CISCO-CASA-FA-MIB

All MIBs › CISCO-CASA-FA-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2002-09-18

Category: Cisco Devices

Description: Manages Cisco CASA forwarding agent configuration for server load balancing.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-CASA-FA-MIB?

CISCO-CASA-FA-MIB is a Cisco Systems, Inc. proprietary MIB (used with CISCO-CASA-MIB) managing the CASA (Cisco Appliance Services Architecture) Forwarding Agent, which redirects flows to service appliances. Its wildcard-affinity objects cover total bytes/HC-bytes/packets, entry count, notification-enable flag, high-water-mark and reset action, deny/drop counts, and a wildcard-affinity table (index, source/destination address and port, protocol, fragment flag, source/destination mask, service-manager address/port, bytes/HC-bytes, packets). As a configuration/performance MIB it lets an administrator confirm which flows are being redirected to a CASA service appliance and watch denied/dropped-flow counts. It is deployed on Cisco Systems CASA-enabled network equipment. Engineers can download the CISCO-CASA-FA-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-CASA-FA-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco Systems CASA-enabled network equipment

Monitoring Examples

An administrator checks ccfaWildcardAffDenies and ccfaWildcardAffDrops to diagnose flows being rejected by a CASA Forwarding Agent on Cisco equipment.

What Can Be Monitored

CASA flow redirection and deny/drop statistics

Imported Objects

From CISCO-SMI

ciscoMgmt

OBJECT-IDENTITY

From CISCO-TC

CiscoIpProtocol
CiscoPort

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Gauge32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DateAndTime
TEXTUAL-CONVENTION
TimeStamp
TruthValue

How to Use in IPNetwork Monitor

Example using ccfaWildcardAffTotalBytes OID:

Select a Cisco CASA-enabled network equipment as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type ccfaWildcardAffTotalBytes into the Find box to locate it in the OID tree, then select it and click OK. It reports the number of bytes of data for all the packets which matched any Wildcard Affinity. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline (in bytes), since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
ciscoCasaFaMIB	1.3.6.1.4.1.9.9.115			This MIB module in conjunction with the CISCO-CASA-MIB, defines the SNMP management information base for managing the Cisco Appliance Services Architecture (CASA) Forwarding Agent. The following is a set of definitions used in the rest of the MIB. CASA is a protocol allowing software entities (called Appliances, examples are web caches, firewalls, load balancers) to control the behavior of network hardware devices (called Forwarding Agents, examples are switches or routers) by providing a set of rules used to handle network traffic. A Network Appliance (referred to as an Appliance) is any subsystem whose purpose is to provide a specific additional value-added service to the network device, and could be implemented as a standalone box, a line card or processor card, or a software subsystem. Examples of Network Appliances would include Load Balancers, WebCaches, and Firewalls. An Appliance tells Fowarding Agents how to handle packets based on their source and destination IP addresses and ports, and IP protocol fields. This set of information is called an Affinity. A Service Manager is an Appliance that requests packet flows from Forwarding Agents through CASA. A Real Server is a physical computing engine or part of that physical computing engine that offers one or more application services to a set of clients in the network. A packet flow is a TCP connection or a sequence of UDP packets between a client and a specific Real Server, pertaining to a specific application. Flows are represented by entries in the affinity cache tables. The Service Manager requests packet flows from Forwarding Agents by sending Affinities which contains wildcards on some of the Affinity fields. Affinities that contain wildcards in some of the fields are called Wildcard Affinities. The Service Manager may send the Forwarding Agent an Affinity containing explicit values for each of the fields. These Affinities are called Fixed Affinities. Typically Wildcard Affinities are used to instruct the Forwarding Agent to send packets received by the Forwarding Agent, which match the Wildcard Affinity, to the Service Manager. When the Service Manager receives the matching packet, the Service Manager typically will send the Forwarding Agent a Fixed Affinity. The Forwarding Agent uses Fixed Affinities to match packets coming from the network, execute any processing required on that packet, and forward that packet to a destination IP address (designated in the Fixed Affinity) called the Dispatch Address. When an IP packet arrives at the Forwarding Agent, the Forwarding Agent attempts to match the packet with the Fixed Affinities in the Fixed Affinity cache. If there is no match, an attempt is made to match the packet with the list of Wildcard Affinities. If there is no match the packet is routed normally. If there is a match with a Wildcard Affinity, the Forwarding Agent sends the packet to the Service Manager who will send the Forwarding Manager a Fixed Affinity which provides information on how to process IP packets similar to the one received by the Forwarding Agent. Processing of such packets may include sending the packet to the Service Manager. Such packets are called Interest Packets. Alternatively a Tickle Packet may be sent to the Service Manager which is an indication that a matched packet has been received by the Forwarding Agent. Reference: [1] Cisco Appliance Services Architecture (CASA) document. [2] CISCO-CASA-MIB. Diagram showing Forwarding Agents, Service Manager, Real Server and clients. ______ ______ ______ (Real ) (Real ) (Real ) (Server) (Server) (Server) (______) (______) (______) \| \| \| +---------------+ \| \| \| \|Service Manager\|-+----------+--------------+ \| +---------------+ \| \| \| \| \| ++---------+ ++---------+ ++---------+ \| F. Agent \| \| F. Agent \| \| F. Agent \| +----------+ +----------+ +----------+ \| \| \| ___\|_________________\|______________\|__ ( ) ( N E T W O R K ) (_______________________________________)
ciscoCasaFaMIBObjects	1.3.6.1.4.1.9.9.115.1
ccfaGlobal	1.3.6.1.4.1.9.9.115.1.1
ccfaStats	1.3.6.1.4.1.9.9.115.1.2
ccfaWildcardAff	1.3.6.1.4.1.9.9.115.1.3
C32 ccfaWildcardAffTotalBytesEx	1.3.6.1.4.1.9.9.115.1.3.1	Counter32	read-only	Number of bytes of data for all the packets which matched any Wildcard Affinity.
C64 ccfaWildcardAffHCTotalBytes	1.3.6.1.4.1.9.9.115.1.3.2	Counter64	read-only	Number of bytes of data for all the packets which matched any Wildcard Affinity. This object is a 64-bit version of ccfaWildcardAffTotalBytes.
C32 ccfaWildcardAffTotalPackets	1.3.6.1.4.1.9.9.115.1.3.3	Counter32	read-only	Number of packets that matched any Wildcard Affinity.
G32 ccfaWildcardAffNumOf	1.3.6.1.4.1.9.9.115.1.3.4	Gauge32	read-only	This is the number of Wildcard Affinities for which this Forwarding Agent is actively using for handling TCP and UDP packets. This is the number of entries in ccfaWildcardAffTable.
T/F ccfaWildcardAffNotifEnabled	1.3.6.1.4.1.9.9.115.1.3.5	TruthValue	read-write	true indicates that ciscoCasaFaWildcardAffCreated and ciscoCasaFaWildcardAffDeleted notification generation is enabled. false indicates that ciscoCasaFaWildcardAffCreated and ciscoCasaFaWildcardAffDeleted notification generation is disabled.
ccfaWildcardAffTable	1.3.6.1.4.1.9.9.115.1.3.6		not-accessible	List of Wildcard Affinity entries, which contain stats on each Wildcard Affinity supported by the Forwarding Agent. This is a dynamic table. Entries are created when the Service Manager sends Wildcard Affinities to this Forwarding Agent, and deleted upon instruction from the Service Manager.
ccfaWildcardAffEntry	1.3.6.1.4.1.9.9.115.1.3.6.1		not-accessible	A list of Wildcard Affinity entities. Entries are added to this table dynamically by the subagent when Wildcard Affinities are received on the multicast IP address (see cCasaMulticastAddress in the CISCO-CASA-MIB) for which this Forwarding Agent is listening.
CAS ccfaWildcardAffIndex	1.3.6.1.4.1.9.9.115.1.3.6.1.1	CasaWildcardAffIndex	not-accessible	The value of this index uniquely identifies this Wildcard Affinity from others in the table.
IP ccfaWildcardAffSourceAddr	1.3.6.1.4.1.9.9.115.1.3.6.1.2	IpAddress	read-only	The value used to compare the source IP address of the TCP and UDP packets. When the comparison is done, ccfaWildcardAffSourceMask is used as the mask on this object.
IP ccfaWildcardAffDestinationAddr	1.3.6.1.4.1.9.9.115.1.3.6.1.3	IpAddress	read-only	The value used to compare the destination IP address of the TCP and UDP packets. When the comparison is done, ccfaWildcardAffDestinationMask is used as the mask on this object.
CIS ccfaWildcardAffSourcePort	1.3.6.1.4.1.9.9.115.1.3.6.1.4	CiscoPort	read-only	The value used to compare the source port of the TCP and UDP packets. A value of 0 means all port numbers will match.
CIS ccfaWildcardAffDestinationPort	1.3.6.1.4.1.9.9.115.1.3.6.1.5	CiscoPort	read-only	The value used to compare the destination port of the TCP and UDP packets. A value of 0 means all port numbers will match.
CIS ccfaWildcardAffProtocol	1.3.6.1.4.1.9.9.115.1.3.6.1.6	CiscoIpProtocol	read-only	The value used to compare the IP Protocol field of the TCP and UDP packets. A value of 0 means all protocol numbers will match.
T/F ccfaWildcardAffFragment	1.3.6.1.4.1.9.9.115.1.3.6.1.7	TruthValue	read-only	True indicates that fragments are to be sent to the Service Manager, false indicates that fragments are compared against fields in this Wildcard Affinity for a possible match in which case the fragment is sent to the Service Manager.
IP ccfaWildcardAffSourceMask	1.3.6.1.4.1.9.9.115.1.3.6.1.8	IpAddress	read-only	The IP mask indicating which bits in the ccfaWildcardAffSourceAddr are relevant. For each set bit in this mask, the corresponding bits in ccfaWildcardAffSourceAddr and the source IP address of the received packet must be equal in order to match this Wildcard Affinity.
IP ccfaWildcardAffDestinationMask	1.3.6.1.4.1.9.9.115.1.3.6.1.9	IpAddress	read-only	The IP mask indicating which bits in the ccfaWildcardAffDestinationAddr are relevant. For each set bit in this mask, the corresponding bits in ccfaWildcardAffDestinationAddr and the destination IP address of the received packet must be equal in order to match this Wildcard Affinity.
IP ccfaWildcardAffSvcManagerAddr	1.3.6.1.4.1.9.9.115.1.3.6.1.10	IpAddress	read-only	CASA Service Manager IP address to which packets matching this Wildcard Affinity are forwarded.
CIS ccfaWildcardAffSvcManagerPort	1.3.6.1.4.1.9.9.115.1.3.6.1.11	CiscoPort	read-only	The Service Manager port to which packets matching this Wildcard Affinity are fowarded.
C32 ccfaWildcardAffBytes	1.3.6.1.4.1.9.9.115.1.3.6.1.12	Counter32	read-only	Number of bytes in packets which matched this Wildcard Affinity or any Fixed Affinity associated with this Wildcard Affinity, that were forwarded to the destination IP address.
C64 ccfaWildcardAffHCBytes	1.3.6.1.4.1.9.9.115.1.3.6.1.13	Counter64	read-only	Number of bytes in packets which matched this Wildcard Affinity or any Fixed Affinity associated with this Wildcard Affinity, that were forwarded to the destination IP address. This object is a 64-bit version of ccfaWildcardAffBytes.
