Monitor the OSPF neighbors via snmp

Hello,
I monitor the OSPF neighbors via snmp. On the 3750 it works correctly.
http://www.cisco.com/en/US/tech/tk869/tk769/technologies_white_paper09186a00801177ff.shtml
On 3750X via snmp I do not see that OSPF neighbors in the VRF. How to see through snmp??
I use the IOS C3750E-UNIVERSALK9-M 15.0(2)SE on 3750X
best regard

The solution is to update to 12.2(55)SE5

Similar Messages

Monitor pki certificate status via snmp

I recently discovered that a number of our remote sites could not connect to each other via dmvpn due to various certificate problems.
They could all connect to our hubs due to pre shared keys, so the problem was never discovered before a colleague discovered MM_KEY_EXCH states on some of the routers.
I therefore want to monitor the state of the certificates, preferably via snmp.
I found a nice looking mib,CISCO-PKI-PARTICIPATION-MIB, on http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en&translate=Translate&objectInput=1.3.6.1.4.1.9.9.505
but none of our routers seem to support it, and when you click on "view supporting images", it also specifies: "There is no supporting images available for
CISCO-PKI-PARTICIPATION-MIB"
Do you have any experience on how to monitor certificate status on your Cisco routers?

No real solution. I found that they all needed to connect to one specific router, so I fire off "show crypto isakmp sa | inc MM_KEY_EXCH" on that specific router via our management platform, and receive a mail with the output on a daily basis.

MIBS to Monitor Etherchannel and trunks via SNMP

I would like to monitor the status of etherchannel and trunk configurations in 6500 Catalyst switches running both CATOS and IOS. I would like to understand the specific mibs/OIDS that should be monitored for etherchannels and trunks. I am trying to get a better handle on tracking the etherchannels and trunk dynamically and then understanding when the ports are having issues (up/down and errors). I need to understand how to differentiate these type of ports from regular access ports.
Thanks,
Tim

Hi Tim,
what exactly do you want to query via SNMP?
For an (PAgP) Etherchannel, the member-interfaces might be interesting:
https://supportforums.cisco.com/message/3957914#3957914
For a trunk, you could start with the operational mode, depending on the platform you can use:
vlanTrunkPortDynamicStatus (CISCO-VTP-MIB):
vlanTrunkPortDynamicStatus.49 = notTrunking
vlanTrunkPortDynamicStatus.50 = trunking
vlanPortIslOperStatus (CISCO-STACK-MIB):
vlanPortIslOperStatus.13.43 = notTrunking
vlanPortIslOperStatus.13.44 = trunking
Hope that helps
Rolf

