Thanks – looks good for me now.
Thanks,
Rich Reitenauer
Sr. Infrastructure Analyst
1 Meridian Blvd, Suite 2C01
Wyomissing, PA 19610
O: 610-373-7999 x1255
From: observium [mailto:observium-bounces@observium.org]
On Behalf Of Adam Armstrong
Sent: Wednesday, October 25, 2017 9:13 AM
To: observium@observium.org
Subject: Re: [Observium] Cisco ASA 9.4(3)6 Remote Access Sessions
Helpfully, Cisco seem to have changed how they report these numbers. Historically the webvpn count would also include the svc count, so to get webvpn only you'd have
to subtract them.
They seem to no longer be doing this, which means the webvc number is being shown as a negative (and on a stacked graph that makes a mess).
There seems to be no good solution to this which doesn't break the graph for someone.
Let assume the historical behaviour was a bug and that it's now fixed. I've removed the maths from the graph type.
adam.
On 2017-10-25 12:36:39, Stef Renders <stef.renders@cronos.be> wrote:
CISCO-REMOTE-ACCESS-MONITOR-MIB::crasEmailNumSessions.0 = Gauge32: 0 Sessions
CISCO-REMOTE-ACCESS-MONITOR-MIB::crasIPSecNumSessions.0 = Gauge32: 0 Sessions
CISCO-REMOTE-ACCESS-MONITOR-MIB::crasL2LNumSessions.0 = Gauge32: 1 Sessions
CISCO-REMOTE-ACCESS-MONITOR-MIB::crasLBNumSessions.0 = Gauge32: 0 Sessions
CISCO-REMOTE-ACCESS-MONITOR-MIB::crasSVCNumSessions.0 = Gauge32: 64 Sessions
Red is actual anyconnect users, green is site-to-sites, the sslvpn/anyconnect user graph seems to be hidden by the wall of clientless vpn (which is the exact negative amount of sslvpn users)
Stef Renders
Cloud Network Engineer
E
T
+32 3 450 67 89
P 'Be green, keep it on the screen. Please think before you print this e-mail.
From: observium [mailto:observium-bounces@observium.org] On Behalf Of Adam Armstrong
Sent: woensdag 25 oktober 2017 12:03
To: observium@observium.org
Subject: Re: [Observium] Cisco ASA 9.4(3)6 Remote Access Sessions
Err i mean :
snmpwalk -v2c -c <COMMUNITY> -M mibs/rfc:mibs/cisco -m CISCO-REMOTE-ACCESS-MONITOR-MIB <HOSTNAME> crasEmailNumSessions.0 crasIPSecNumSessions.0 crasL2LNumSessions.0 crasLBNumSessions.0 crasSVCNumSessions.0 crasWebvpnNumSessions.0
Changing the hostname and community.
adam.
On 2017-10-25 11:02:44, Adam Armstrong <adama@observium.org> wrote:
Check the returned data on these devices:
snmpwalk -v2c -c public -M mibs/rfc:mibs/cisco -m CISCO-REMOTE-ACCESS-MONITOR-MIB crasEmailNumSessions.0 crasIPSecNumSessions.0 crasL2LNumSessions.0 crasLBNumSessions.0 crasSVCNumSessions.0 crasWebvpnNumSessions.0
(from inside the observium dir)
adam.
On 2017-10-20 10:41:52, Storer, Darren <darren.storer@gmail.com> wrote:
Hi Stef,
Did you manage to resolve the ASA VPN session issue mentioned back in March?
The graph below is for AnyConnect (SSL) VPN sessions but seems to display correctly as "Clientless".
Thanks for any advice
Darren
On 15 March 2017 at 08:34, Stef Renders <stef.renders@cronos.be> wrote:
Dear
Just FYI
This started occurring after 9.4.3 release, and still present as of 9.7.1
All releases pre-9.4.3 do not seem to have this issue, and correctly report 0 clientless vpn (when only using anyconnect sslvpn)
Kind regards
From: observium [mailto:observium-bounces@observium.org] On Behalf Of Richard Reitenauer
Sent: dinsdag 14 maart 2017 19:43
To: observium@observium.org
Subject: [Observium] Cisco ASA 9.4(3)6 Remote Access Sessions
I am currently using the latest community edition and looking to go to the professional subscription. With a Cisco ASA 9.4(3)6 and graphing the Remote Access Sessions, I am seeing odd data and it looks like others have had the same issue for a couple years now. I attached a screenshot of what I am seeing.
From Cisco CLI – show vpn-sessiondb anyconnect summary:
VPN Session Summary
---------------------------------------------------------------------------
Active : Cumulative : Peak Concur : Inactive
----------------------------------------------
AnyConnect Client : 96 : 8582 : 101 : 3
SSL/TLS/DTLS : 96 : 8582 : 101 : 3
From Observium interface snapshot is attached.
Is there any fix for this? Also, can we graph per anyconnect group?
Thanks,
Rich Reitenauer
Sr. Infrastructure Analyst
1 Meridian Blvd, Suite 2C01
Wyomissing, PA 19610
O: 610-373-7999 x1255
_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
_______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
