All MIBs › CISCO-REMOTE-ACCESS-MONITOR-MIB › crasSessFailUsername
crasSessFailUsername
Module: CISCO-REMOTE-ACCESS-MONITOR-MIB
OID (symbolic): CISCO-REMOTE-ACCESS-MONITOR-MIB::crasSessFailUsername
OID (numeric): 1.3.6.1.4.1.9.9.392.1.4.3.1.1.2
Node type: OBJECT-TYPE
Type: SnmpAdminString
Access: read-only
Description: The name of the user associated with this failed remote access session.
What is crasSessFailUsername?
This object reports the username associated with a specific failed remote-access session attempt recorded in the failure table. An admin reviewing a spike in login failures scans this column across recent rows to see whether failures are spread across many different accounts (suggesting a broad brute-force sweep) or concentrated on one (suggesting a targeted attack or a user who simply forgot their new password). A row showing repeated failures for the same username, 'jsmith', dozens of times in a short window would prompt a temporary account lock or a call to that user.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.392.1.4.3.1.1.2 snmpwalk -v2c -c public <target> CISCO-REMOTE-ACCESS-MONITOR-MIB::crasSessFailUsername
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.392.1.4.3.1.1.2.1 snmpget -v2c -c public <target> CISCO-REMOTE-ACCESS-MONITOR-MIB::crasSessFailUsername.1
Start monitoring Cisco VPN concentrator/remote-access router with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-REMOTE-ACCESS-MONITOR-MIB::crasSessFailUsername OID value, configure state conditions and alerts, and monitor any Cisco VPN concentrator/remote-access router from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.392 | ciscoRemoteAccessMonitorMIB | CISCO-REMOTE-ACCESS-MONITOR-MIB |
| 1.3.6.1.4.1.9.9.392.1 | ciscoRasMonitorMIBObjects | CISCO-REMOTE-ACCESS-MONITOR-MIB |
| 1.3.6.1.4.1.9.9.392.1.4 | crasFailures | CISCO-REMOTE-ACCESS-MONITOR-MIB |
| 1.3.6.1.4.1.9.9.392.1.4.3 | crasSessFailures | CISCO-REMOTE-ACCESS-MONITOR-MIB |
| 1.3.6.1.4.1.9.9.392.1.4.3.1 | crasSessFailTable | CISCO-REMOTE-ACCESS-MONITOR-MIB |
| 1.3.6.1.4.1.9.9.392.1.4.3.1.1 | crasSessFailEntry | CISCO-REMOTE-ACCESS-MONITOR-MIB |
| 1.3.6.1.4.1.9.9.392.1.4.3.1.1.2 | crasSessFailUsername | CISCO-REMOTE-ACCESS-MONITOR-MIB |