ASA 5512 - monitor power supply status via snmp oid

Device – ASA 5512 running 9.1(1).
Show version:
ASA-1# sh ver
Cisco Adaptive Security Appliance Software Version 9.1(1)
Device Manager Version 6.6(1)
Compiled on Wed 28-Nov-12 11:15 PST by builders
System image file is "disk0:/asa911-smp-k8.bin"
Config file at boot was "startup-config"
ASA-1 up 8 hours 38 mins
Hardware:   ASA5512-K7, 4096 MB RAM, CPU Clarkdale 2792 MHz, 1 CPU (2 cores)
            ASA: 2048 MB RAM, 1 CPU (1 core)
Internal ATA Compact Flash, 4096MB
BIOS Flash MX25L6445E @ 0xffbb0000, 8192KB
Issue: looking for a snmp OID to poll power supply status (Inbuilt Power Supply - no redundant power supply in this scenario). Possibly what we see in show environment.
CSE analysis:
I tried using the OIDs belonging to CISCO-ENTITY-FRU-CONTROL-MIB , like cefcFRUPowerOperStatus and cefcFRUPowerAdminStatus but it didn’t return anything.
NOTE: I have done all the snmp walks from the Linux server. Do I doubt it’s something to do from the snmp manager side.
Couple of observations. The CISCO-ENTITY-FRU-CONTROL-MIB talks about the field replaceable power supplies, so I doubt if it’s going to return the value for inbuilt power supply.
Second, I noticed that there are snmp traps supported for power supply and threshold setting. See configuration below. Is it that only traps works for power supply and environment related details?
Snmpwalk on cefcFRUPowerStatusEntry returns nothing:
[root@tonbenso-eagle bin]# ./snmpwalk -v2c -c public 172.16.169.29 1.3.6.1.4.1.9.9.117.1.1.2.1
SNMPv2-SMI::enterprises.9.9.117.1.1.2.1 = No Such Object available on this agent at this OID
Snmpwalk on cefcFRUPowerOperStatus returns nothing:
[root@tonbenso-eagle bin]# ./snmpwalk -v2c -c public 172.16.169.29 1.3.6.1.4.1.9.9.117.1.1.2.1.2
SNMPv2-SMI::enterprises.9.9.117.1.1.2.1.2 = No Such Instance currently exists at this OID
Snmpwalk on cefcFRUPowerAdminStatus returns nothing:
[root@tonbenso-eagle bin]# ./snmpwalk -v2c -c public 172.16.169.29 1.3.6.1.4.1.9.9.117.1.1.2.1.1
SNMPv2-SMI::enterprises.9.9.117.1.1.2.1.1 = No Such Instance currently exists at this OID
[root@tonbenso-eagle bin]#
login as: root
I tried polling the ciscoEntityFRUControlMIB to see what all values it return. It just returned enterprises.9.9.117.1.3.1.0 = INTEGER: 2. Meaning cefcMIBEnableStatusNotification is FALSE (value 2). Meaning cefcModuleStatusChange, cefcPowerStatusChange, cefcFRUInserted, cefcFRURemoved, cefcUnrecognizedFRU and cefcFanTrayStatusChange are prevented from being sent.
Snmpwalk on ciscoEntityFRUControlMIB
[1]+ Stopped                 ./snmpwalk -v2c -c public 172.16.169.29
[root@tonbenso-eagle bin]# ./snmpwalk -v2c -c public 172.16.169.29 1.3.6.1.4.1.9.9.117
SNMPv2-SMI::enterprises.9.9.117.1.3.1.0 = INTEGER: 2
Object
cefcMIBEnableStatusNotification
OID
1.3.6.1.4.1.9.9.117.1.3.1
Type
TruthValue
Permission
read-write
Status
current
MIB
CISCO-ENTITY-FRU-CONTROL-MIB ; - View Supporting Images
Description
"This variable indicates whether the system
produces the following notifications:
cefcModuleStatusChange, cefcPowerStatusChange,
cefcFRUInserted, cefcFRURemoved,
cefcUnrecognizedFRU and cefcFanTrayStatusChange.
A false value will prevent these notifications
from being generated."
Found couple of bugs:
CSCty32558 – but then this is for 5585 and I see it is fixed in 8.4
CSCul90037 – New state
Show snmp-server oidlist:
http://www-tac.cisco.com/Teams/ks/c3/getLargeFile.php?srId=632222409&fileName=20141030-013905_ASA-show-snmp-server-oidlist.txt
Show tech:
Sh run | in snmp:
ASA-1# sh run | in snmp
snmp-server host asa 172.18.123.228 community *****
no snmp-server location
no snmp-server contact
snmp-server community *****
snmp-server enable traps entity power-supply-presence power-supply-temperature -----à I was talking about this trap above
any help will be appreciated.

Hi
I've got an ASA with redundant power supplies. An ASA5585. So I have the need to monitor them. :-) So how can we do it?
Also I've made a SNMP-Walk through the ASA v8.4(2)8 and it doesn't show up any ENV-MIB values. The
1.3.6.1.4.1.9.9.13 tree is not available. Are you shure it's available on the ASA?
Funny is also that the command "show snmp-server oidlist" from the 8.4 configuration guide is not available on the real CLI. I think the documentation guys were faster than the coders. ;-)
Kind regards
Roberto

How to monitor bandwidth on Catalyst via SNMP?

