Cisco VPDN Tunnels & Sessions Template

[mjc]

pretty self explanatory

tunnels and sessions are stacked



like what you see?

download the xml template


--matt

[Kenny]

Nice template. Unfortunatly we have 2 AS5400s which keep the info at a different OID (the Cisco site defines this different OID as "deprecated") than in this template. Other AS5400 don't have this issue, and all our AS5400s have the same IOS.

Is there some possibility to get this template to figure out where this info (or at which OID) is kept?

[knobdy]

Any way to get an update to this template for g version? Getting xml parse error and have to assume that's the cause?...

[mjc]

Nice template. Unfortunatly we have 2 AS5400s which keep the info at a different OID (the Cisco site defines this different OID as "deprecated") than in this template. Other AS5400 don't have this issue, and all our AS5400s have the same IOS.

Is there some possibility to get this template to figure out where this info (or at which OID) is kept?

my first thing would be to say its an old ios, but youve said they are all running same ios and also they are all the same platform, so thats a bit wierd.. the different oid that is deprecated, do you have it handy?

if you compare a working and non working, are there any major hardware differences? show version, show inventory raw should give you a good idea. also if you snmp walk to the devices see differences that sticks out?

the oids i am looking at for this are from CISCO-VPDN-MGMT-MIB

.1.3.6.1.4.1.9.10.24.1.1.4.1.2.2 -> cvpdnSystemTunnelTotal.l2tp
.1.3.6.1.4.1.9.10.24.1.1.4.1.3.2 -> cvpdnSystemSessionTotal.l2tp

[mjc]

Any way to get an update to this template for g version? Getting xml parse error and have to assume that's the cause?...

im currently running cacti-0.8.6g-1 with recommended patches.

ive re-exported the graph template and dependancies if you want to try again and let me know how you go?

i did find there was problems with xml templates failing to import due to poor escaping by cacti (see but 0000582) which is to be fixed in 0.8.6h

[knobdy]

where is the update, under the original link?

[mjc]

where is the update, under the original link?

yes the original link has been updated.

-rw-r--r-- 1 matt matt 14454 Dec 2 16:20 cacti_graph_template_cisco_vpdn_tunnels_and_sessions.xml

[Kenny]

the oids i am looking at for this are from CISCO-VPDN-MGMT-MIB

.1.3.6.1.4.1.9.10.24.1.1.4.1.2.2 -> cvpdnSystemTunnelTotal.l2tp
.1.3.6.1.4.1.9.10.24.1.1.4.1.3.2 -> cvpdnSystemSessionTotal.l2tp

Our working AS5400:

Code: Select all

# snmpwalk -v 1 -c public AS001 .1.3.6.1.4.1.9.10.24.1.1
SNMPv2-SMI-v1::enterprises.9.10.24.1.1.1.0 = Gauge32: 0
SNMPv2-SMI-v1::enterprises.9.10.24.1.1.2.0 = Gauge32: 0
SNMPv2-SMI-v1::enterprises.9.10.24.1.1.3.0 = Counter32: 0
SNMPv2-SMI-v1::enterprises.9.10.24.1.1.4.1.2.2 = Gauge32: 3
SNMPv2-SMI-v1::enterprises.9.10.24.1.1.4.1.3.2 = Gauge32: 6
SNMPv2-SMI-v1::enterprises.9.10.24.1.1.4.1.4.2 = Counter32: 0

And the non-working AS5400:

Code: Select all

# snmpwalk -v 1 -c public AS002 .1.3.6.1.4.1.9.10.24.1.1
SNMPv2-SMI-v1::enterprises.9.10.24.1.1.1.0 = Gauge32: 0
SNMPv2-SMI-v1::enterprises.9.10.24.1.1.2.0 = Gauge32: 0
SNMPv2-SMI-v1::enterprises.9.10.24.1.1.3.0 = Counter32: 0

Same hardware (other than a system-board revision), same IOS.

Maybe a differnce can be found in the fact that AS001 is used for end-user dial-in (through ISDN or analog), and AS002 is used for dial-in by Cisco800's...

[knobdy]

Okay, so I've had this template running for awhile under h and I've never gotten any data back. If I run an snmpwalk against the router for the OID in the template I get a response. However I've noticed that the OID for both sessions and tunnels (atleast in mine) are the same OID. Checking Cisco's site, I don't even see an OID for sessions?

1.3.6.1.4.1.9.9.171.1.3.1.1

I'm also wondering if anyone has come up with a way to graph bandwidth useage for a particular VPN tunnel. We have VPNs terminating on two routers, two PIX firewalls and three vpn concentrators.

Thus far the only thing I've seen that can do this is CiscoWorks - and I'm not sure how it does it.

[mjc]

Okay, so I've had this template running for awhile under h and I've never gotten any data back. If I run an snmpwalk against the router for the OID in the template I get a response. However I've noticed that the OID for both sessions and tunnels (atleast in mine) are the same OID.

addressing this one first, im not sure how thats come about. ive examined the xml template from the download link and had a look at it in a text editor and it has the two oids as

<item_000>
<data_input_field_id>hash_0700104276a5ec6e3fe33995129041b1909762</data_input_field_id>
<t_value/>
<value>.1.3.6.1.4.1.9.10.24.1.1.4.1.3.2</value>
</item_000>

and

<item_000>
<data_input_field_id>hash_0700104276a5ec6e3fe33995129041b1909762</data_input_field_id>
<t_value/>
<value>.1.3.6.1.4.1.9.10.24.1.1.4.1.2.2</value>
</item_000>

so it should work?? ive been meaning to import this template onto a fresh cacti install to be doubly sure it works ok, just havent had time..

moving on.

Checking Cisco's site, I don't even see an OID for sessions?

1.3.6.1.4.1.9.9.171.1.3.1.1

are you looking for VPDN sessions or VPN sessions?

the oid you are referring to is defined in CISCO-IPSEC-FLOW-MONITOR-MIIB as

cipSecGlobalActiveTunnels OBJECT-TYPE
SYNTAX Gauge32
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The total number of currently active
IPsec Phase-2 Tunnels."
::= { cipSecGlobalStats 1 }


note: my xml template will NOT help you graph established IPSEC tunnels.

the template is to graph cisco's VPDN tunneling implementation and uses the CISCO-VPDN-MGMT-MIB to graph the L2TP tunnels and encapsulated VPDN sessions.

the two oid's my script should be graphing are

cvpdnSystemTunnelTotal OBJECT-TYPE
SYNTAX Gauge
-- Units
-- tunnels
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The total number of VPDN tunnels that are currently
active of this tunnel type."
::= { cvpdnSystemEntry 2 }

cvpdnSystemSessionTotal OBJECT-TYPE
SYNTAX Gauge
-- Units
-- sessions
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The total number of active sessions in all the active VPDN
tunnels of this tunnel type."
::= { cvpdnSystemEntry 3 }

[knobdy]

addressing this one first, im not sure how thats come about. ive examined the xml template from the download link and had a look at it in a text editor and it has the two oids as

This would certainly play a part in the rest of the issues! I'll download and re-import..see what happens. Not sure how it could have changed...

[devnull01]

Hi All,

This is exactly what I need. I could try and add the OID manually but its a pain and I've never really done it before so I was hoping that someone could save me some time and have a copy of the XML for this so I can import it. It seems the download link has been removed as it's page cannot be displayed.

Thanks in advance for any help guys.