CISCO-VPN-LIC-USAGE-MONITOR-MIB

All MIBs › CISCO-VPN-LIC-USAGE-MONITOR-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2013-09-13

Category: VPN and Security, Vendor: Cisco Devices

Description: Monitors Cisco VPN license usage including active sessions and license capacity thresholds.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-VPN-LIC-USAGE-MONITOR-MIB?

CISCO-VPN-LIC-USAGE-MONITOR-MIB is a Cisco Systems, Inc. proprietary MIB monitoring IPsec/SSL VPN (SVC) license usage across a primary/backup license-server pair. Its objects cover device role, primary/backup server address (type/address), server version/status, a license-server table (VPN license type, capacity, available count, utilized count), backup-server device ID/version/registration/HA-peer status, and hello/sync message counters. As a performance/status MIB it lets an administrator watch VPN license utilization against capacity and confirm primary/backup license-server synchronization health. It is deployed on Cisco Systems VPN gateways with centralized license management. Engineers can download the CISCO-VPN-LIC-USAGE-MONITOR-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-VPN-LIC-USAGE-MONITOR-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco Systems VPN gateways (centralized license management)

Monitoring Examples

An administrator monitors cvpnLicServerUtilized against cvpnLicServerNumLicCapacity to catch a Cisco VPN gateway approaching its licensed session capacity.

What Can Be Monitored

VPN license utilization and server-pair synchronization

Imported Objects

From CISCO-SMI

ciscoMgmt

OBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Integer32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using cvpnLicServerHelloTx OID:

Select a Cisco VPN gateway (centralized license management) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type cvpnLicServerHelloTx into the Find box to locate it in the OID tree, then select it and click OK. The total number of Hello packets transmitted from this license server. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline (in packets), since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
ciscoVpnLicUsageMonitorMIB	1.3.6.1.4.1.9.9.816			Acronyms and Definitions The following acronyms and terms are used in this document: IPSec: Secure IP Protocol VPN: Virtual Private Network LAN: Local Area Network Group: A collection of VPN license usage users grouped and managed together as a single entity for administrative convenience. SVC: SSL VPN Client LicServer: Multi-site shared License server. LicBkpServer: Multi-site shared License Backup server. LicClient: Multi-site shared License client. Overview of the MIB This is a MIB Module for monitoring licenses in Virtual Private Networks. The MIB seeks to create a common model of VPN License Usage across different VPN implementations. The MIB defines counters and objects of interest to usage/message monitoring in a way which is independent of which VPN technology is requested. MIB contains four major groups of objects which are used to get VPN License Usage information a) VPN Lic device type This section defines if the device is acting as a server, backupserver, client(participant) in a shared license system. b) VPN License Server Usage group This section defines total network license usage information and also server information as well along with backup server address. service. c) VPN License Backup server Usage group This section defines backup license server information in detail, along with statistics of hello, sync and update messages from server. d) VPN License client Usage group This section defines license usage information by this client. along with statistics about registration, get request,release request and transfer request.
ciscoVpnLicUsageMonitorMIBObjects	1.3.6.1.4.1.9.9.816.0
VPN cvpnLicDeviceRole	1.3.6.1.4.1.9.9.816.0.1	VPNLicDeviceRole	read-only	ASA Device Role in a shared License System as server/backup/client.
cvpnLicServer	1.3.6.1.4.1.9.9.816.0.2
IPt cvpnLicServerAddrType	1.3.6.1.4.1.9.9.816.0.2.1	InetAddressType	read-only	IP address type of Shared License Server.
IP cvpnLicServerAddr	1.3.6.1.4.1.9.9.816.0.2.2	InetAddress	read-only	IP address of Shared License Server.
IPt cvpnLicBkpSerAddrType	1.3.6.1.4.1.9.9.816.0.2.3	InetAddressType	read-only	IP address Type of Shared License Backup Server.
IP cvpnLicBkpSerAddr	1.3.6.1.4.1.9.9.816.0.2.4	InetAddress	read-only	IP address of Shared License Backup Server.
I32 cvpnLicServerVer	1.3.6.1.4.1.9.9.816.0.2.5	Integer32	read-only	Shared License Server version.
LIC cvpnLicServerStatus	1.3.6.1.4.1.9.9.816.0.2.6	LicServerStatus	read-only	Shared License Server Status.
cvpnLicServerTable	1.3.6.1.4.1.9.9.816.0.2.7		not-accessible	This table lists the Shared License Usage Information per VPN type. For each VPN type, it lists Total capacity, current usage, total available
cvpnLicServerEntry	1.3.6.1.4.1.9.9.816.0.2.7.1		not-accessible	Each entry contains the statistics of License usage like Total capacity, current usage, total available.
VPN cvpnLicServerVPNLicType	1.3.6.1.4.1.9.9.816.0.2.7.1.1	VPNLicType	not-accessible	Statistics for a particular VPN type.
U32 cvpnLicServerNumLicCapacity	1.3.6.1.4.1.9.9.816.0.2.7.1.2	Unsigned32	read-only	Total number of shared license capacity for network for this VPN type.
U32 cvpnLicServerNumLicAvail	1.3.6.1.4.1.9.9.816.0.2.7.1.3	Unsigned32	read-only	Available License in network for this VPN type.
U32 cvpnLicServerUtilized	1.3.6.1.4.1.9.9.816.0.2.7.1.4	Unsigned32	read-only	Number of Licenses utilised by the entire network for this License type.
cvpnLicBkpServer	1.3.6.1.4.1.9.9.816.0.3
IPt cvpnLicBkpServerAddrType	1.3.6.1.4.1.9.9.816.0.3.1	InetAddressType	read-only	IP address type of Shared License Backup Server
IP cvpnLicBkpServerAddr	1.3.6.1.4.1.9.9.816.0.3.2	InetAddress	read-only	IP address of Shared License Backup Server
STR cvpnLicBkpServerDevID	1.3.6.1.4.1.9.9.816.0.3.3	SnmpAdminString	read-only	Device ID of the shared license backup server.
U32 cvpnLicBkpServerVer	1.3.6.1.4.1.9.9.816.0.3.4	Unsigned32	read-only	Shared License Backup Server version.
LIC cvpnLicBkpServerRegd	1.3.6.1.4.1.9.9.816.0.3.5	LicServerRegistered	read-only	Shared License Backup Server Registered information.
STR cvpnLicBkpServerHAPeerDevID	1.3.6.1.4.1.9.9.816.0.3.6	SnmpAdminString	read-only	Device ID of the shared license backup server HA Peer.
LIC cvpnLicBkpServerHAPeerRegd	1.3.6.1.4.1.9.9.816.0.3.7	LicServerRegistered	read-only	Shared License Backup Server HA Peer registered information
LIC cvpnLicBkpServerStatus	1.3.6.1.4.1.9.9.816.0.3.8	LicServerStatus	read-only	Shared License Backup Server Status.
C32 cvpnLicServerHelloTxEx	1.3.6.1.4.1.9.9.816.0.3.9	Counter32	read-only	The total number of Hello packets transmitted from this license server.
C32 cvpnLicServerHelloRx	1.3.6.1.4.1.9.9.816.0.3.10	Counter32	read-only	The total number of Hello packets received by the license server.
C32 cvpnLicServerHelloError	1.3.6.1.4.1.9.9.816.0.3.11	Counter32	read-only	The total number of erroneous Hello packet received. e.g. request received with no Rx data.
C32 cvpnLicServerSyncTx	1.3.6.1.4.1.9.9.816.0.3.12	Counter32	read-only	The total number of Sync packets transmitted from this license server.
C32 cvpnLicServerSyncRx	1.3.6.1.4.1.9.9.816.0.3.13	Counter32	read-only	The total number of Sync packets received by the license server.
C32 cvpnLicServerSyncError	1.3.6.1.4.1.9.9.816.0.3.14	Counter32	read-only	The total number of erroneous Sync packet received e.g. request received with no Rx data.
C32 cvpnLicServerUpdateTx	1.3.6.1.4.1.9.9.816.0.3.15	Counter32	read-only	The total number of Update packets transmitted from this license server.
C32 cvpnLicServerUpdateRx	1.3.6.1.4.1.9.9.816.0.3.16	Counter32	read-only	The total number of Update packets received by the license server.
C32 cvpnLicServerUpdateError	1.3.6.1.4.1.9.9.816.0.3.17	Counter32	read-only	The total number of erroneous Update packet received. e.g. request received with no Rx data.
cvpnLicClient	1.3.6.1.4.1.9.9.816.0.4
cvpnLicClntInfoTable	1.3.6.1.4.1.9.9.816.0.4.1		not-accessible	This table lists all the License LicClnt Information. For each LicClnt, it lists the attributes (Hostname,Device ID,Current usage, High,Registration Tx/Rx/Error,Get Tx/Rx/Error Release Tx/Rx/Error, Transfer Tx/Rx/Error
cvpnLicClntInfoEntry	1.3.6.1.4.1.9.9.816.0.4.1.1		not-accessible	Each entry contains the attributes, statistics of a shared license client.
VPN cvpnLicClntVPNLicType	1.3.6.1.4.1.9.9.816.0.4.1.1.1	VPNLicType	not-accessible	VPN Type of Shared License client
STR cvpnLicClntInfoDeviceID	1.3.6.1.4.1.9.9.816.0.4.1.1.2	SnmpAdminString	not-accessible	Device ID of the shared license client.
STR cvpnLicClntInfoHostName	1.3.6.1.4.1.9.9.816.0.4.1.1.3	SnmpAdminString	read-only	The Hostname of the shared license Client.
U32 cvpnLicClntInfoPlatLmt	1.3.6.1.4.1.9.9.816.0.4.1.1.4	Unsigned32	read-only	Platform limit for max License on this client.
U32 cvpnLicClntInfoCurUsage	1.3.6.1.4.1.9.9.816.0.4.1.1.5	Unsigned32	read-only	Current Usage of Shared License by this device.
U32 cvpnLicClntInfoHigh	1.3.6.1.4.1.9.9.816.0.4.1.1.6	Unsigned32	read-only	The maximum number of licenses provided by the license server to the client.
C32 cvpnLicClntInfoRegReqTx	1.3.6.1.4.1.9.9.816.0.4.1.1.7	Counter32	read-only	The total number of Registration Request packets transmitted on this client for this VPN type.
C32 cvpnLicClntInfoRegReqRx	1.3.6.1.4.1.9.9.816.0.4.1.1.8	Counter32	read-only	The total number of Registration Request packets received on this client for this VPN type.
C32 cvpnLicClntInfoRegReqError	1.3.6.1.4.1.9.9.816.0.4.1.1.9	Counter32	read-only	The total number of Registration Request packet errors on this client for this VPN type.
C32 cvpnLicClntInfoGetReqTx	1.3.6.1.4.1.9.9.816.0.4.1.1.10	Counter32	read-only	The total number of Get Request packets transmitted on this client for this VPN type.
C32 cvpnLicClntInfoGetReqRx	1.3.6.1.4.1.9.9.816.0.4.1.1.11	Counter32	read-only	The total number of Get Request packets Received on this client for this VPN type.
C32 cvpnLicClntInfoGetReqError	1.3.6.1.4.1.9.9.816.0.4.1.1.12	Counter32	read-only	The total number of Get Request packet errors on this client for this VPN type.
C32 cvpnLicClntInfoRelReqTx	1.3.6.1.4.1.9.9.816.0.4.1.1.13	Counter32	read-only	The total number of Release Request packets transmitted on this client for this VPN type.
C32 cvpnLicClntInfoRelReqRx	1.3.6.1.4.1.9.9.816.0.4.1.1.14	Counter32	read-only	The total number of Release Request packets received on this client for this VPN type.
C32 cvpnLicClntInfoRelReqError	1.3.6.1.4.1.9.9.816.0.4.1.1.15	Counter32	read-only	The total number of Release Request packet errors on this client for this VPN type.
C32 cvpnLicClntInfoTransferReqTx	1.3.6.1.4.1.9.9.816.0.4.1.1.16	Counter32	read-only	The total number of Transfer Request packets transmitted on this client for this VPN type.
C32 cvpnLicClntInfoTransferReqRx	1.3.6.1.4.1.9.9.816.0.4.1.1.17	Counter32	read-only	The total number of Transfer Request packets received on this client for this VPN type.
C32 cvpnLicClntInfoTransferReqError	1.3.6.1.4.1.9.9.816.0.4.1.1.18	Counter32	read-only	The total number of Transfer Request packet errros on this client for this VPN type.
ciscoVpnLicUsageMonitorMIBConform	1.3.6.1.4.1.9.9.816.1
ciscoVpnLicUsageMonitorMIBCompliances	1.3.6.1.4.1.9.9.816.1.1
ciscoVpnLicUsageMonitorMIBCompliance	1.3.6.1.4.1.9.9.816.1.1.1			The compliance statement for SNMP entities the Cisco VPN License Usage Monitoring MIB.
ciscoVpnLicUsageMonitorMIBGroups	1.3.6.1.4.1.9.9.816.1.2
ciscoVPNSharedLicUsageMandatoryGroup	1.3.6.1.4.1.9.9.816.1.2.1			This group categorizes mandatory objects pertaining to usage statistics of shared licenses
ciscoVPNSharedLicOptUsageGroup	1.3.6.1.4.1.9.9.816.1.2.2			This group categorizes optional objects pertaining to usage statistics of shared licenses

RFC description

Cisco vendor-private MIB for monitoring VPN license usage and capacity metrics.

Start monitoring Cisco VPN gateways (centralized license management) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-VPN-LIC-USAGE-MONITOR-MIB