AVENTAIL-NG-SERVER-MIBS

All MIBs › AVENTAIL-NG-SERVER-MIBS

Organization: Aventail

Last Updated: 2004-09-07

Category: VPN and Security, Vendor: Aventail

Description: Monitors Aventail next-generation SSL VPN server services including authentication, policy, and tunnel server health.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is AVENTAIL-NG-SERVER-MIBS?

AVENTAIL-NG-SERVER-MIBS provides statistics for Aventail's Next-Generation SSL VPN server, monitoring the health of the SSL VPN gateway service itself. It exposes overall server state, client address pool sizing and utilization, and the number and detail of active SSL VPN tunnels. This is directly software/service-status monitoring - ngServerState reflects whether the VPN service is healthy, while the pool and tunnel tables reveal resource exhaustion (address pool nearly full, or tunnel count approaching capacity) before it causes new connections to be refused. There is no clear dependency on external standard MIBs beyond basic SNMPv2 conventions. It is deployed on Aventail (later SonicWall/Dell) SSL VPN appliances providing secure remote access. Engineers can download the AVENTAIL-NG-SERVER-MIBS file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in AVENTAIL-NG-SERVER-MIBS. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Aventail SSL VPN gateway/appliance

Monitoring Examples

An admin would poll ngServerState for overall service health, then check numOfNgClientAddrPool and ngClientAddrPoolRangesTable/ngClientAddrPoolEntry (keyed by ngClientAddrPoolId) for ngClientAddrPoolUtilization against ngStartRangeOfClientAddrPool/ngEndRangeOfClientAddrPool to see if a client address pool is nearing exhaustion. numberOfNGSslTunnels and ngSslTunnelTable/ngSslTunnelEntry (keyed by ngSslTunnelId) show how many concurrent SSL VPN tunnels are active versus licensed capacity.

What Can Be Monitored

overall server state
client address pool utilization
client address pool range sizing
active SSL tunnel count

Imported Objects

From AVENTAIL-MIB

aventail

MODULE-IDENTITY

From HOST-RESOURCES-MIB

InternationalDisplayString

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

OIDs

OID symbolic	OID numeric	Type	Access	Description
aventailNGServer	1.3.6.1.4.1.4331.5			This Aventail MIB provides NG Server Statistics
NUM ngServerState	1.3.6.1.4.1.4331.5.1	InternationalDisplayString	read-only	This oid conveys NG service state as \ ACTIVE, DOWN or CRASHED.
I32 numOfNgClientAddrPool	1.3.6.1.4.1.4331.5.2	Integer32	read-only	The number of Client Addr Pool assigned
ngClientAddrPoolRangesTable	1.3.6.1.4.1.4331.5.3		not-accessible	This table provides information about how many address \ pools are currently active in a appliance & what are \ their ranges.
ngClientAddrPoolEntry	1.3.6.1.4.1.4331.5.3.1		not-accessible	The number of pools are currently active in a appliance.
I32 ngClientAddrPoolId	1.3.6.1.4.1.4331.5.3.1.1	Integer32	read-only	Index field for client Address Pool Utilization
I32 ngClientAddrPoolUtilization	1.3.6.1.4.1.4331.5.3.1.2	Integer32	read-only	Percentages of total how many VIPs are issued from \ this client address pools
NUM ngStartRangeOfClientAddrPool	1.3.6.1.4.1.4331.5.3.1.3	InternationalDisplayString	read-only	IP address in dot notation stating start range of \ client Address Pool Utilization
NUM ngEndRangeOfClientAddrPool	1.3.6.1.4.1.4331.5.3.1.4	InternationalDisplayString	read-only	IP address in dot notation stating end range of \ client Address Pool Utilization
I32 numberOfNGSslTunnels	1.3.6.1.4.1.4331.5.4	Integer32	read-only	Total number how many NG tunnels existing on this appliance
ngSslTunnelTable	1.3.6.1.4.1.4331.5.5		not-accessible	The NG Server tunnels statistics.
ngSslTunnelEntry	1.3.6.1.4.1.4331.5.5.1		not-accessible	This represents the NG SSL tunnel table entry
I32 ngSslTunnelId	1.3.6.1.4.1.4331.5.5.1.1	Integer32	read-only	Index field for NG SSL Tunnel Table
NUM ngSslTunnelUser	1.3.6.1.4.1.4331.5.5.1.2	InternationalDisplayString	read-only	Username associated with this NG SSL Tunnel.
NUM ngSslTunnelVIP	1.3.6.1.4.1.4331.5.5.1.3	InternationalDisplayString	read-only	Virtual IP address associated with this NG SSL tunnel.
I32 numOfNgFlowsPerTunnel	1.3.6.1.4.1.4331.5.5.1.4	Integer32	read-only	Number of flows per this NG SSL tunnel.
I32 ngSslTunnelUpTime	1.3.6.1.4.1.4331.5.5.1.5	Integer32	read-only	Uptime statistics for this NG SSL tunnel.
NTF ngclientAddrPoolUtilizationWarning	1.3.6.1.4.1.4331.5.100			When client address-pool utilization per pool \ exceeds threshold a trap should be triggered.
NTF ngServerStateChange	1.3.6.1.4.1.4331.5.101			NG Server core functionality depends upon user \ space processes avssld, avpsd and two avevent \ kernel threads. SNMP agent will monitor these \ four processes and when any of these go down \ this trap will be triggered. Trap description \ will specify NG service is down due to particular \ component for example the description will contain \ names of NG and failed thread for example avssld(0).
NTF nGSSLTunnelHogging	1.3.6.1.4.1.4331.5.102			All the NG tunnels will be monitored to check \ if they are exceeding threshold of tunnel bandwidth \ every 5 minutes. If a NG tunnel is persistently \ hogging the network for last 10 minutes this trap \ will be triggered. The NG tunnels statistics \ given with this trap will include instance of the \ ngSslTunnelTable for the Session \ hogging the bandwidth.

RFC description

Aventail NG server statistics including service state and client address pool utilization.

Start monitoring Aventail SSL VPN gateway/appliance (legacy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download AVENTAIL-NG-SERVER-MIBS

What Is AVENTAIL-NG-SERVER-MIBS?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description