The ASA’s use UDP 162 for SNMP, for whatever brilliant reason.

 

Just flip that when you are adding the device and all should be well.

 

We have a pair of 5520’s that get monitored just fine.

 

From: observium [mailto:observium-bounces@observium.org] On Behalf Of Erik INGEBERG
Sent: Tuesday, February 18, 2014 8:47 AM
To: observium@observium.org
Subject: [Observium] Unable to add standby Cisco ASA

 

Hi,

 

I’m trying to add the standby Cisco ASA firewalls we have in our active/standby failover pairs. I am able to add our ASA-SM (ASA service modules), but not the “normal” ASA’s or PIX firewalls.

 

Unfortunately, a Cisco ASA failover pair shares the same “sysName” and “snmpEngineID”. This is not configurable on the ASA firewalls.

 

When I try to add a standby ASA (with a different hostname / IP address) I get the following error: Already got device with SNMP-read sysName (xxxxxxxxxxx) and 'snmpEngineID' = xxxxxxxxxxx (xxxxxxxxxxx). I see that this is because of a check in “functions.php”.

 

Is there any workaround you can think of to allow us to add the standby devices? It is essential for us to monitor them, and we were also hoping to use Observium as our hardware inventory database (which is now missing all standby ASA’s).

 

Regards, Erik



_______________________________________________________________

NOTICE TO PERSONS SUBJECT TO UNITED STATES TAXATION (MCPS)

DISCLOSURE UNDER TREASURY CIRCULAR 230: The United States Federal tax advice, if any, contained in this document and its attachments may not be used or referred to in the promoting, marketing or recommending of any entity, investment plan or arrangement, nor is such advice intended or written to be used, and may not be used, by a taxpayer for the purpose of avoiding Federal tax penalties.
_______________________________________________________________