Hi Adam,
Thanks very much - looking good here too!
Regards
Darren
On 25 October 2017 at 14:12, Adam Armstrong adama@observium.org wrote:
Helpfully, Cisco seem to have changed how they report these numbers. Historically the webvpn count would also include the svc count, so to get webvpn only you'd have to subtract them.
They seem to no longer be doing this, which means the webvc number is being shown as a negative (and on a stacked graph that makes a mess).
There seems to be no good solution to this which doesn't break the graph for someone.
Let assume the historical behaviour was a bug and that it's now fixed. I've removed the maths from the graph type.
adam.
On 2017-10-25 12:36:39, Stef Renders stef.renders@cronos.be wrote:
CISCO-REMOTE-ACCESS-MONITOR-MIB::crasEmailNumSessions.0 = Gauge32: 0 Sessions
CISCO-REMOTE-ACCESS-MONITOR-MIB::crasIPSecNumSessions.0 = Gauge32: 0 Sessions
CISCO-REMOTE-ACCESS-MONITOR-MIB::crasL2LNumSessions.0 = Gauge32: 1 Sessions
CISCO-REMOTE-ACCESS-MONITOR-MIB::crasLBNumSessions.0 = Gauge32: 0 Sessions
CISCO-REMOTE-ACCESS-MONITOR-MIB::crasSVCNumSessions.0 = Gauge32: 64 Sessions
Red is actual anyconnect users, green is site-to-sites, the sslvpn/anyconnect user graph seems to be hidden by the wall of clientless vpn (which is the exact negative amount of sslvpn users)
*Stef Renders*
Cloud Network Engineer
*E*
stef.renders@arxus.eu
[image: cid:image012.jpg@01CECFDD.67D5A5E0] http://www.arxus.eu/
*T*
+32 3 450 67 89 <+32%203%20450%2067%2089>
www.arxus.eu
*P* 'Be green, keep it on the screen. Please think before you print this e-mail.
*From:* observium [mailto:observium-bounces@observium.org observium-bounces@observium.org] *On Behalf Of *Adam Armstrong *Sent:* woensdag 25 oktober 2017 12:03 *To:* observium@observium.org *Subject:* Re: [Observium] Cisco ASA 9.4(3)6 Remote Access Sessions
Err i mean :
snmpwalk -v2c -c <COMMUNITY> -M mibs/rfc:mibs/cisco -m CISCO-REMOTE-ACCESS-MONITOR-MIB <HOSTNAME> crasEmailNumSessions.0 crasIPSecNumSessions.0 crasL2LNumSessions.0 crasLBNumSessions.0 crasSVCNumSessions.0 crasWebvpnNumSessions.0
Changing the hostname and community.
adam.
On 2017-10-25 11:02:44, Adam Armstrong adama@observium.org wrote:
Check the returned data on these devices:
snmpwalk -v2c -c public -M mibs/rfc:mibs/cisco -m CISCO-REMOTE-ACCESS- MONITOR-MIB crasEmailNumSessions.0 crasIPSecNumSessions.0 crasL2LNumSessions.0 crasLBNumSessions.0 crasSVCNumSessions.0 crasWebvpnNumSessions.0
(from inside the observium dir)
adam.
On 2017-10-20 10:41:52, Storer, Darren darren.storer@gmail.com wrote:
Hi Stef,
Did you manage to resolve the ASA VPN session issue mentioned back in March?
The graph below is for AnyConnect (SSL) VPN sessions but seems to display correctly as "Clientless".
[image: Inline images 1]
Thanks for any advice
Darren
On 15 March 2017 at 08:34, Stef Renders stef.renders@cronos.be wrote:
Dear
Just FYI
This started occurring after 9.4.3 release, and still present as of 9.7.1
All releases pre-9.4.3 do not seem to have this issue, and correctly report 0 clientless vpn (when only using anyconnect sslvpn)
Kind regards
*From:* observium [mailto:observium-bounces@observium.org] *On Behalf Of *Richard Reitenauer *Sent:* dinsdag 14 maart 2017 19:43 *To:* observium@observium.org *Subject:* [Observium] Cisco ASA 9.4(3)6 Remote Access Sessions
I am currently using the latest community edition and looking to go to the professional subscription. With a Cisco ASA 9.4(3)6 and graphing the Remote Access Sessions, I am seeing odd data and it looks like others have had the same issue for a couple years now. I attached a screenshot of what I am seeing.
From Cisco CLI – show vpn-sessiondb anyconnect summary:
VPN Session Summary
Active : Cumulative : Peak Concur : Inactive ------------------------------
AnyConnect Client : 96 : 8582 : 101 : 3
SSL/TLS/DTLS : 96 : 8582 : 101 : 3
From Observium interface snapshot is attached.
Is there any fix for this? Also, can we graph per anyconnect group?
Thanks,
Rich Reitenauer
Sr. Infrastructure Analyst
1 Meridian Blvd, Suite 2C01
Wyomissing, PA 19610
O: 610-373-7999 x1255
rreitenauer@ugies.com
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpostman.memetic.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fobservium&data=02%7C01%7CStef.Renders%40arxus.eu%7C91f2d447f8644493259308d51b8fa91a%7C49c3d703357947bfa8887c913fbdced9%7C0%7C0%7C636445226185906125&sdata=P2UFlLQQSKniR2cf%2F3LhKSdIvmhoYf4G2MPi8GVqu8I%3D&reserved=0
_______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/ cgi-bin/mailman/listinfo/observium
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium