CISCO-VPDN-MGMT-EXT-MIB

All MIBs › CISCO-VPDN-MGMT-EXT-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2011-12-01

Category: VPN and Security, Vendor: Cisco Devices

Description: Adds further objects for tunnel and session diagnostics to Cisco VPDN management.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-VPDN-MGMT-EXT-MIB?

CISCO-VPDN-MGMT-EXT-MIB extends CISCO-VPDN-MGMT-MIB with additional tunnel and session detail for Virtual Private Dial-up Networking (VPDN, e.g. L2TP/L2F tunnels) on Cisco routers and access servers. It adds cvpdnTunnelExtTable and cvpdnSessionExtTable, layering extra fields such as local/remote port numbers, last-change timestamps, and 64-bit packet/byte counters onto the base tunnel and session entries defined in the parent MIB. Its monitoring value is operational: administrators track tunnel liveness via cvpdnTunnelLastChange and throughput via the 64-bit packet/byte counters to detect a VPDN tunnel that has stalled, flapped, or is carrying unexpectedly low/high traffic, effectively monitoring the software-level health of dial-up VPN tunnels rather than physical hardware. It explicitly depends on and supplements CISCO-VPDN-MGMT-MIB, sharing the same tunnel/session indexing. It is deployed on Cisco LNS/LAC access-concentrator routers terminating VPDN tunnels for remote-access or wholesale dial-up VPN services. Network engineers evaluating or troubleshooting this functionality can download the CISCO-VPDN-MGMT-EXT-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-VPDN-MGMT-EXT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco VPDN LNS/LAC access-concentrator routers

Monitoring Examples

An operator would join cvpdnTunnelExtTable to the base VPDN tunnel table via the shared tunnel index, checking cvpdnTunnelLastChange to see if a tunnel recently flapped, and cvpdnTunnelBytesIn64/cvpdnTunnelBytesOut64 to confirm expected traffic volume. A tunnel whose cvpdnTunnelPacketsOut stays flat while cvpdnTunnelLocalPort/RemotePort remain unchanged suggests a stalled but not-yet-torn-down session needing investigation via cvpdnSessionExtTable.

What Can Be Monitored

tunnel/session local and remote ports
tunnel last-change time
64-bit tunnel packet and byte counters
session-level extended statistics

Imported Objects

From CISCO-SMI

ciscoExperiment

OBJECT-IDENTITY

From CISCO-VPDN-MGMT-MIB

cvpdnSessionAttrEntry	OBJECT-TYPE
cvpdnTunnelAttrEntry	OBJECT-TYPE

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Integer32
MODULE-IDENTITY
OBJECT-TYPE
TimeTicks

From SNMPv2-TC

DisplayString
TruthValue

How to Use in IPNetwork Monitor

Example using cvpdnTunnelPacketsOut OID:

Select a Cisco VPDN access-concentrator router as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type cvpdnTunnelPacketsOut into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The total number of output packets through the tunnel. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline (in packets), since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
ciscoVpdnMgmtExtMIB	1.3.6.1.4.1.9.10.51			Cisco VPDN management MIB extension Module. This MIB is a supplement to CISCO-VPDN-MGMT-MIB.my. The main enhancements are: 1. Added cvpdnTunnelExtTable for more tunnel information. 2. Added cvpdnSessionExtTable for more session information. Please notice that objects in CvpdnTunnelEntry and CvpdnTunnelSessionEntry are still applicable to the corresponding tunnels and sessions.
ciscoVpdnMgmtExtMIBObjects	1.3.6.1.4.1.9.10.51.1
cvpdnTunnelExtInfo	1.3.6.1.4.1.9.10.51.1.1
cvpdnTunnelExtTable	1.3.6.1.4.1.9.10.51.1.1.1		not-accessible	Vpn Tunnel table includes all tunnels configured.
cvpdnTunnelExtEntry	1.3.6.1.4.1.9.10.51.1.1.1.1		not-accessible	Please notice that this entry is a supplement to CvpdnTunnelEntry in CISCO-VPDN-MGMT-MIB for the L2TP tunnels. Here more objects are used to reflect tunnel parameters. Included are tunnel statistics, UDP port numbers and the time of last state (cvpdnTunnelState) change.
I32 cvpdnTunnelLocalPort	1.3.6.1.4.1.9.10.51.1.1.1.1.1	Integer32	read-only	The local port number of the tunnel. This is the UDP port of the interface at the local end of the tunnel.
I32 cvpdnTunnelRemotePort	1.3.6.1.4.1.9.10.51.1.1.1.1.2	Integer32	read-only	The remote port number of the tunnel. This is the UDP port of the interface at the remote end of the tunnel.
TIK cvpdnTunnelLastChange	1.3.6.1.4.1.9.10.51.1.1.1.1.3	TimeTicks	read-only	The time of last state change reflected in cvpdnTunnelState.
C32 cvpdnTunnelPacketsOutEx	1.3.6.1.4.1.9.10.51.1.1.1.1.4	Counter32	read-only	The total number of output packets through the tunnel.
C32 cvpdnTunnelBytesOut	1.3.6.1.4.1.9.10.51.1.1.1.1.5	Counter32	read-only	The total number of output bytes through the tunnel. cvpdnTunnelBytesOut object is superseded by cvpdnTunnelBytesOut64.
C32 cvpdnTunnelPacketsIn	1.3.6.1.4.1.9.10.51.1.1.1.1.6	Counter32	read-only	The total number of input packets through the tunnel.
C32 cvpdnTunnelBytesIn	1.3.6.1.4.1.9.10.51.1.1.1.1.7	Counter32	read-only	The total number of input bytes through the tunnel. cvpdnTunnelBytesIn object is superseded by cvpdnTunnelBytesIn64.
C64 cvpdnTunnelBytesIn64	1.3.6.1.4.1.9.10.51.1.1.1.1.8	Counter64	read-only	The total number of input bytes through the tunnel.
C64 cvpdnTunnelBytesOut64	1.3.6.1.4.1.9.10.51.1.1.1.1.9	Counter64	read-only	The total number of output bytes through the tunnel.
cvpdnSessionExtInfo	1.3.6.1.4.1.9.10.51.1.2
cvpdnSessionExtTable	1.3.6.1.4.1.9.10.51.1.2.1		not-accessible	Session table includes all Sessions currently active.
cvpdnSessionExtEntry	1.3.6.1.4.1.9.10.51.1.2.1.1		not-accessible	Please notice that this entry is a supplement to CvpdnTunnelSessionEntry in CISCO-VPDN-MGMT-MIB for the L2TP sessions. Here more objects are used to reflect session parameters.
I32 cvpdnSessionRemoteId	1.3.6.1.4.1.9.10.51.1.2.1.1.1	Integer32	read-only	The remote end ID of an active VPN tunnel user session.
STR cvpdnSessionInterfaceName	1.3.6.1.4.1.9.10.51.1.2.1.1.2	DisplayString	read-only	The interface name (description) of the user session.
TIK cvpdnSessionLastChange	1.3.6.1.4.1.9.10.51.1.2.1.1.3	TimeTicks	read-only	The time stamp of last change in cvpdnTunnelSessionState.
C32 cvpdnSessionOutOfOrderPackets	1.3.6.1.4.1.9.10.51.1.2.1.1.4	Counter32	read-only	The total number of out of order packets through this active user session.
T/F cvpdnSessionSequencing	1.3.6.1.4.1.9.10.51.1.2.1.1.5	TruthValue	read-only	The object indicates whether sequencing is on or not.
I32 cvpdnSessionSendSequence	1.3.6.1.4.1.9.10.51.1.2.1.1.6	Integer32	read-only	This object contains the next send sequence number for for this session.
I32 cvpdnSessionRecvSequence	1.3.6.1.4.1.9.10.51.1.2.1.1.7	Integer32	read-only	This object contains the next receive sequence number expected to be received on this session.
I32 cvpdnSessionRemoteSendSequence	1.3.6.1.4.1.9.10.51.1.2.1.1.8	Integer32	read-only	This object contains the next send sequence number for for this session.
I32 cvpdnSessionRemoteRecvSequence	1.3.6.1.4.1.9.10.51.1.2.1.1.9	Integer32	read-only	This object contains the next receive sequence number expected to be received on this session.
C32 cvpdnSessionSentZLB	1.3.6.1.4.1.9.10.51.1.2.1.1.10	Counter32	read-only	This object returns the total number of Zero Length Body acknowledgement packets transmitted on this session.
C32 cvpdnSessionRecvZLB	1.3.6.1.4.1.9.10.51.1.2.1.1.11	Counter32	read-only	This object returns the total number of Zero Length Body acknowlegement payload packets received for this session.
C32 cvpdnSessionSentRBits	1.3.6.1.4.1.9.10.51.1.2.1.1.12	Counter32	read-only	This object contains the total number of sequence number resets (payload packets with the R-bit set) received on this session.
C32 cvpdnSessionRecvRBits	1.3.6.1.4.1.9.10.51.1.2.1.1.13	Counter32	read-only	This object contains the total number of sequence number resets (payload packets with the R-bit set) received on this session.
I32 cvpdnSessionLocalWindowSize	1.3.6.1.4.1.9.10.51.1.2.1.1.14	Integer32	read-only	This object returns the local send window size for this session. If the value of the object cvpdnSessionSequencing is false, then this object should return value zero.
I32 cvpdnSessionRemoteWindowSize	1.3.6.1.4.1.9.10.51.1.2.1.1.15	Integer32	read-only	This object returns the initial remote send window size for this session. If the value of the object cvpdnSessionSequencingState is none(1) then this object should not be interpreted.
I32 cvpdnSessionCurrentWindowSize	1.3.6.1.4.1.9.10.51.1.2.1.1.16	Integer32	read-only	This object returns the local send window size for this session. If the value of the object cvpdnSessionSequencingState is none(1) then this object should not be interpreted.
I32 cvpdnSessionMinimumWindowSize	1.3.6.1.4.1.9.10.51.1.2.1.1.17	Integer32	read-only	This object returns the initial remote send window size for this session. If the value of the object cvpdnSessionSequencingState is none(1) then this object should not be interpreted.
I32 cvpdnSessionATOTimeouts	1.3.6.1.4.1.9.10.51.1.2.1.1.18	Integer32	read-only	The object reflects the current adaptive timeout the system is using.
I32 cvpdnSessionOutGoingQueueSize	1.3.6.1.4.1.9.10.51.1.2.1.1.19	Integer32	read-only	The object reflects the queue size of out going queue.
INT cvpdnSessionCalculationType	1.3.6.1.4.1.9.10.51.1.2.1.1.20	INTEGER	read-only	The object reflects the round trip time calculation type.
I32 cvpdnSessionAdaptiveTimeOut	1.3.6.1.4.1.9.10.51.1.2.1.1.21	Integer32	read-only	The object reflects the configured session adaptive timeout.
I32 cvpdnSessionRoundTripTime	1.3.6.1.4.1.9.10.51.1.2.1.1.22	Integer32	read-only	The object reflects the round trip time.
I32 cvpdnSessionPktProcessingDelay	1.3.6.1.4.1.9.10.51.1.2.1.1.23	Integer32	read-only	The object reflects the number of packets in processing delay for this session.
I32 cvpdnSessionZLBTime	1.3.6.1.4.1.9.10.51.1.2.1.1.24	Integer32	read-only	The object reflects the zero length body time interval.
ciscoVpdnMgtExtMIBNotificationPrefix	1.3.6.1.4.1.9.10.51.2
ciscoVpdnMgmtExtMIBConformance	1.3.6.1.4.1.9.10.51.3
ciscoVpdnMgmtExtMIBCompliances	1.3.6.1.4.1.9.10.51.3.1
ciscoVpdnMgmtExtMIBBasicCompliance	1.3.6.1.4.1.9.10.51.3.1.1			The compliance statement for entities which implement the Cisco VPN Management MIB. ciscoVpdnMgmtExtMIBBasicCompliance is superseded by ciscoVpdnMgmtExtMIBBasicComplianceV2.
ciscoVpdnMgmtExtMIBBasicComplianceV2	1.3.6.1.4.1.9.10.51.3.1.2			The compliance statement for entities which implement the Cisco VPN Management MIB Version 2.
ciscoVpdnMgmtExtMIBGroups	1.3.6.1.4.1.9.10.51.3.2
cvpdnTunnelExtGroup	1.3.6.1.4.1.9.10.51.3.2.1			VPN Tunnel Group. cvpdnTunnelExtGroup is superseded by cvpdnTunnelExtGroupV2
cvpdnSessionExtGroup	1.3.6.1.4.1.9.10.51.3.2.2			VPDP Session Group.
cvpdnTunnelExtGroupV2	1.3.6.1.4.1.9.10.51.3.2.3			VPN Tunnel Group Version 2.

RFC description

Extends Cisco VPDN management with additional objects for tunnel and session diagnostics.

Start monitoring Cisco VPDN access-concentrator routers with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-VPDN-MGMT-EXT-MIB