Cisco ASA 8.3 IPsec Graphing issues
Hi
I have two ASA's I graph in observium , one running 8.2(5) and the other 8.3.
The issue I have is that on 8.2(5) the IPsec tunnel graphs all work 100% and everything is picked up but when trying to query the 8.3 version I get no graphs for the ipsec tunnel graphs. Is there anything specific I need to do to get the 8.3 ipsec tunnel graphs working ?
Thanks
Mike
############################################################################################# The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.
Furthermore, the information contained in this message, and any attachments thereto, is for information purposes only and may contain the personal views and opinions of the author, which are not necessarily the views and opinions of the company. #############################################################################################
Hello, I have the same problem with my ASA5545 running 9.1 I only get Remote Access Sessions and Firewall Sessions. On my ASA5520 with 8.4 I get a lot more IPSec graphs.
/Markus
2015-02-10 12:03 GMT+01:00 Michael Poezyn Michael.Poezyn@derivco.com:
Hi
I have two ASA’s I graph in observium , one running 8.2(5) and the other 8.3.
The issue I have is that on 8.2(5) the IPsec tunnel graphs all work 100% and everything is picked up but when trying to query the 8.3 version I get no graphs for the ipsec tunnel graphs. Is there anything specific I need to do to get the 8.3 ipsec tunnel graphs working ?
Thanks
Mike
- ------------------------------ *
*The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.*
*Furthermore, the information contained in this message, and any attachments thereto, is for information purposes only and may contain the personal views and opinions of the author, which are not necessarily the views and opinions of the company.*
- ------------------------------ *
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
Hi, My IPsec graphs work on ASA5510 8.2(1) but the tunnels all show as ACTIVE when they are mostly NOT
Regards, Daniel
On Wed, Feb 11, 2015 at 1:01 AM, Markus Klock markus@best-practice.se wrote:
Hello, I have the same problem with my ASA5545 running 9.1 I only get Remote Access Sessions and Firewall Sessions. On my ASA5520 with 8.4 I get a lot more IPSec graphs.
/Markus
2015-02-10 12:03 GMT+01:00 Michael Poezyn Michael.Poezyn@derivco.com:
Hi
I have two ASA’s I graph in observium , one running 8.2(5) and the other 8.3.
The issue I have is that on 8.2(5) the IPsec tunnel graphs all work 100% and everything is picked up but when trying to query the 8.3 version I get no graphs for the ipsec tunnel graphs. Is there anything specific I need to do to get the 8.3 ipsec tunnel graphs working ?
Thanks
Mike
- ------------------------------ *
*The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.*
*Furthermore, the information contained in this message, and any attachments thereto, is for information purposes only and may contain the personal views and opinions of the author, which are not necessarily the views and opinions of the company.*
- ------------------------------ *
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
Okay so it does appear that a few people have the same issues
Does anyone have any ideas how I can debug this or if there are any specific logs I could look at to understand why it is not picking up the IPsec tunnel information and therefore not graphing it ?
Any help would be really appreciated
Thanks
_____________________________________________ From: Michael Poezyn Sent: Tuesday, February 10, 2015 1:04 PM To: observium@observium.org Subject: Cisco ASA 8.3 IPsec Graphing issues
Hi
I have two ASA's I graph in observium , one running 8.2(5) and the other 8.3.
The issue I have is that on 8.2(5) the IPsec tunnel graphs all work 100% and everything is picked up but when trying to query the 8.3 version I get no graphs for the ipsec tunnel graphs. Is there anything specific I need to do to get the 8.3 ipsec tunnel graphs working ?
Thanks
Mike
############################################################################################# The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.
Furthermore, the information contained in this message, and any attachments thereto, is for information purposes only and may contain the personal views and opinions of the author, which are not necessarily the views and opinions of the company. #############################################################################################
I can only add that Observium appears to be getting the correct numbers from my two systems running 9.2(3) and 9.3(2). There are some odd graphing issues though; Clientless VPN are reported in the Curr/Avg/Max legend as a negative number, but graphed on a positive axis - and looking at the snmpwalk output for 1.3.6.1.4.1.9.9.392.1.3, there are not negative numbers reported. Based on the numbers that I'm seeing as well, the SSLVPN tunnels are being graphed with the Clientless VPN color and Clientless VPN is being graphed with SSLVPN's color.
Not sure if the mailing list allows attachments, but I've attached a screen grab of the graph for reference.
