CISCO-REMOTE-ACCESS-MONITOR-MIB
File:
CISCO-REMOTE-ACCESS-MONITOR-MIB.mib (74519 bytes)
Imported modules
Imported symbols
Defined Types
RasProtocol |
|
The protocol immediately underlying the remote
access session.
The value 'other' has been listed to allow for the
MIB to be supported on proprietary protocols not
listed here.
|
TEXTUAL-CONVENTION |
|
|
|
|
INTEGER |
other(1), ipsec(2), l2tp(3), l2tpoveripsec(4), pptp(5), l2f(6), ssl(7) |
|
UserAuthenMethod |
|
The mechanism used to authenticate the user.
The value 'other' has been listed to allow for the
MIB to support proprietary authentication methods
not listed here.
|
TEXTUAL-CONVENTION |
|
|
|
|
INTEGER |
none(1), other(2), radius(3), tacacsplus(4), kerberos(5), local(6), ldap(7), ntlm(8), sdi(9) |
|
UserAuthorMethod |
|
The mechanism used to authorize the user.
The value 'other' has been listed to allow for the
MIB to support proprietary authorization mechanisms
not listed here.
|
TEXTUAL-CONVENTION |
|
|
|
|
INTEGER |
none(1), other(2), radius(3), tacacsplus(4), kerberos(5), local(6), ldap(7) |
|
SessionEncrAlgo |
|
The encryption algorithm used to secure the remote
access session.
|
TEXTUAL-CONVENTION |
|
|
|
|
INTEGER |
none(1), des(2), des3(3), rc4(4), rc5(5), idea(6), cast(7), blowfish(8), aes(9) |
|
SessionAuthAlgo |
|
The authentication algorithm used by to perform
packet authentication in the remote access session.
The value 'other' has been listed to allow for the
MIB to support packet validation algorithms not
listed here.
|
TEXTUAL-CONVENTION |
|
|
|
|
INTEGER |
none(1), other(2), hmacMd5(3), hmacSha(4) |
|
SessionCompressionAlgo |
|
The compression algorithm used in the remote access
session.
The value 'other' has been listed to allow for the
MIB to support compression not listed here.
|
TEXTUAL-CONVENTION |
|
|
|
|
INTEGER |
none(1), other(2), lzs(3) |
|
SessionStatus |
|
The status of a remote access session.
initializing: the session is in the process
of being established
established : the session is established and
is ready to carry application
traffic. Sessions in this state
may also be referred to as
'active' sessions.
terminating : the session is in the process
of termination.
Objects of this type may be used to terminate an
established session by setting value of the object
to terminating(3).
Management entity may not write values initializing(1)
or established(2) onto objects of this type. Doing so
would cause the managed entity to return an error
condition.
|
TEXTUAL-CONVENTION |
|
|
|
|
INTEGER |
initializing(1), established(2), terminating(3) |
|
CrasSessionEntry |
|
SEQUENCE |
|
|
|
|
crasUsername |
SnmpAdminString |
|
|
crasGroup |
SnmpAdminString |
|
|
crasSessionIndex |
SessionIndex |
|
|
crasAuthenMethod |
UserAuthenMethod |
|
|
crasAuthorMethod |
UserAuthorMethod |
|
|
crasSessionDuration |
Counter32 |
|
|
crasLocalAddressType |
InetAddressType |
|
|
crasLocalAddress |
InetAddress |
|
|
crasISPAddressType |
InetAddressType |
|
|
crasISPAddress |
InetAddress |
|
|
crasSessionProtocol |
RasProtocol |
|
|
crasProtocolElement |
OBJECT IDENTIFIER |
|
|
crasSessionEncryptionAlgo |
SessionEncrAlgo |
|
|
crasSessionPktAuthenAlgo |
SessionAuthAlgo |
|
|
crasSessionCompressionAlgo |
SessionCompressionAlgo |
|
|
crasHeartbeatInterval |
Unsigned32 |
|
|
crasClientVendorString |
SnmpAdminString |
|
|
crasClientVersionString |
SnmpAdminString |
|
|
crasClientOSVendorString |
SnmpAdminString |
|
|
crasClientOSVersionString |
SnmpAdminString |
|
|
crasPrimWINSServerAddrType |
InetAddressType |
|
|
crasPrimWINSServer |
InetAddress |
|
|
crasSecWINSServerAddrType |
InetAddressType |
|
|
crasSecWINSServer |
InetAddress |
|
|
crasPrimDNSServerAddrType |
InetAddressType |
|
|
crasPrimDNSServer |
InetAddress |
|
|
crasSecDNSServerAddrType |
InetAddressType |
|
|
crasSecDNSServer |
InetAddress |
|
|
crasDHCPServerAddrType |
InetAddressType |
|
|
crasDHCPServer |
InetAddress |
|
|
crasSessionInPkts |
Counter64 |
|
|
crasSessionOutPkts |
Counter64 |
|
|
crasSessionInDropPkts |
Counter64 |
|
|
crasSessionOutDropPkts |
Counter64 |
|
|
crasSessionInOctets |
Counter64 |
|
|
crasSessionOutOctets |
Counter64 |
|
|
crasSessionState |
SessionStatus |
|
CrasActGroupEntry |
|
SEQUENCE |
|
|
|
|
crasActGrpName |
SnmpAdminString |
|
|
crasActGrNumUsers |
Integer32 |
|
|
crasActGrpInPkts |
Counter64 |
|
|
crasActGrpOutPkts |
Counter64 |
|
|
crasActGrpInDropPkts |
Counter64 |
|
|
crasActGrpOutDropPkts |
Counter64 |
|
|
crasActGrpInOctets |
Counter64 |
|
|
crasActGrpOutOctets |
Counter64 |
|
CrasSessFailEntry |
|
SEQUENCE |
|
|
|
|
crasSessFailIndex |
FailureRecordIndex |
|
|
crasSessFailUsername |
SnmpAdminString |
|
|
crasSessFailGroupname |
SnmpAdminString |
|
|
crasSessFailType |
INTEGER |
|
|
crasSessFailReason |
INTEGER |
|
|
crasSessFailTime |
TimeStamp |
|
|
crasSessFailSessionIndex |
SessionIndex |
|
|
crasSessFailISPAddrType |
InetAddressType |
|
|
crasSessFailISPAddr |
InetAddress |
|
|
crasSessFailLocalAddrType |
InetAddressType |
|
|
crasSessFailLocalAddr |
InetAddress |
|
CrasGrpFailEntry |
|
SEQUENCE |
|
|
|
|
crasGrpFailGroupname |
SnmpAdminString |
|
|
crasGrpFailNumFailAuths |
Counter64 |
|
|
crasGrpFailNumResourceFailures |
Counter64 |
|
|
crasGrpFailNumDeclined |
Counter64 |
|
|
crasGrpFailNumTerminatedMgmt |
Counter64 |
|
|
crasGrpFailNumTerminatedOther |
Counter64 |
|
Defined Values
ciscoRemoteAccessMonitorMIB |
1.3.6.1.4.1.9.9.392 |
Acronyms and Definitions
The following acronyms and terms are used in this
document:
IPSec: Secure IP Protocol
VPN: Virtual Private Network
RAS: Remote Access Service
ISP: Internet Service Provider.
LAN: Local Area Network
Group: A collection of remote access users grouped
and managed together as a single entity for
administrative convenience.
Session: A Remote Access Session.
SVC: SSL VPN Client
Webvpn: VPN connection established using web browser.
Overview of the MIB
This is a MIB Module for monitoring the structures in Virtual
Private Networks based remote access networks. The MIB seeks
to create a common model of Remote Access across implementations
of the service on layer 2 (PPTP, L2TP, L2F), layer 3 (IPsec) and
layer 4 (SSL) virtual private networks. The MIB defines counters
and objects of interest to performance/fault monitoring in a
way which is independent of the technology of the remote access
implementation.
MIB contains eight major groups of objects which are used
to manage Remote Access connections:
a) Remote Access capacity group
This section defines metrics to gauge the limits of
resources on this device which are critical to RAS
service.
b) Remote Access resource usage group
This section defines metrics to gauge the usage of
resources on this device which are critical to RAS
service service.
c) Current activity and performance of RAS service
This section defines metrics to gauge the current
remote access activity.
d) Remote Access Service failures
This section defines metrics to monitor session
failures and failures of the service itself, measured
at aggregate level, session level and group level.
e) Security violations in the Remote Access service
This section defines metrics which reflect the state
of remote access service of interest to Security
Operations staff in an enterprise.
f) Threshold group (allows definition of high water marks)
This section allows the management entity to define
thresholds to set high water marks on critical metrics.
g) Notifications
This section defines notifications to signal
significant events pertaining to the Remote Access
Service.
|
MODULE-IDENTITY |
|
|
|
crasMaxSessionsSupportable |
1.3.6.1.4.1.9.9.392.1.1.1 |
The maximum number of remote access sessions
that may be supported on this device.
