in any way when I am in VPN from outside,while I Can ping other hosts on 172.16.29.0/24 when connected in VPN.this is a problem brcause when I am connected in VPN to ASA I Cannot configure it..Then I Wanted to ask if it is possible a configuration which gives addresses from network 172.16.29.0/24 (the same as inside network) to VPN clients instead of another network (10.1.1.0/24) [code]
View 1 Replies
View Related
May 23, 2011
How to remotely changing ip address for my ASA5505.
View 1 Replies
View Related
Oct 13, 2011
I have a (central) ASA5510 acting as a EasyVPN server and a number of (remote) ASA5505 as EasyVPN client. All the communication works fine between the different networks. The issu is the ASA itself. The remote ASA can ping the central ASA on it's internal IP-adress, but it can't ping any other resoruces at the central network. If I ping the DC at the central network from the remote ASA I get a deny in the central ASA with source address as the public IP-adress of the remote ASA and destination of the internal address of the DC. If I from the remote ASA do "ping inside ip-of-central-dc" it work's like a charm, but "ping ip-of-central-dc" dosen't work.
View 3 Replies
View Related
Feb 27, 2013
I'm having a Issue getting my VPN up from out remote site . We have a ASA5505 at the remote site and the Main office we have a PIX-515E.. I followed this temp config I found on line but Im still not able to get the VPN UP..
This script can be used to get you started on a site to site vpn using the older Cisco PIX code. PIX running 6.3 ! ^^^^ Set ISAKMP (phase 1) parameters ^^^^^ {code]...
When I log into the ASA and run these commands This what I get
Colort2# sh run crypto isakmp
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption 3des
[code]...
View 1 Replies
View Related
Feb 10, 2011
I'm having some troubles with SSLVPN connectivity. I've setup SSLVPN at one site and it works great with web access, file share, RDP plugin etc. at the local LAN on that site. But I also would like to reach another site (connected with an IPSEC tunnel). Is this possible? if it is, how do I do it?Both firewalls are ASA5505, one 8.31 and one 8.22 Just a note, it works to connect with IPSEC client and reach the remote site just fine.
View 8 Replies
View Related