I've got c3750g with 12.2(55)SE.
When I try ifSpeed (1.3.6.1.2.1.2.2.1.5), i've got 1 peak 999999999 and then only 0. Polling is 1 second.
When I try ifHighSpeed (1.3.6.1.2.1.31.1.1.1.15), I've 0 also.
When I try ifInOctets from snmp-v2 MIB (1.3.6.1.2.1.2.2.1.10), I've got results, but since it summary - my software cannot do calculations and I cant get instant interface bandwidth.
Is there any solutions for catalyst?

Hi,
Are you saying ifSpeed. is changing value from one poll to the next? What kind of interface is it? Sounds like a bug, or an error in polling. Please post the snmpwalk of ifDescr, ifType, and ifSpeed.
For the ifHighSpeed issue, from the IF-MIB entry about that object: "For a sub-layer which has no concept of bandwidth, this object should be zero." Are you polling ifHighSpeed on a sub-layer interface?
Bandwidth utilization is always calculated by taking multiple readings of in or out counters. There will not be a separate counter kept in our snmp agent, when separate values already exist and can be calculated. Thus, since you can use ifSpeed and poll ifInOctets to get the delta, and then calculate the result, our snmp agent will not contain the utilization number.
If you want a graph of bandwidth utilization over time, I would suggest obtaining MRTG. It is available free of charge over the web, just search for MRTG download.
Hope that helps,
Curtis

Monitor SA520 via SNMP

Hi
I have a SA520 configured in load balancing. It is possible to monitor the WAN status via SNMP?
Thanks
Marco

I noticed that Staffan gave a good answer over at Stackoverflow. I'm making a copy of it here if somebody else is searching the forum and would like to know.
"The details are on [this webpage|http://java.sun.com/j2se/1.5.0/docs/guide/management/SNMP.html]. In short, what you have to do is:
* Start with -Dcom.sun.management.snmp.port=portNum
* Copy the ACL template file in JRE_HOME/lib/management/snmp.acl.template to JRE_HOME/lib/management/snmp.acl, and make it readable and writeable by only the owner."

Monitor OSPFv3 via SNMP not working - Is OSPFv3 MIB supported?

I need to be able to query the OSPFv3-MIB via SNMP to track the status of OSPFv3.
I have setup a 3945 router in a test lab network and I have configured it in an Ipv6 network with OSPFv3. The router has an active OSPFv3 neighbor and I can use that neighbor to send/receive data (the routing is working fine). However, when I walk the SNMP MIBs I don't get a response for the OSPFv3-MIB. According to the Cisco SNMP Object Navigator this MIB should be located at 1.3.6.1.3.102.*. Below is an example trying to query a particular OID from the OSPFv3 MIB.
C:\>snmpwalk -v 2c -c public 197.16.18.1 1.3.6.1.3.102.1.5.1.8
SNMPv2-SMI::experimental.102.1.5.1.8 = No Such Object available on this agent at this OID
I can walk other parts of the MIB (For example the OSPFv2 MIB) and get responses, so I know the router has SNMP turned on.
Looking at the Cisco IOS Mib Locator tool (http://tools.cisco.com/ITDIT/MIBS/MainServlet?IMAGE_NAME=c3900-universalk9-mz.SPA.152-4.M3.bin) for the current software version I am running (c3900-universalk9-mz.SPA.152-4.M3.bin) on a 3945 router it claims that the OSPFv3 MIB is supported in this image.
Maybe I need to configure something else? Maybe my SW doesn't really support this MIB? Could it be that I have to query the router over Ipv6 to get the OSPFv3-MIB (I have only been trying Ipv4)?