If the device imposes no arbitrary limit on the
maximum number of sessions, it should return a
value of 0. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..2147483647 |
|
crasMaxGroupsSupportable |
1.3.6.1.4.1.9.9.392.1.1.3 |
The maximum number of remote access groups
that may be defined on this device. 'Group'
refers to a collection of users grouped together
for administrative convenience.
If the device imposes no arbitrary limit on
the maximum number of groups, it should return
a value of 0. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..2147483647 |
|
crasNumCryptoAccelerators |
1.3.6.1.4.1.9.9.392.1.1.4 |
The maximum number of hardware crypto accelerators
which can be installed on this device to support
remote access sessions. 'cryptoaccelerator' denotes
a hardware/software entity which the managed entity
uses to offload some or all computations pertaining
to cryptographic operations.
If the device imposes no arbitrary limit on the
number of crypto accelerators to support Remote Access
function, it should return a value of 0. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..2147483647 |
|
crasGlobalBwUsage |
1.3.6.1.4.1.9.9.392.1.2.1 |
The average bandwidth used by all the active
remote access sessions. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Gauge32 |
|
|
crasNumSessions |
1.3.6.1.4.1.9.9.392.1.3.1 |
The number of currently active sessions.
A session is a connection terminating on the managed
entity which has been established to provide remote
access connectivity to a user. A session is said to be
'active' if it is ready to carry application traffic
between the user and the managed entity. A session which
is not active is defined to be 'dormant'.
|
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Gauge32 |
|
|
crasNumPrevSessions |
1.3.6.1.4.1.9.9.392.1.3.2 |
The number of remote access sessions which were
previously active but which where since terminated.
Measured since the last reboot of the device. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
crasNumUsers |
1.3.6.1.4.1.9.9.392.1.3.3 |
The number of users who have active sessions.
|
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Gauge32 |
|
|
crasNumGroups |
1.3.6.1.4.1.9.9.392.1.3.4 |
The number of user groups whose members have
active sessions. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Gauge32 |
|
|
crasGlobalInPkts |
1.3.6.1.4.1.9.9.392.1.3.5 |
The total number of packets received by all
currently and previously active remote access
sessions. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasGlobalOutPkts |
1.3.6.1.4.1.9.9.392.1.3.6 |
The total number of packets transmitted by all
currently and previously active remote access
sessions. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasGlobalInOctets |
1.3.6.1.4.1.9.9.392.1.3.7 |
The total number of octets received by all currently
and previously active remote access sessions.
This value is accumulated BEFORE determining whether
or not the packet should be decompressed.
|
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasGlobalInDecompOctets |
1.3.6.1.4.1.9.9.392.1.3.8 |
The total number of decompressed octets received
by all current and previous remote access sessions.
This value is accumulated AFTER the packet is
decompressed. If compression is not being used,
this value will match the value of crasGlobalInOctets.
|
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasGlobalOutOctets |
1.3.6.1.4.1.9.9.392.1.3.9 |
The total number of octets transmitted by all
currently and previously active remote access
sessions.
This value is accumulated AFTER determining
whether or not the packet should be compressed.
|
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasGlobalOutUncompOctets |
1.3.6.1.4.1.9.9.392.1.3.10 |
The total number of uncompressed octets sent
by all current and previous remote access sessions.
This value is accumulated BEFORE the packet is
compressed. If compression is not being used, this
value will match the value of crasGlobalOutOctets.
|
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasGlobalInDropPkts |
1.3.6.1.4.1.9.9.392.1.3.11 |
The total number of packets which were dropped
during receive processing by all currently and
previously active remote access sessions. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasGlobalOutDropPkts |
1.3.6.1.4.1.9.9.392.1.3.12 |
The total number of packets which were
dropped during receive processing by all
currently and previously active remote access
sessions. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasSessionTable |
1.3.6.1.4.1.9.9.392.1.3.21 |
This table lists all the currently active sessions.
For each session, it lists the attributes (user,
group, protocol, security), statistics (packet and
octets) and status. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
CrasSessionEntry |
|
crasSessionEntry |
1.3.6.1.4.1.9.9.392.1.3.21.1 |
Each entry contains the attributes, statistics and
status of an active session. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
CrasSessionEntry |
|
|
crasUsername |
1.3.6.1.4.1.9.9.392.1.3.21.1.1 |
The name of the user associated with this remote
access session. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SnmpAdminString |
Size(0..128) |
|
crasGroup |
1.3.6.1.4.1.9.9.392.1.3.21.1.2 |
The name of the user group to which this remote
access session belongs. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
SnmpAdminString |
|
|
crasSessionIndex |
1.3.6.1.4.1.9.9.392.1.3.21.1.3 |
Unique index to distinguish between multiple
Remote Access Sessions associated with the same
user.
The value of crasSessionIndex must increase monotonically
till it wraps. An implementation may choose to wrap this
index before the value of 2147483647.
|
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SessionIndex |
|
|
crasAuthenMethod |
1.3.6.1.4.1.9.9.392.1.3.21.1.4 |
The method used to authenticate the user prior to
establishing the session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
UserAuthenMethod |
|
|
crasAuthorMethod |
1.3.6.1.4.1.9.9.392.1.3.21.1.5 |
The method used to authorize the user prior to
establishing the session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
UserAuthorMethod |
|
|
crasSessionDuration |
1.3.6.1.4.1.9.9.392.1.3.21.1.6 |
The number of seconds elapsed since this session
was established. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
crasLocalAddress |
1.3.6.1.4.1.9.9.392.1.3.21.1.8 |
The IP address assigned to the client of this session
in the private network assigned by the managed entity. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
InetAddress |
|
|
crasISPAddressType |
1.3.6.1.4.1.9.9.392.1.3.21.1.9 |
The type of the address returned in 'crasISPAddress'.
|
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
InetAddressType |
|
|
crasISPAddress |
1.3.6.1.4.1.9.9.392.1.3.21.1.10 |
The IP address of the peer (client) assigned by the ISP.
This is the address of the client device in the public
network. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
InetAddress |
|
|
crasSessionProtocol |
1.3.6.1.4.1.9.9.392.1.3.21.1.11 |
The protocol underlying this remote access session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
RasProtocol |
|
|
crasProtocolElement |
1.3.6.1.4.1.9.9.392.1.3.21.1.12 |
A reference to MIB definitions specific to the protocol
underlying corresponding to the session or tunnel
used to realized the remote access session corresponding
to this conceptual row.
For instance, if this remote access session is based on
IPsec, then this object must contain the complete
instance identifier of the IPsec tunnel corresponding
to this remote access session.
If no MIB definitions specific to the underlying
protocol are available, the value should be set to the
OBJECT IDENTIFIER { 0 0 }.
|
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
OBJECT IDENTIFIER |
|
|
crasHeartbeatInterval |
1.3.6.1.4.1.9.9.392.1.3.21.1.16 |
The interval in seconds between two successive heartbeats
employed by this session. Value of 0 denotes that no
heartbeat is used. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
0..4294967295 |
|
crasClientVendorString |
1.3.6.1.4.1.9.9.392.1.3.21.1.17 |
The string identifying the vendor of the client
application initiating this Remote Access session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
SnmpAdminString |
|
|
crasClientVersionString |
1.3.6.1.4.1.9.9.392.1.3.21.1.18 |
The string identifying the version of the of the client
application initiating the Remote Access session.
This can be used by the administrator to identify which
users are running unsupported client versions. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
SnmpAdminString |
|
|
crasClientOSVendorString |
1.3.6.1.4.1.9.9.392.1.3.21.1.19 |
The string identifying the vendor of the operating system
on which the client application initiating the Remote Access
Session is running. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
SnmpAdminString |
|
|
crasClientOSVersionString |
1.3.6.1.4.1.9.9.392.1.3.21.1.20 |
The string identifying the version of the operating
system of the entity which initiated this Remote Access
session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
SnmpAdminString |
|
|
crasPrimWINSServer |
1.3.6.1.4.1.9.9.392.1.3.21.1.22 |
The IP address of the primary WINS server assigned
managed entity to this client session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
InetAddress |
|
|
crasSecWINSServer |
1.3.6.1.4.1.9.9.392.1.3.21.1.24 |
The IP address of the secondary WINS server assigned
by the managed entity to this client session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
InetAddress |
|
|
crasPrimDNSServer |
1.3.6.1.4.1.9.9.392.1.3.21.1.26 |
The IP address of the primary DNS server assigned by
the managed entity to this client session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
InetAddress |
|
|
crasSecDNSServer |
1.3.6.1.4.1.9.9.392.1.3.21.1.28 |
The IP address of the secondary DNS server assigned
by the managed entity to this client session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
InetAddress |
|
|
crasDHCPServer |
1.3.6.1.4.1.9.9.392.1.3.21.1.30 |
The IP address of the DHCP server assigned by the
managed entity to this client session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
InetAddress |
|
|
crasSessionInPkts |
1.3.6.1.4.1.9.9.392.1.3.21.1.31 |
The total number of packets received by this Remote
Access session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasSessionOutPkts |
1.3.6.1.4.1.9.9.392.1.3.21.1.32 |
The total number of packets transmitted by this
Remote Access Session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasSessionInDropPkts |
1.3.6.1.4.1.9.9.392.1.3.21.1.33 |
The total number of packets received for processing
on this session which were dropped by the managed entity. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasSessionOutDropPkts |
1.3.6.1.4.1.9.9.392.1.3.21.1.34 |
The total number of outgoing packets on this session
which were dropped during transmit processing by the
managed entity. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasSessionInOctets |
1.3.6.1.4.1.9.9.392.1.3.21.1.35 |
The total number of octets received by this Remote
Access Session.
This value is accumulated BEFORE determining whether
or not the packet should be decompressed.
|
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasSessionOutOctets |
1.3.6.1.4.1.9.9.392.1.3.21.1.36 |
The total number of octets transmitted by this Remote
Access Session.
This value is accumulated AFTER determining whether
or not the packet should be compressed.
|
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasSessionState |
1.3.6.1.4.1.9.9.392.1.3.21.1.37 |
The state of the remote access session corresponding
to this conceptual row.
The management entity may use this object to terminate
an established session by setting value of the object
to 'terminating'.
|
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
SessionStatus |
|
|
crasActGroupTable |
1.3.6.1.4.1.9.9.392.1.3.22 |
This table lists all the currently active remote
access user groups. For each group, it lists the
attributes (group, aggregate activity, aggregate
traffic), and status. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
CrasActGroupEntry |
|
crasActGroupEntry |
1.3.6.1.4.1.9.9.392.1.3.22.1 |
Each entry contains the attributes, statistics and
status of an active session. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
CrasActGroupEntry |
|
|
crasActGrpName |
1.3.6.1.4.1.9.9.392.1.3.22.1.1 |
The name of the active user group corresponding to
this entry. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SnmpAdminString |
Size(0..64) |
|
crasActGrNumUsers |
1.3.6.1.4.1.9.9.392.1.3.22.1.2 |
The number of users in this group currently connected
to the managed device. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Integer32 |
1..2147483647 |
|
crasActGrpInPkts |
1.3.6.1.4.1.9.9.392.1.3.22.1.3 |
The total number of packets received by this session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasActGrpOutPkts |
1.3.6.1.4.1.9.9.392.1.3.22.1.4 |
The total number of packets transmitted by this session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasActGrpInDropPkts |
1.3.6.1.4.1.9.9.392.1.3.22.1.5 |
The total number of packets dropped by this session
which were received for processing. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasActGrpOutDropPkts |
1.3.6.1.4.1.9.9.392.1.3.22.1.6 |
The total number of outgoing packets which were
dropped during transmit processing by this session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasActGrpInOctets |
1.3.6.1.4.1.9.9.392.1.3.22.1.7 |
The total number of octets received by this session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasActGrpOutOctets |
1.3.6.1.4.1.9.9.392.1.3.22.1.8 |
The total number of octets transmitted by this session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasEmailNumSessions |
1.3.6.1.4.1.9.9.392.1.3.23 |
The number of currently active Email proxy sessions. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Gauge32 |
|
|
crasEmailCumulateSessions |
1.3.6.1.4.1.9.9.392.1.3.24 |
The number of cumulative Email proxy sessions since system up. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
crasIPSecNumSessions |
1.3.6.1.4.1.9.9.392.1.3.26 |
The number of currently active IPSec sessions. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Gauge32 |
|
|
crasL2LNumSessions |
1.3.6.1.4.1.9.9.392.1.3.29 |
The number of currently active LAN to LAN sessions. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Gauge32 |
|
|
crasL2LCumulateSessions |
1.3.6.1.4.1.9.9.392.1.3.30 |
The number of cumulative LAN to LAN sessions since system up. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
crasLBNumSessions |
1.3.6.1.4.1.9.9.392.1.3.32 |
The number of currently active Load Balancing sessions. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Gauge32 |
|
|
crasLBCumulateSessions |
1.3.6.1.4.1.9.9.392.1.3.33 |
The number of cumulative Load Balancing sessions since system up. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
crasSVCNumSessions |
1.3.6.1.4.1.9.9.392.1.3.35 |
The number of currently active SVC sessions. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Gauge32 |
|
|
crasSVCCumulateSessions |
1.3.6.1.4.1.9.9.392.1.3.36 |
The number of cumulative SVC sessions since system up. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter32 |
|
|
crasWebvpnNumSessions |
1.3.6.1.4.1.9.9.392.1.3.38 |
The number of currently active Webvpn sessions. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Gauge32 |
|
|
crasNumTotalFailures |
1.3.6.1.4.1.9.9.392.1.4.1.1 |
The number of attempts to establish sessions which
failed, since the last reboot of the managed device. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasNumDeclinedSessions |
1.3.6.1.4.1.9.9.392.1.4.1.2 |
The number of session setup attempts, counted since
the last time the notification
'ciscoRasTooManyFailedAuths' was issued, which were
declined due to authentication or authorization
failure.
|
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
0..4294967295 |
|
crasNumAbortedSessions |
1.3.6.1.4.1.9.9.392.1.4.1.4 |
The number of sessions which were successfully
setup but were since terminated abnormally. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasFailTableSize |
1.3.6.1.4.1.9.9.392.1.4.2.1 |
The window size of the Remote Access Failure tables.
The failure tables for session and group failures
maintain only the last crasFailTableSize number of
failure records. A value of 0 for this MIB variable
indicates that archiving of the failures is disabled.
An implementation may choose suitable minimum and
maximum values for this element based on the local
policy and available resources. If an SNMP SET request
specifies a value outside this window for this element,
a BAD VALUE may be returned. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
0..4294967295 |
|
crasSessFailTable |
1.3.6.1.4.1.9.9.392.1.4.3.1 |
This table records the last 'N' session failures,
where 'N' is the value of the MIB element
'crasFailTableSize' defined earlier.
A failure could be a failure to establish a session
('setup' failure) or a failure of a session after it
was established ('operational' failure).
|
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
CrasSessFailEntry |
|
crasSessFailEntry |
1.3.6.1.4.1.9.9.392.1.4.3.1.1 |
Each entry contains the attributes associated with
a remote access session failure. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
CrasSessFailEntry |
|
|
crasSessFailIndex |
1.3.6.1.4.1.9.9.392.1.4.3.1.1.1 |
The index of the session failure table.
The value of the index is a number which
begins at one and is incremented with each
session failure. The value of this object will
wrap at 4,294,967,295. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
FailureRecordIndex |
|
|
crasSessFailUsername |
1.3.6.1.4.1.9.9.392.1.4.3.1.1.2 |
The name of the user associated with this failed
remote access session. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
SnmpAdminString |
|
|
crasSessFailGroupname |
1.3.6.1.4.1.9.9.392.1.4.3.1.1.3 |
The name of the user group to which this failed
remote access session belongs. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
SnmpAdminString |
|
|
crasSessFailType |
1.3.6.1.4.1.9.9.392.1.4.3.1.1.4 |
The type of the failure:
1 = failure occurred during session setup
2 = failed occurred after the session was setup
successfully.
|
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
setupFailure(1), operationalFailure(2) |
|
crasSessFailReason |
1.3.6.1.4.1.9.9.392.1.4.3.1.1.5 |
The reason for the failure. Possible reasons
include:
1 = other (error which cannot be classified in
any of the types listed below).
2 = internal error occurred
3 = failed to authenticate the peer/user
4 = failed to authorize the peer/user
5 = system capacity exceeded (memory, cpu, max
users etc)
6 = peer requested to abort the session or the
setup
7 = lost peer's heartbeat
8 = local management request. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
INTEGER |
other(1), internalError(2), authenticationFailure(3), authorizationFailure(4), sysCapExceeded(5), peerAbortRequest(6), peerLost(7), operRequest(8) |
|
crasSessFailTime |
1.3.6.1.4.1.9.9.392.1.4.3.1.1.6 |
The value of the MIB element 'sysUpTime'
at the time of the failure. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
TimeStamp |
|
|
crasSessFailSessionIndex |
1.3.6.1.4.1.9.9.392.1.4.3.1.1.7 |
The index of the session which failed (in case
this was an operational failure). In case of setup
failures (where the value of 'crasSessFailType' of
this conceptual row is 'operationalFailure'), the
value of this object is undefined and should not be
processed. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
SessionIndex |
|
|
crasSessFailLocalAddr |
1.3.6.1.4.1.9.9.392.1.4.3.1.1.11 |
The address assigned to the peer by the local
address management mechanism. In case no address
was assigned to the peer when the failure occurred,
this MIB variable would contain the IPv4 address
value 0.0.0.0 |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
InetAddress |
|
|
crasFailLastFailIndex |
1.3.6.1.4.1.9.9.392.1.4.3.2 |
The value of column 'crasSessFailIndex'
corresponding to the last row added to the
crasSessFailTable.
The value of this object is undefined and should
not be processed by the management entity if the
value of the object 'crasFailTableSize' is 0.
|
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
FailureRecordIndex |
|
|
crasGrpFailTable |
1.3.6.1.4.1.9.9.392.1.4.4.1 |
This table records the last 'N' occurrences of
failures (setup or operational) per user group,
where 'N' is the value of the MIB element
'crasFailTableSize' defined earlier.
When 'N' entries have been created, the failure
information about a new user group must be created by
deleting the oldest entry in this table.
|
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SEQUENCE OF |
|
|
|
|
CrasGrpFailEntry |
|
crasGrpFailEntry |
1.3.6.1.4.1.9.9.392.1.4.4.1.1 |
Each entry contains the summary of failures for a
specific user group. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
CrasGrpFailEntry |
|
|
crasGrpFailGroupname |
1.3.6.1.4.1.9.9.392.1.4.4.1.1.1 |
The name of the user group to which this failure
record corresponds.
This is the index of the group failure table. |
Status: current |
Access: not-accessible |
OBJECT-TYPE |
|
|
|
|
SnmpAdminString |
Size(0..64) |
|
crasGrpFailNumFailAuths |
1.3.6.1.4.1.9.9.392.1.4.4.1.1.2 |
The number of sessions belonging to this group which
failed authentication; counted since last reboot. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasGrpFailNumResourceFailures |
1.3.6.1.4.1.9.9.392.1.4.4.1.1.3 |
The number of session setup attempts which failed due
to insufficient resources. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasGrpFailNumDeclined |
1.3.6.1.4.1.9.9.392.1.4.4.1.1.4 |
The number of session setup attempts which were declined
by the managed entity due to local policy. These would
include sessions which were denied due to rate control
settings. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasGrpFailNumTerminatedMgmt |
1.3.6.1.4.1.9.9.392.1.4.4.1.1.5 |
The number of established sessions which were terminated
by explicit management action. The termination may have
been triggered locally or based on a request from the peer. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasGrpFailNumTerminatedOther |
1.3.6.1.4.1.9.9.392.1.4.4.1.1.6 |
The number of established sessions which were
terminated due to insufficient reasons, internal error
or other reasons not caused by management action. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasNumDisabledAccounts |
1.3.6.1.4.1.9.9.392.1.5.1.1 |
The total number of user accounts which were
disabled due to repeated login failures. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Counter64 |
|
|
crasThrMaxSessions |
1.3.6.1.4.1.9.9.392.1.6.1 |
The maximum number of sessions which are successfully
setup after which the managed entity should alert the
network management entity using the notification
'ciscoRasTooManySessions', if the notification has been
enabled.
A value of 0 indicates that the threshold has not been
set. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..2147483647 |
|
crasThrMaxFailedAuths |
1.3.6.1.4.1.9.9.392.1.6.2 |
The value of object 'crasNumDeclinedSessions' at
which the managed entity should alert the network
management entity using the notification
'ciscoRasTooManyFailedAuths', if the notification
has been enabled.
A value of 0 indicates that the threshold has not been
set. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Unsigned32 |
0..4294967295 |
|
crasThrMaxThroughput |
1.3.6.1.4.1.9.9.392.1.6.3 |
The highest throughput of the Remote Access Service at
which the managed entity should alert the network management
entity using the notification 'ciscoRasTooHighThroughput',
if the notification has been enabled.
The notification is disabled till the value of the
aggregate throughput of the managed entity drops below
the value of this object.
A value of 0 indicates that the threshold has not been
set. |
Status: current |
Access: read-only |
OBJECT-TYPE |
|
|
|
|
Integer32 |
0..2147483647 |
|
crasCntlTooManySessions |
1.3.6.1.4.1.9.9.392.1.7.1 |
This object defines the administrative state of
sending the trap to signal the violation of the
Max session threshold. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
TruthValue |
|
|
crasCntlTooManyFailedAuths |
1.3.6.1.4.1.9.9.392.1.7.2 |
This object defines the administrative state of
sending the trap to signal the violation of the
Max authentication failure count threshold. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
TruthValue |
|
|
crasCntlTooHighThroughput |
1.3.6.1.4.1.9.9.392.1.7.3 |
This object defines the administrative state of
sending the trap to signal the violation of the
Max throughput threshold. |
Status: current |
Access: read-write |
OBJECT-TYPE |
|
|
|
|
TruthValue |
|
|
ciscoRasTooManySessions |
1.3.6.1.4.1.9.9.392.0.1 |
This notification is generated when the managed entity
detects that the number of sessions established exceeds
the set threshold crasThrMaxSessions.