C32 ccfaWildcardAffPackets	1.3.6.1.4.1.9.9.115.1.3.6.1.14	Counter32	read-only	Number of packets which matched this Wildcard Affinity or any Fixed Affinity associated with this Wildcard Affinity, that were forwarded to the destination IP address.
C64 ccfaWildcardAffHCPackets	1.3.6.1.4.1.9.9.115.1.3.6.1.15	Counter64	read-only	Number of packets which matched this Wildcard Affinity or any Fixed Affinity associated with this Wildcard Affinity, that were forwarded to the destination IP address. This object is a 64-bit version of ccfaWildcardAffPackets.
G32 ccfaWildcardAffFlows	1.3.6.1.4.1.9.9.115.1.3.6.1.16	Gauge32	read-only	From a logical point of view, this is the number of TCP/UDP flows resulting from packets received which matched this Wildcard Affinity. A flow is a sequence of IP packets from a specific client to a specific real server going through this Forwarding Agent. Literally this is the current number of Fixed Affinity entries in the Fixed Affinity cache, that were put there as a result of packets matching this Wildcard Affinity.
DAT ccfaWildcardAffInsertTime	1.3.6.1.4.1.9.9.115.1.3.6.1.17	DateAndTime	read-only	Date and time when this Wildcard Affinity was inserted into this table.
C32 ccfaWildcardAffInterestTimeouts	1.3.6.1.4.1.9.9.115.1.3.6.1.18	Counter32	read-only	Number of expected Fixed Affinities that were not received from the Service Manager within a period of time from when a Fixed Affinity was requested by this Forwarding Agent.
T/F ccfaWildcardAffAdvertiseDestAddr	1.3.6.1.4.1.9.9.115.1.3.6.1.19	TruthValue	read-only	true indicates that the IP address defined by ccfaWildcardAffDestinationAddr is to be advertised by the routing protocol in this Forwarding Agent. false indicates that the IP address is not to be advertised.
IP ccfaWildcardAffInterestAddr	1.3.6.1.4.1.9.9.115.1.3.6.1.20	IpAddress	read-only	The IP address of the CASA entity to which Interest Packets should be forwarded by this Forwarding Agent.
CIS ccfaWildcardAffInterestPort	1.3.6.1.4.1.9.9.115.1.3.6.1.21	CiscoPort	read-only	The UDP port of the CASA entity to which Interest Packets should be forwarded by this Forwarding Agent.
NUM ccfaWildAffInterestPacketSpec	1.3.6.1.4.1.9.9.115.1.3.6.1.22	CasaInterestPacketSpecification	read-only	The criteria used to identify an Interest Packet. When such a packet is identified, that packet is sent to the entity described by ccfaWildcardAffInterestAddr and ccfaWildcardAffInterestPort.
NUM ccfaWildAffInterestTickelSpec	1.3.6.1.4.1.9.9.115.1.3.6.1.23	CasaInterestPacketSpecification	read-only	The criteria used to identify an Interest Packet resulting in a Tickle Packet being sent to the entity described by ccfaWildcardAffInterestAddr and ccfaWildcardAffInterestPort.
T/F ccfaWildcardAffDispatch	1.3.6.1.4.1.9.9.115.1.3.6.1.24	TruthValue	read-only	true indicates that the MAC address of the IP packet should be modified to that of the dispatch entity who's IP address is given by ccfaWildcardAffDispatchAddr, prior to transmitting the packet on the interface. If ccfaWildcardAffDispatchAddr has value 0.0.0.0 then the Forwarding Agent will discard the packet. false indicates that the MAC address is not to be translated.
IP ccfaWildcardAffDispatchAddr	1.3.6.1.4.1.9.9.115.1.3.6.1.25	IpAddress	read-only	The IP address of the dispatch entity for packets matching Fixed Affinities derived from this Wildcard Affinity.
U32 ccfaWildcardAffHiWtrMark	1.3.6.1.4.1.9.9.115.1.3.7	Unsigned32	read-write	This is the maximum number of Wildcard Affinities (high water mark) concurrently held in the Wildcard Affinity cache since last time cCasaState transitioned to cCasaEnabled or since this object was reset. Resetting this object is achieved by setting this object to 0. Attempting to set this object to any other value will result in a wrongValue error.
TIM ccfaWildAffCacheHiWtrMarkReset	1.3.6.1.4.1.9.9.115.1.3.8	TimeStamp	read-only	This indicates when ccfaWildcardAffHiWtrMark was set to 0.
C32 ccfaWildcardAffDenies	1.3.6.1.4.1.9.9.115.1.3.9	Counter32	read-only	This is the number of Wildcard Affinities for which this Forwarding Agent was not able to accept (i.e. denied) because a mandatory action item included with the Wildcard Affinity was not supported by this Forwarding Agent.
C32 ccfaWildcardAffDrops	1.3.6.1.4.1.9.9.115.1.3.10	Counter32	read-only	This is the number of Wildcard Affinities for which this Forwarding Agent did not process (i.e. dropped). This can happen because of low resource conditions prevailing in the Forwarding Agent, such as low memory.
ccfaDispatchStats	1.3.6.1.4.1.9.9.115.1.4
ccfaDispatchStatsTable	1.3.6.1.4.1.9.9.115.1.4.1		not-accessible	Table of traffic statistics between this Forwarding Agent and the dispatch IP address. The statistics are gathered by the Forwarding agent and are relative to the Forwarding Agent.
