Helpfully, Cisco seem to have changed how they report these numbers. Historically the webvpn count would also include the svc count, so to get webvpn only you'd have to subtract them.

They seem to no longer be doing this, which means the webvc number is being shown as a negative (and on a stacked graph that makes a mess).

There seems to be no good solution to this which doesn't break the graph for someone.

Let assume the historical behaviour was a bug and that it's now fixed. I've removed the maths from the graph type.

adam.

On 2017-10-25 12:36:39, Stef Renders <stef.renders@cronos.be> wrote:

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasEmailNumSessions.0 = Gauge32: 0 Sessions

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasIPSecNumSessions.0 = Gauge32: 0 Sessions

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasL2LNumSessions.0 = Gauge32: 1 Sessions

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasLBNumSessions.0 = Gauge32: 0 Sessions

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasSVCNumSessions.0 = Gauge32: 64 Sessions

 

Red is actual anyconnect users, green is site-to-sites, the sslvpn/anyconnect user graph seems to be hidden by the wall of clientless vpn (which is the exact negative amount of sslvpn users)

 

 

Stef Renders

 

Cloud Network Engineer

 

 

E

stef.renders@arxus.eu

cid:image012.jpg@01CECFDD.67D5A5E0

T

+32 3 450 67 89

www.arxus.eu

P  'Be green, keep it on the screen. Please think before you print this e-mail.

 

 

 

From: observium [mailto:observium-bounces@observium.org] On Behalf Of Adam Armstrong
Sent: woensdag 25 oktober 2017 12:03
To: observium@observium.org
Subject: Re: [Observium] Cisco ASA 9.4(3)6 Remote Access Sessions

 

Err i mean : 

 

snmpwalk -v2c -c <COMMUNITY> -M mibs/rfc:mibs/cisco -m CISCO-REMOTE-ACCESS-MONITOR-MIB <HOSTNAME> crasEmailNumSessions.0 crasIPSecNumSessions.0 crasL2LNumSessions.0 crasLBNumSessions.0 crasSVCNumSessions.0 crasWebvpnNumSessions.0

Changing the hostname and community.

 

adam.

On 2017-10-25 11:02:44, Adam Armstrong <adama@observium.org> wrote:

Check the returned data on these devices:

 

snmpwalk -v2c -c public -M mibs/rfc:mibs/cisco -m CISCO-REMOTE-ACCESS-MONITOR-MIB crasEmailNumSessions.0 crasIPSecNumSessions.0 crasL2LNumSessions.0 crasLBNumSessions.0 crasSVCNumSessions.0 crasWebvpnNumSessions.0

 

(from inside the observium dir)

 

adam.

On 2017-10-20 10:41:52, Storer, Darren <darren.storer@gmail.com> wrote:

Hi Stef,

 

Did you manage to resolve the ASA VPN session issue mentioned back in March?

The graph below is for AnyConnect (SSL) VPN sessions but seems to display correctly as "Clientless".

Inline images 1

Thanks for any advice

 

Darren

 

On 15 March 2017 at 08:34, Stef Renders <stef.renders@cronos.be> wrote:

Dear

 

Just FYI

 

This started occurring after 9.4.3 release, and still present as of 9.7.1

 

All releases pre-9.4.3 do not seem to have this issue, and correctly report 0 clientless vpn (when only using anyconnect sslvpn)

 

Kind regards

 

 

From: observium [mailto:observium-bounces@observium.org] On Behalf Of Richard Reitenauer
Sent: dinsdag 14 maart 2017 19:43
To: observium@observium.org
Subject: [Observium] Cisco ASA 9.4(3)6 Remote Access Sessions

 

I am currently using the latest community edition and looking to go to the professional subscription.  With a Cisco ASA 9.4(3)6 and graphing the Remote Access Sessions, I am seeing odd data and it looks like others have had the same issue for a couple years now.  I attached a screenshot of what I am seeing. 

 

From Cisco CLI – show vpn-sessiondb anyconnect summary:

VPN Session Summary

---------------------------------------------------------------------------

                               Active : Cumulative : Peak Concur : Inactive

                             ----------------------------------------------

AnyConnect Client            :     96 :       8582 :         101 :        3

  SSL/TLS/DTLS               :     96 :       8582 :         101 :        3

 

From Observium interface snapshot is attached.

 

Is there any fix for this?  Also, can we graph per anyconnect group?

 

 

Thanks,

Rich Reitenauer

Sr. Infrastructure Analyst

1 Meridian Blvd, Suite 2C01

Wyomissing, PA 19610

O: 610-373-7999 x1255

rreitenauer@ugies.com

 


_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

 

_______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium