ASA CPU Utilization not support on Ciscoworks?

Answered Question
Aug 1st, 2008
User Badges:

Hi Guys,


I dont seems to see CPU Utilization Details & Memory Utilization Details in Device Center nor HUM for ASA.


Is it not supported or likely config issue?


CiscoWorks Common Services 3.1.1

Campus Manager 5.0.3

CiscoView 6.1.7

CiscoWorks Assistant 1.0.1

Device Fault Manager 3.0.3

Internetwork Performance Monitor 4.0.1

Integration Utility 1.7.1

LMS Portal 1.0.1

Resource Manager Essentials 4.1.1

Health and Utilization Monitor 1.0.0



ASA 8.0(3)



Correct Answer by Joe Clarke about 8 years 9 months ago

Ah, I have seen this before. Define a poller specifically for the ASA. The poller should contain only two templates: one polling cpmCPUTotal5min.1, and the other polling ciscoMemoryPoolFree.1. This should keep the packet size down, and allow you to get what you want.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 3 (1 ratings)
Loading.
Joe Clarke Fri, 08/01/2008 - 08:53
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

What pollers have you setup in HUM to track CPU and memory utilization for the ASA? The ASA does support the CISCO-MEMORY-POOL and CISCO-PROCESS-MIB objects, so you should be able to define a poller to track them.

damiangoh Mon, 08/04/2008 - 04:52
User Badges:


My poller are using the Cisco default template. No new templates are created.


i noticed the following status errors.


cpmCPUTotal5minRev ASA 5510 Adaptive Security Appliance Transient 1 Request Timed-Out. Device may be down. 04 Aug 2008, 20:47:17 SGT

ciscoMemoryPoolFree System memory Transient 2 Request Timed-Out. Device may be down. 03 Aug 2008, 22:27:13 SGT


i have verified that the device is up.

Joe Clarke Mon, 08/04/2008 - 06:44
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

Can you manually perform an snmpwalk of these objects from the LMS server? You can use the SNMP Walk utility in Device Center. If the names do not work as starting OIDs, then use:


.1.3.6.1.4.1.9.9.109.1.1.1.1.8

.1.3.6.1.4.1.9.9.48.1.1.1.6


It looks like an SNMP access issue.

damiangoh Mon, 08/04/2008 - 22:09
User Badges:


I got this results. Anything else i should be looking at?


The following is a SNMP walk of device 10.60.95.254 starting from .1.3.6.1.4.1.9.9.109.1.1.1.1.8


SNMP Walk Output

--------------------------------------------------------------------------------

.1.3.6.1.4.1.9.9.109.1.1.1.1.8


CISCO-PROCESS-MIB::cpmCPUTotal5minRev = No Such Object available on this agent at this OID


The following is a SNMP walk of device 10.60.95.254 starting from .1.3.6.1.4.1.9.9.48.1.1.1.6


SNMP Walk Output

--------------------------------------------------------------------------------

.1.3.6.1.4.1.9.9.48.1.1.1.6


CISCO-MEMORY-POOL-MIB::ciscoMemoryPoolFree.1 = Gauge32: 188100728 bytes


Joe Clarke Mon, 08/04/2008 - 22:14
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

The first indicates that this particular object is not supported by the ASA. Try walking the entire cpmCPUTotalTable (.1.3.6.1.4.1.9.9.109.1.1.1). Which objects return data?


The second looks good. Neither outputs explain the error HUM is showing. It might be a good idea to start a packet capture filtering on udp/161 traffic to this device, then let the HUM poller run. Check the capture for any problems.

damiangoh Tue, 08/05/2008 - 01:55
User Badges:


The following is a SNMP walk of device 10.60.95.254 starting from .1.3.6.1.4.1.9.9.109.1.1.1


SNMP Walk Output

--------------------------------------------------------------------------------

.1.3.6.1.4.1.9.9.109.1.1.1


Hi Clarke,


Thanks for your response.


CISCO-PROCESS-MIB::cpmCPUTotalPhysicalIndex.1 = INTEGER: 1

CISCO-PROCESS-MIB::cpmCPUTotal5sec.1 = Gauge32: 3

CISCO-PROCESS-MIB::cpmCPUTotal1min.1 = Gauge32: 4

CISCO-PROCESS-MIB::cpmCPUTotal5min.1 = Gauge32: 3


I saw a the logs in my ASA that is denying


%PIX|ASA-3-212005: incoming SNMP request (525bytes) on interface

inside exceeds data buffer size, discarding this SNMP request.



Correct Answer
Joe Clarke Tue, 08/05/2008 - 08:40
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

Ah, I have seen this before. Define a poller specifically for the ASA. The poller should contain only two templates: one polling cpmCPUTotal5min.1, and the other polling ciscoMemoryPoolFree.1. This should keep the packet size down, and allow you to get what you want.

Ian Beck Thu, 11/05/2009 - 03:29
User Badges:

Hi Jo,


I am having a similiar problem getting ASA CPU result's and what to try this fix.


Just need to understand the Template part and where the info comes from.


Thanks

Ian

Ian Beck Thu, 11/05/2009 - 03:34
User Badges:

Hi,


Think I havie found it and am trying now.


Thanks

Actions

This Discussion