Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Cisco ASA HA Failover Status SNMP Trap/Polling

Hi

We have a Cisco ASA 5520 in HA (Active - Standby). We monitor the CPU,Memory Utilization and Active Session via SNMP polling.

And SNMP trap for linkup ,linkdown and Cold start.

Our requirement is to monitor the HA status and whenever there is a change in the HA - Failover we have to get a snmp trap.

What are the configuration need to be done on the cisco asa.

regards

Alexander M

1 ACCEPTED SOLUTION

Accepted Solutions
Red

Cisco ASA HA Failover Status SNMP Trap/Polling

Hi Alexander,

You can check the basic chonfiguration on the ASA from these docs:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/monitor.html

and

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094a13.shtml

Just to give you an example:

snmp-server host inside 192.168.168.32 community SNMPMONITORING version 2c

no snmp-server location

no snmp-server contact

snmp-server community SNMPMONITORING

snmp-server enable traps syslog

You can find the ASA MIBs here:

ftp://ftp-sj.cisco.com/pub/mibs/supportlists/asa/asa-supportlist.html

To chcek SNMP OID's for polling, use this:

http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en

Hope this is what you were looking for.

Thanks,

Varun

Thanks, Varun Rao Security Team, Cisco TAC
3 REPLIES
Red

Cisco ASA HA Failover Status SNMP Trap/Polling

Hi Alexander,

You can check the basic chonfiguration on the ASA from these docs:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/monitor.html

and

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094a13.shtml

Just to give you an example:

snmp-server host inside 192.168.168.32 community SNMPMONITORING version 2c

no snmp-server location

no snmp-server contact

snmp-server community SNMPMONITORING

snmp-server enable traps syslog

You can find the ASA MIBs here:

ftp://ftp-sj.cisco.com/pub/mibs/supportlists/asa/asa-supportlist.html

To chcek SNMP OID's for polling, use this:

http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en

Hope this is what you were looking for.

Thanks,

Varun

Thanks, Varun Rao Security Team, Cisco TAC
New Member

Cisco ASA HA Failover Status SNMP Trap/Polling

Thanks Varun.

Red

Cisco ASA HA Failover Status SNMP Trap/Polling

Hi Alex,

This should be helpful as well:

https://supportforums.cisco.com/docs/DOC-1295

Varun

Thanks, Varun Rao Security Team, Cisco TAC
5826
Views
5
Helpful
3
Replies