ccfaDispatchStatsEntry	1.3.6.1.4.1.9.9.115.1.4.1.1		not-accessible	A list of traffic statistics. Entries are added to this table dynamically by the subagent when Fixed Affinities are received from the Appliance indicating a dispatch IP address which is not currently in the table. When there are no Fixed Affinities left which contain ccfaDispatchAddress in the Dispatch Address field, a timer is invoked. The entry is deleted when this timer expires if no new Fixed Affinities are received with the Dispatch Address field equal to ccfaDispatchAddress.
IP ccfaDispatchAddress	1.3.6.1.4.1.9.9.115.1.4.1.1.1	IpAddress	not-accessible	Dispatch Address of the remote entity for which these statistics are related to.
C32 ccfaDispatchBytesIn	1.3.6.1.4.1.9.9.115.1.4.1.1.2	Counter32	read-only	Number of bytes received by this Fowarding Agent from the Dispatch Address.
C64 ccfaDispatchHCBytesIn	1.3.6.1.4.1.9.9.115.1.4.1.1.3	Counter64	read-only	Number of bytes received by this Fowarding Agent from the Dispatch Address. This object is a 64-bit version of ccfaDispatchBytesIn.
C32 ccfaDispatchBytesOut	1.3.6.1.4.1.9.9.115.1.4.1.1.4	Counter32	read-only	Number of bytes sent by this Fowarding Agent to the Dispatch Address.
C64 ccfaDispatchHCBytesOut	1.3.6.1.4.1.9.9.115.1.4.1.1.5	Counter64	read-only	Number of bytes sent by this Fowarding Agent to the Dispatch Address. This object is a 64-bit version of ccfaDispatchBytesOut.
C32 ccfaDispatchPacketsIn	1.3.6.1.4.1.9.9.115.1.4.1.1.6	Counter32	read-only	Packets received by this Fowarding Agent from the Dispatch Address.
C64 ccfaDispatchHCPacketsIn	1.3.6.1.4.1.9.9.115.1.4.1.1.7	Counter64	read-only	Packets received by this Fowarding Agent from the Dispatch Address. This object is a 64-bit version of ccfaDispatchPacketsIn.
C32 ccfaDispatchPacketsOut	1.3.6.1.4.1.9.9.115.1.4.1.1.8	Counter32	read-only	Packets sent by this Fowarding Agent to the Dispatch Address.
C64 ccfaDispatchHCPacketsOut	1.3.6.1.4.1.9.9.115.1.4.1.1.9	Counter64	read-only	Packets sent by this Fowarding Agent to the Dispatch Address. This object is a 64-bit version of ccfaDispatchPacketsOut.
G32 ccfaDispatchFlows	1.3.6.1.4.1.9.9.115.1.4.1.1.10	Gauge32	read-only	From a logical point of view, this is the number of TCP/UDP flows resulting from packets received which matched any Wildcard Affinity active in this Forwarding Agent. This is current number of Fixed Affinity entries whose destination IP address is equal to ccfaDispatchAddress.
ccfaAdvertisedDispatchTable	1.3.6.1.4.1.9.9.115.1.4.2		not-accessible	This table correlates dispatch addresses with their corresponding advertised address.
ccfaAdvertisedDispatchEntry	1.3.6.1.4.1.9.9.115.1.4.2.1		not-accessible	A list of dispatch addresses for each advertised address. An entry is added to this table by the subagent when the Wildcard Affinity associated with a received Fixed Affinity has ccfaWildcardAffDispatch set to true and the entry is not already in the table. An entry is deleted from this table when all fixed affinities containing the dispatch address for the associated advertised address, time out.
IP ccfaAdvertisedAddress	1.3.6.1.4.1.9.9.115.1.4.2.1.1	IpAddress	not-accessible	The advertised IP Address. This corresponds to ccfaWildcardAffDestinationAddr with ccfaWildcardAffAdvertiseDestAddr set to true.
IP ccfaAdvertisedDispatchAddress	1.3.6.1.4.1.9.9.115.1.4.2.1.2	IpAddress	read-only	Dispatch Address of the remote entity for which these statistics are related to.
ciscoCasaFaMIBNotificationPrefix	1.3.6.1.4.1.9.9.115.2
ciscoCasaFaMIBNotifications	1.3.6.1.4.1.9.9.115.2.0
NTF ciscoCasaFaWildcardAffCreated	1.3.6.1.4.1.9.9.115.2.1			This notification indicates that this CASA Forwarding Agent has created a Wildcard Affinity entry. This is gated on ccfaWildcardAffNotifEnabled.
NTF ciscoCasaFaWildcardAffDeleted	1.3.6.1.4.1.9.9.115.2.2			This notification indicates that this CASA Forwarding Agent has deleted this Wildcard Affinity entry. This is gated on ccfaWildcardAffNotifEnabled.
ciscoCasaFaMIBConformance	1.3.6.1.4.1.9.9.115.3
ciscoCasaFaMIBCompliances	1.3.6.1.4.1.9.9.115.3.1
ciscoCasaFaMIBCompliance	1.3.6.1.4.1.9.9.115.3.1.1			The compliance statement for entities which implement the Cisco CASA FA MIB.
ciscoCasaFaMIBGroups	1.3.6.1.4.1.9.9.115.3.2
ciscoCasaFaWildcardAffGroup	1.3.6.1.4.1.9.9.115.3.2.3			CASA Wildcard Affinity objects.
ciscoCasaFaDispatchGroup	1.3.6.1.4.1.9.9.115.3.2.5			CASA affinity dispatch statistics.
ciscoCasaFaADGroup	1.3.6.1.4.1.9.9.115.3.2.6			CASA advertised address, dispatch address correlation group.
ciscoCasaFaNotifGroup	1.3.6.1.4.1.9.9.115.3.2.7			A collection of objects providing CASA notifications.

RFC description

Cisco Appliance Services Architecture (CASA) forwarding agent management and traffic rule handling.

Start monitoring Cisco CASA-enabled network equipment with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-CASA-FA-MIB