All MIBs › CISCO-REMOTE-ACCESS-MONITOR-MIB › ciscoRasTooManyFailedAuths
ciscoRasTooManyFailedAuths
Module: CISCO-REMOTE-ACCESS-MONITOR-MIB
OID (symbolic): CISCO-REMOTE-ACCESS-MONITOR-MIB::ciscoRasTooManyFailedAuths
OID (numeric): 1.3.6.1.4.1.9.9.392.0.2
Node type: NOTIFICATION-TYPE
Description: This notification is generated when the managed entity detects that the number of login attempts (over all users) exceeds the set threshold for throughput (crasThrMaxFailedAuths).
Once the notification has been issued, further notifications are suppressed till the value returns below the specified threshold.
Examples
Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):
snmptrap -v2c -c public <manager> '' CISCO-REMOTE-ACCESS-MONITOR-MIB::ciscoRasTooManyFailedAuths snmptrap -v2c -c public <manager> '' 1.3.6.1.4.1.9.9.392.0.2
Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):
snmptrapd -f -Lo -c /dev/null authCommunity log public
Example snmptrapd log entry:
zoo11-linux.zoo [UDP: [192.168.30.111]:63446->[192.168.30.10]:162]: DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (305214422) 35 days, 7:49:04.22 SNMPv2-MIB::snmpTrapOID.0 = OID: CISCO-REMOTE-ACCESS-MONITOR-MIB::ciscoRasTooManyFailedAuths
Start monitoring Cisco VPN concentrator/remote-access router with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-REMOTE-ACCESS-MONITOR-MIB::ciscoRasTooManyFailedAuths OID value, configure state conditions and alerts, and monitor any Cisco VPN concentrator/remote-access router from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.392 | ciscoRemoteAccessMonitorMIB | CISCO-REMOTE-ACCESS-MONITOR-MIB |
| 1.3.6.1.4.1.9.9.392.0 | ciscoRasMonitorMIBNotifs | CISCO-REMOTE-ACCESS-MONITOR-MIB |
| 1.3.6.1.4.1.9.9.392.0.2 | ciscoRasTooManyFailedAuths | CISCO-REMOTE-ACCESS-MONITOR-MIB |