Observium 0.14.12.6148 OS Linux 3.13.0-45-generic [amd64] (Ubuntu 12.04) Apache 2.2.22 (Ubuntu) PHP 5.4.37-1+deb.sury.org~precise+1 MySQL 5.5.41-0ubuntu0.12.04.1 SNMP NET-SNMP 5.4.3 RRDtool 1.4.7
On Wed, Feb 11, 2015 at 4:45 AM, Michael Poezyn Michael.Poezyn@derivco.com wrote:
Okay so it does appear that a few people have the same issues
Does anyone have any ideas how I can debug this or if there are any specific logs I could look at to understand why it is not picking up the IPsec tunnel information and therefore not graphing it ?
Any help would be really appreciated
Thanks
*From:* Michael Poezyn *Sent:* Tuesday, February 10, 2015 1:04 PM *To:* observium@observium.org *Subject:* Cisco ASA 8.3 IPsec Graphing issues
Hi
I have two ASA’s I graph in observium , one running 8.2(5) and the other 8.3.
The issue I have is that on 8.2(5) the IPsec tunnel graphs all work 100% and everything is picked up but when trying to query the 8.3 version I get no graphs for the ipsec tunnel graphs. Is there anything specific I need to do to get the 8.3 ipsec tunnel graphs working ?
Thanks
Mike
- ------------------------------ *
*The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.*
*Furthermore, the information contained in this message, and any attachments thereto, is for information purposes only and may contain the personal views and opinions of the author, which are not necessarily the views and opinions of the company.*
- ------------------------------ *
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
This is because the devices don't actually report these values, and we have to calculate them from other numbers.
Just as with the graphs ceasing to work at all in 10.x, it seems that somewhere in 9.x they started reporting these numbers differently such that the calculation no longer works.
Welcome to dealing with vendor SNMP bullshit.
adam. On 12/02/2015 02:01:01, Kevin Jacobson kevin@kjake.net wrote: I can only add that Observium appears to be getting the correct numbers from my two systems running 9.2(3) and 9.3(2). There are some odd graphing issues though; Clientless VPN are reported in the Curr/Avg/Max legend as a negative number, but graphed on a positive axis - and looking at the snmpwalk output for 1.3.6.1.4.1.9.9.392.1.3, there are not negative numbers reported. Based on the numbers that I'm seeing as well, the SSLVPN tunnels are being graphed with the Clientless VPN color and Clientless VPN is being graphed with SSLVPN's color.
Not sure if the mailing list allows attachments, but I've attached a screen grab of the graph for reference.
Observium 0.14.12.6148 OS Linux 3.13.0-45-generic [amd64] (Ubuntu 12.04) Apache 2.2.22 (Ubuntu) PHP 5.4.37-1+deb.sury.org [http://deb.sury.org%5D~precise+1 MySQL 5.5.41-0ubuntu0.12.04.1 SNMP NET-SNMP 5.4.3 RRDtool 1.4.7
On Wed, Feb 11, 2015 at 4:45 AM, Michael Poezyn <Michael.Poezyn@derivco.com [mailto:Michael.Poezyn@derivco.com]> wrote:
Okay so it does appear that a few people have the same issues Does anyone have any ideas how I can debug this or if there are any specific logs I could look at to understand why it is not picking up the IPsec tunnel information and therefore not graphing it ? Any help would be really appreciated Thanks _____________________________________________ From: Michael Poezyn Sent: Tuesday, February 10, 2015 1:04 PM To: observium@observium.org [mailto:observium@observium.org] Subject: Cisco ASA 8.3 IPsec Graphing issues Hi I have two ASA’s I graph in observium , one running 8.2(5) and the other 8.3. The issue I have is that on 8.2(5) the IPsec tunnel graphs all work 100% and everything is picked up but when trying to query the 8.3 version I get no graphs for the ipsec tunnel graphs. Is there anything specific I need to do to get the 8.3 ipsec tunnel graphs working ? Thanks
Mike The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer. Furthermore, the information contained in this message, and any attachments thereto, is for information purposes only and may contain the personal views and opinions of the author, which are not necessarily the views and opinions of the company.
_______________________________________________ observium mailing list observium@observium.org [mailto:observium@observium.org] http://postman.memetic.org/cgi-bin/mailman/listinfo/observium [http://postman.memetic.org/cgi-bin/mailman/listinfo/observium]
_______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
participants (5)
-
Adam Armstrong -
Daniel Rolfe -
Kevin Jacobson -
Markus Klock -
Michael Poezyn