Hi ,
As Vinod suggested , you need to configure the "SNMP CONTEXT"
Configure:
==========
Basic configuration consists of 4 steps:
Configure mapping between VRF name and SNMP context :
snmp-server vrf <vrf_1> context <context_1>
Create community string corresponding to the VRF :
snmp-server community <vrf_1> RW
Define context string
snmp-server context <context_1>
Configure mapping between context and community:
snmp-server community-map <vrf_1> context <context_1>
(optional) Configure snmp server traps for this VRF community
snmp-server host <IP> traps version 2c <vrf_1>
For e.g:
snmp-server vrf miki
context miki_bgp
snmp-server community miki RW
snmp-server context miki_bgp
snmp-server community-map miki context miki_bgp
Hope it will help
Thanks-
Afroz
***Ratings Encourages Contributors ***

EEM script to monitor OSPF neighbor not working

I'm trying to monitor a OSPF neighbor syslog notification event to trigger actions to remove a network statement. I shut down the interface to the monitored neighbor and it removes the network statement which is good. I am also trying to monitor the neighbor to come back up and then re add the removed network statement which is not working. This may be a two part problem but I am receiving warnings that not enough vty lines are available. I am not seeing that the network addition is working at all. Here is my configuration.
event manager applet ospf-watch-down
event syslog pattern "OSPF-5-ADJCHG: Process 100, Nbr 1.1.1.2 on FastEthernet1/0 from FULL to DOWN"
action 1.0 cli command "enable"
action 2.0 cli command "config t"
action 3.0 cli command "router ospf 100"
action 4.0 cli command "no network 2.2.2.0 0.0.0.255 area 0"
action 5.0 cli command "end"
action 6.0 cli command "exit"
event manager applet ospf-watch-up
event syslog pattern "OSPF-5-ADJCHG: Process 100, Nbr 1.1.1.1 on FastEthernet1/0 from LOADING to FULL"
action 1.0 cli command "enable"
action 2.0 cli command "config t"
action 3.0 cli command "router ospf 100"
action 4.0 cli command "network 2.2.2.0 0.0.0.255 area 0"
action 5.0 cli command "end"
action 6.0 cli command "exit"
Here is the EM syslog error message " %HA_EM-3-FMPD_ERROR: Error executing applet ospf-watch-down statement 3.0" I am having the EM end and exit so I'm not sure why it's running out of CLI sessions. I'm also getting this one too " %HA_EM-3-FMPD_CLI_CONNECT: Unable to establish CLI session: no tty lines available, minimum of 2 required by EEM"
I've tested the ospf-watch-up and ospf-watch-down on its own after clearing all of the sessions and they each work on their own. I think this is a bug where eem won't release the session.
R1#show users
Line User Host(s) Idle Location
* 0 con 0 idle 00:00:00
130 vty 0 idle 00:02:13 EEM:ospf-watch-up
131 vty 1 idle 00:00:10 EEM:ospf-watch-up
132 vty 2 idle 00:00:28 EEM:ospf-watch-down
Interface User Mode Idle Peer Address
R1#

I know this is a old post. I was able to use the solution below, but I am having one problem.
Using the below config I am able to receive a email anytime my voice port is in any other state than ON HOOK. The problem I have is the script runs every 30 seconds and I receive an email every 30 seconds the line is in any other state than "ON-HOOK".
Is there a way to have only one email generated ONLY when the state changes from the previous state?
example : the line is on-hook, changes to off-hook or park or whatever- a email would be generated. ( only One email). not one every 30 seconds...
The line goes from Off-Hook back to IDLE. - A email would be generated to advise the line has been restored to a IDLE state.
scheduler allocate 20000 1000
event manager environment _email_from [email protected]
event manager environment _email_to email [email protected]
event manager environment _email_server smtp-server.isp.net
event manager applet check_1/0/0_if_NOT_ONHOOK
event timer watchdog time 30
action 001 cli command "enable"
action 002 cli command "show voice port summ | include 1/0/0"
action 003 foreach line "$_cli_result" "\n"
action 004 regexp "on-hook" "$line"
action 005 if $_regexp_result eq "1"
action 006 exit 0
action 007 end
action 008 end
action 009 syslog msg "PORT_1_is_in_any_other_state_then_on-HooK!"
action 1.0 mail server "$_email_server" to "$_email_to" from "$_email_from" subject "$_event_pub_time:Test EEM port 1/0/0 is SHORTED ie IN ALARM" body "TEST Body"
end
Any ideas?