Once the notification has been issued, further
notifications are suppressed till the value returns
below the specified threshold. |
Status: current |
Access: read-write |
NOTIFICATION-TYPE |
|
|
|
ciscoRasTooManyFailedAuths |
1.3.6.1.4.1.9.9.392.0.2 |
This notification is generated when the managed entity
detects that the number of login attempts (over all
users) exceeds the set threshold for throughput
(crasThrMaxFailedAuths).
Once the notification has been issued, further
notifications are suppressed till the value returns
below the specified threshold. |
Status: current |
Access: read-write |
NOTIFICATION-TYPE |
|
|
|
ciscoRasTooHighThroughput |
1.3.6.1.4.1.9.9.392.0.3 |
This notification is generated when the managed entity
detects that the current throughput of the device exceeds
the set threshold for throughput (crasThrMaxThroughput).
Once the notification has been issued, further
notiifcations are suppressed till the value returns
below the specified threshold. |
Status: current |
Access: read-write |
NOTIFICATION-TYPE |
|
|
|
ciscoRasMonitorMIBCompliance |
1.3.6.1.4.1.9.9.392.2.1.1 |
The compliance statement for SNMP entities
the Cisco Remote Access Monitoring MIB. |
Status: deprecated |
Access: read-only |
MODULE-COMPLIANCE |
|
|
|
ciscoRasMonitorMIBComplianceRev1 |
1.3.6.1.4.1.9.9.392.2.1.2 |
The compliance statement for SNMP entities
the Cisco Remote Access Monitoring MIB. |
Status: current |
Access: read-only |
MODULE-COMPLIANCE |
|
|
|
ciscoRasCapacityGroup |
1.3.6.1.4.1.9.9.392.2.2.1 |
This group consists of the MIB objects pertaining
to Remote Access Service capacity parameters defined
in the Cisco Remote Access MIB. |
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|
ciscoRasResourceUsageGroup |
1.3.6.1.4.1.9.9.392.2.2.2 |
This group consists of the MIB objects pertaining
to Remote Access Service resource usage parameters
defined in the Cisco Remote Access MIB. |
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|
ciscoRasActivityGroup |
1.3.6.1.4.1.9.9.392.2.2.3 |
This group consists of the MIB objects pertaining
to the Cisco Remote Access MIB Activity group.
Following are definitions of some terms used in
this compliance group:
User:
A remote access user.
Group:
A collection of remote access users grouped
and managed together as a single entity for
administrative convenience.
ISP:
Internet Service Provider.
Crypto Accelerator
'Crypto Accelerator' denotes a device which
the managed entity uses to offload some or all
computations pertaining to cryptographic
operations.
Session
A connection terminating on the managed device
which has been established to provide remote access
connectivity to a user.
|
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|
ciscoRasGrpActivityGroup |
1.3.6.1.4.1.9.9.392.2.2.4 |
This group consists of the MIB objects pertaining
to activity of user groups.
|
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|
ciscoRasMandatoryFailureGroup |
1.3.6.1.4.1.9.9.392.2.2.5 |
This group categorizes objects pertaining to
failures in the Remote Access Service which are
essential for successful monitoring of the
service.
|
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|
ciscoRasOptionalFailureGroup |
1.3.6.1.4.1.9.9.392.2.2.6 |
This group categorizes optional objects pertaining
to failures in the Remote Access Service. |
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|
ciscoRasSecurityGroup |
1.3.6.1.4.1.9.9.392.2.2.7 |
This group categorizes objects pertaining to the
monitoring state of security in the Remote Access
Service. |
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|
ciscoRasThresholdsGroup |
1.3.6.1.4.1.9.9.392.2.2.8 |
This group categorizes objects which are used to
establish baseline values of metrics instrumenting
the Remote Access Service. |
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|
ciscoRasNotificationCntlGroup |
1.3.6.1.4.1.9.9.392.2.2.9 |
This group of objects controls the sending of
notifications defined in this MIB module. |
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|
ciscoRasNotificationsGroup |
1.3.6.1.4.1.9.9.392.2.2.10 |
This group contains the notifications for the
Remote Access MIB. |
Status: current |
Access: read-only |
NOTIFICATION-GROUP |
|
|
|
ciscoRasActivityGroupRev1 |
1.3.6.1.4.1.9.9.392.2.2.11 |
This group contains activity information related
to sessions. |
Status: current |
Access: read-only |
OBJECT-GROUP |
|
|
|