CISCO-L4L7MODULE-RESOURCE-LIMIT-MIB

MIB Reference — IPNetwork Monitor · Updated October 05, 2026

All MIBs › CISCO-L4L7MODULE-RESOURCE-LIMIT-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2013-02-20

Category: Cisco Devices, Hardware and Environment, Web and Application Servers

Description: Manages resource limits (connections, bandwidth, memory) for Cisco Layer 4-7 service modules.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-L4L7MODULE-RESOURCE-LIMIT-MIB?

CISCO-L4L7MODULE-RESOURCE-LIMIT-MIB manages resource classes and configurable min/max limits for Cisco Layer 4-7 service modules (such as firewall, NAT, or load-balancing modules), covering resources like TCP/IP connections, MAC address tables, syslog buffers, ACL memory, and NAT translations. It belongs to Cisco's service-module/security-appliance technology area and exposes configuration data defining resource classes and per-resource-type min/max limits. It is used to monitor the software resource-utilization status of L4-L7 modules, letting an administrator compare configured crlResourceLimitMin/crlResourceLimitMax values against actual usage to catch resource exhaustion conditions -- for example a module approaching its maximum NAT translation or connection limit -- before they cause service degradation. It is designed to centralize resource-limit management in addition to, and independent of, resource information already exposed in other module-specific MIBs. It is typically deployed on Cisco service modules or appliances hosted in Catalyst chassis or standalone security appliances, and administrators typically begin with a CISCO-L4L7MODULE-RESOURCE-LIMIT-MIB download to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-L4L7MODULE-RESOURCE-LIMIT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • Cisco Layer 4-7 service modules
  • Cisco security appliances hosting L4-7 modules

Monitoring Examples

An operator would poll ciscoL4L7ResourceClassTable/ciscoL4L7ResourceClassEntry to enumerate configured resource classes by crlResourceClassName, then check ciscoL4L7ResourceLimitTable/ciscoL4L7ResourceLimitEntry for crlResourceLimitType, crlResourceLimitMin, and crlResourceLimitMax on resources such as TCP/IP connections or NAT translations. Comparing current usage against crlResourceLimitMax for a given crlResourceLimitType would reveal whether the module is close to exhausting a critical resource like ACL memory or connection table space. Notifications from ciscoL4L7ResourceLimitNotifs would fire when a configured limit is breached.

What Can Be Monitored

  • resource class definitions
  • resource limit min/max thresholds
  • TCP/IP connection resource usage
  • NAT translation resource usage
  • resource limit breach notifications
Imported Objects

From CISCO-SMI

ciscoMgmtOBJECT-IDENTITY

From ENTITY-MIB

entPhysicalIndexOBJECT-TYPE

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Gauge32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

RowStatus
StorageType
TEXTUAL-CONVENTION
TimeStamp
TruthValue

How to Use in IPNetwork Monitor

Example using crlResourceLimitReqsDeniedCount OID:

Select a Cisco Layer 4-7 service modules / security appliance as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type crlResourceLimitReqsDeniedCount into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. This object represents the number of resource requests that were denied when the configured resource limit is exceeded for the resource identified by 'ciscoResourceLimitType'. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs

RFC description

Manages resource class limits for TCP connections, MAC addresses, and NAT translations on L4-L7 modules.

Start monitoring Cisco Layer 4-7 service modules / security appliances with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-L4L7MODULE-RESOURCE-LIMIT-MIB