Port counters via snmp on WRVS4400N

Hi.
I'm using SNMP to read the packet and byte counters on each port on my WRVS4400N. However, I just can't figure out what interface is what port. Also, can I see the total traffic on all ports together as well as the wireless traffic via snmp, which I can see in the web admin interface?
An snmpwalk gives me the following interfaces:
IF-MIB::ifDescr.1 lo
IF-MIB::ifDescr.2 eth0
IF-MIB::ifDescr.3 eth1
IF-MIB::ifDescr.4 eth2
IF-MIB::ifDescr.5 teql0
IF-MIB::ifDescr.6 sit0
IF-MIB::ifDescr.7 tunl0
IF-MIB::ifDescr.8 gre0
IF-MIB::ifDescr.9 ipsec0
IF-MIB::ifDescr.10 ipsec1
IF-MIB::ifDescr.11 ipsec2
IF-MIB::ifDescr.12 ipsec3
IF-MIB::ifDescr.13 br0
I have equipment connected to LAN port 1, 2 and 4 as well as wifi clients. And on the WAN port of course. This is what I get in terms of traffic via snmp (only listing ifInOctets here)
IF-MIB::ifInOctets.1 13454252
IF-MIB::ifInOctets.2 1112133396
IF-MIB::ifInOctets.3 1436498580
IF-MIB::ifInOctets.4 11981231
IF-MIB::ifInOctets.5 0
IF-MIB::ifInOctets.6 0
IF-MIB::ifInOctets.7 0
IF-MIB::ifInOctets.8 0
IF-MIB::ifInOctets.9 0
IF-MIB::ifInOctets.10 0
IF-MIB::ifInOctets.11 0
IF-MIB::ifInOctets.12 0
IF-MIB::ifInOctets.13 1080353959
Any ideas here is appreciated. Thanks.
/Thomas

The RFC1213 Management Information Base for Network Management of TCP/IP-based internets: MIB-II describe the ifDescr value as:
ifDescr OBJECT-TYPE
              SYNTAX DisplayString (SIZE (0..255))
              ACCESS read-only
              STATUS mandatory
              DESCRIPTION
                      "A textual string containing information about the interface. This string should include the name of the manufacturer, the product name and the version of the hardware interface."
There is no standard values for the interface description and you will have to guess from the given name and device caractheristic.
You can also check the OID .1.3.6.1.2.1.2.2.1.3 ifType that can give you a better idea about what it is.
From what you sent we can guess that:
eth0-2 are three Ethernet Interface. But where is the 4th Ethernet interface? Probably it has another name
telq0 should be a load balancing or agregating virtual interface, I guess used for the QoS supported by the router
ipsec0-3 maybe the virtual interface for the ipsec traffic
tunl0 probably the VPN virtual interface
For the reste... you will have to dig a little
I hope this help
Minds are like parachutes, they only function when they are open

Shutdown wireless interface via SNMP Write?

Hi
We're working on writing a very simple web app to control a couple of access points via SNMP. I'm trying to shutdown the Wireless interface via SNMP WRITE with the following oid;
.1.3.6.1.2.1.2.2.1.7.1
and
.1.3.6.1.2.1.2.2.1.7.2
But its saying the integer of '0' is invalid (badValue, wrong type or length). I'm able to set other values like hostname, etc, so I know my string is correct...can anyone help? THanks
Jason

Hi
Just found my own answer...the value to shutdown the interface is not 0, it's 2. durrr
Thanks
J

Xlate count via SNMP on a ASA

Hi
Does anyone know of af OID to get the count of active xlate´s per PAT IP address?
I have a firewall that is performing PAT on several IPs that is defined via object. I need to find a way to get the ammount of xlates on a "per public IP" level.
I know that i can get the "show conn" via SNMP but this is all the connections globally to the ASA and not on a per-PAT bases.
So far the only way i have managed to get something out of the ASA is to do a "show xlate | inc [PUBLIC-IP]" and then count the lines.

Those don't seem to be supported in ASA 9.x... not in "show snmp-server oidlist".
natAddrMapAddrUsed might be what you're looking for... but, if you have multiple sources NATed to the same destination, finding the appropriate entry in that table will take some doing.

Monitor the # of registered AP's on a 2504 via SNMP?

Does anyone know the OID to determine the number of registered AP's on a WLC (specifically the AIR-CT2504).
I've got both of the Airespace MIBs and have browsed through them but I can't seem to find the correct location. I can find a list of all of the AP's registered but our monitoring software doesn't have the ability to 'count' that index. As such, I'm looking for a count/summation of the total number of registered AP's via SNMP.
Thanks!
Brian

It's an old post, but I had the same question. After some research I found a simple answer...
Use this OID: .1.3.6.1.4.1.9.9.618.1.8.4.0
If you want to also get the total number of Clients, use: .1.3.6.1.4.1.9.9.618.1.8.12.0
It does not work on 7.0 - it does on 7.6 and 8.0.
Best regards
Christoph

How do I get the Username of an AnyConnect VPN session via SNMP?

I would like to monitor the usernames of my AnyConnect sessions via SNMP. This will allow me to monitor, graph, report, and alert using Solarwinds Orion (or any other SNMP software).
I would like to monitor this on my ASA 5520. I have run the show snmp-server oidlist command and I can see all of the OID's that I can poll. However, the OID I would like to poll crasUsername (1.3.6.1.4.1.9.9.392.1.3.21.1.1) is not working.
Does anyone know how I can monitor the username of a AnyConnect session via SNMP?
Below is a link to a great MIB reference for ASA Remote Access Monitor OID list.
http://www.mibdepot.com/cgi-bin/getmib3.cgi?i=1&n=CISCO-REMOTE-ACCESS-MONITOR-MIB&r=cisco&f=CISCO-REMOTE-ACCESS-MONITOR-MIB.my&v=v2&t=tree

Hello PDX,
Welcome to the HP Support Forums!
To get your issue more exposure I would suggest posting it in the commercial forums since this is a commercial product. You can do this at Commercial Forums.
Regards,
JERENDS
I work on behalf of HP
Please click “Accept as Solution” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos Thumbs Up" to the left of the reply button to say “Thanks” for helping!

Monitor JRockit via SNMP

I would like to monitor my Java application (running in JRockit) via SNMP protocol. I only need some basic informations. Is there any startup parameter that I can add to my app to enable SNMP?

I noticed that Staffan gave a good answer over at Stackoverflow. I'm making a copy of it here if somebody else is searching the forum and would like to know.
"The details are on [this webpage|http://java.sun.com/j2se/1.5.0/docs/guide/management/SNMP.html]. In short, what you have to do is:
* Start with -Dcom.sun.management.snmp.port=portNum
* Copy the ACL template file in JRE_HOME/lib/management/snmp.acl.template to JRE_HOME/lib/management/snmp.acl, and make it readable and writeable by only the owner."

Is the LG 22EN33S-B 22-inch LED 1920 x 1080 VGA Monitor compatible with mac via a vga to thunderbolt connection

Is the LG 22EN33S-B 22-inch LED 1920 x 1080 VGA Monitor compatible with mac via a vga to thunderbolt adapter?

The 1080p and 1080i options only appear on the HDMI display settings, the display settings for the thunderbolt to vga adaptor has 1920 x 1080.
Via the HDMI output of the Mini via an HDMI cable to a HDMI input on the Samsung the display fills the screen but the text looks vile.
The options for picture adjustement on the samsung include fill screen as you suggest
Using the thunderbolt to VGA adaptor the text looks as it should, crisp and clear but the display is shitfted to the right.
The options for picture adjustment on the Samsung does not have the 'fill screen' option available when the VGA input is selected. However a new option called 'pc screen adjustment' appears and you can nudge the display over to the left a bit but not enough to cover the whole screen.
I remind you the pc worked perfectly 1920 x 1080 on the same VGA cable and input to the samsung.

Monitor the OSPF neighbors via snmp

Similar Messages

Maybe you are looking for