diff options
Diffstat (limited to 'MIBS/cisco/CISCO-REMOTE-ACCESS-MONITOR-MIB')
| -rw-r--r-- | MIBS/cisco/CISCO-REMOTE-ACCESS-MONITOR-MIB | 2273 |
1 files changed, 2273 insertions, 0 deletions
diff --git a/MIBS/cisco/CISCO-REMOTE-ACCESS-MONITOR-MIB b/MIBS/cisco/CISCO-REMOTE-ACCESS-MONITOR-MIB new file mode 100644 index 0000000..ba26124 --- /dev/null +++ b/MIBS/cisco/CISCO-REMOTE-ACCESS-MONITOR-MIB @@ -0,0 +1,2273 @@ +-- * $Source$ +-- *------------------------------------------------------------------ +-- * CISCO-REMOTE-ACCESS-MONITOR-MIB.my: Cisco Remote Access MIB +-- * +-- * May 2003, S Ramakrishnan +-- * +-- * Copyright (c) 2003, 2008 by cisco Systems, Inc. +-- * All rights reserved. +-- * +-- *------------------------------------------------------------------ + +CISCO-REMOTE-ACCESS-MONITOR-MIB DEFINITIONS ::= BEGIN + + IMPORTS + MODULE-IDENTITY, + OBJECT-TYPE, + NOTIFICATION-TYPE, + Counter32, + Counter64, + Gauge32, + Integer32, + Unsigned32, + zeroDotZero + FROM SNMPv2-SMI + TEXTUAL-CONVENTION, + TimeStamp, + TruthValue + FROM SNMPv2-TC + MODULE-COMPLIANCE, + OBJECT-GROUP, + NOTIFICATION-GROUP + FROM SNMPv2-CONF + InetAddressType, + InetAddress + FROM INET-ADDRESS-MIB + SnmpAdminString + FROM SNMP-FRAMEWORK-MIB + ciscoMgmt + FROM CISCO-SMI; + + ciscoRemoteAccessMonitorMIB MODULE-IDENTITY + LAST-UPDATED "200402030000Z" + ORGANIZATION "Cisco Systems" + CONTACT-INFO + " + Cisco Systems + Customer Service + + Postal: 170 W Tasman Drive + San Jose, CA 95134 + USA + + Tel: +1 800 553-NETS + E-mail: cs-snmp@cisco.com" + + DESCRIPTION + " + Acronyms and Definitions + The following acronyms and terms are used in this + document: + + IPSec: Secure IP Protocol + + VPN: Virtual Private Network + + RAS: Remote Access Service + + ISP: Internet Service Provider. + + LAN: Local Area Network + + Group: A collection of remote access users grouped + and managed together as a single entity for + administrative convenience. + + Session: A Remote Access Session. + + SVC: SSL VPN Client + + Webvpn: VPN connection established using web browser. + + Overview of the MIB + + This is a MIB Module for monitoring the structures in Virtual + Private Networks based remote access networks. The MIB seeks + to create a common model of Remote Access across implementations + of the service on layer 2 (PPTP, L2TP, L2F), layer 3 (IPsec) and + layer 4 (SSL) virtual private networks. The MIB defines counters + and objects of interest to performance/fault monitoring in a + way which is independent of the technology of the remote access + implementation. + + MIB contains eight major groups of objects which are used + to manage Remote Access connections: + a) Remote Access capacity group + This section defines metrics to gauge the limits of + resources on this device which are critical to RAS + service. + + b) Remote Access resource usage group + This section defines metrics to gauge the usage of + resources on this device which are critical to RAS + service service. + + c) Current activity and performance of RAS service + This section defines metrics to gauge the current + remote access activity. + + d) Remote Access Service failures + This section defines metrics to monitor session + failures and failures of the service itself, measured + at aggregate level, session level and group level. + + e) Security violations in the Remote Access service + This section defines metrics which reflect the state + of remote access service of interest to Security + Operations staff in an enterprise. + + f) Threshold group (allows definition of high water marks) + This section allows the management entity to define + thresholds to set high water marks on critical metrics. + + g) Notifications + This section defines notifications to signal + significant events pertaining to the Remote Access + Service. + " + REVISION "200808280000Z" + DESCRIPTION + "Added crasEmailNumSessions + crasEmailCumulateSessions + crasEmailPeakConcurrentSessions + crasIPSecNumSessions + crasIPSecCumulateSessions + crasIPSecPeakConcurrentSessions + crasL2LNumSessions + crasL2LCumulateSessions + crasL2LPeakConcurrentSessions + crasLBNumSessions + crasLBCumulateSessions + crasLBPeakConcurrentSessions + crasSVCNumSessions + crasSVCCumulateSessions + crasSVCPeakConcurrentSessions + crasWebvpnNumSessions + crasWebvpnCumulateSessions + crasWebvpnPeakConcurrentSessions objects + + " + ::= { ciscoMgmt 392 } + +-- Tentative anchor under ciscoMgmt + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++ +-- Local Textual Conventions +-- +++++++++++++++++++++++++++++++++++++++++++++++++++ + RasProtocol ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "The protocol immediately underlying the remote + access session. + + The value 'other' has been listed to allow for the + MIB to be supported on proprietary protocols not + listed here. + " + SYNTAX INTEGER { + other(1), + ipsec(2), + l2tp(3), + l2tpoveripsec(4), + pptp(5), + l2f(6), + ssl(7) + } + + UserAuthenMethod ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "The mechanism used to authenticate the user. + + The value 'other' has been listed to allow for the + MIB to support proprietary authentication methods + not listed here. + " + SYNTAX INTEGER { + none(1), + other(2), + radius(3), + tacacsplus(4), + kerberos(5), + local(6), + ldap(7), + ntlm(8), + sdi(9) + } + + UserAuthorMethod ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "The mechanism used to authorize the user. + The value 'other' has been listed to allow for the + MIB to support proprietary authorization mechanisms + not listed here. + " + SYNTAX INTEGER { + none(1), + other(2), + radius(3), + tacacsplus(4), + kerberos(5), + local(6), + ldap(7) + } + + SessionEncrAlgo ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "The encryption algorithm used to secure the remote + access session. + " + SYNTAX INTEGER { + none(1), + des(2), + des3(3), + rc4(4), + rc5(5), + idea(6), + cast(7), + blowfish(8), + aes(9) + } + + SessionAuthAlgo ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "The authentication algorithm used by to perform + packet authentication in the remote access session. + + The value 'other' has been listed to allow for the + MIB to support packet validation algorithms not + listed here. + " + SYNTAX INTEGER{ + none(1), + other(2), + hmacMd5(3), + hmacSha(4) + } + + SessionCompressionAlgo ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "The compression algorithm used in the remote access + session. + + The value 'other' has been listed to allow for the + MIB to support compression not listed here. + " + SYNTAX INTEGER{ + none(1), + other(2), + lzs(3) + } + + SessionStatus ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "The status of a remote access session. + + initializing: the session is in the process + of being established + + established : the session is established and + is ready to carry application + traffic. Sessions in this state + may also be referred to as + 'active' sessions. + + terminating : the session is in the process + of termination. + + Objects of this type may be used to terminate an + established session by setting value of the object + to terminating(3). + + Management entity may not write values initializing(1) + or established(2) onto objects of this type. Doing so + would cause the managed entity to return an error + condition. + " + SYNTAX INTEGER { + initializing(1), + established(2), + terminating(3) + } + + SessionIndex ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "The type used to index a remote access session." + SYNTAX Integer32 (1..2147483647) + + FailureRecordIndex ::= TEXTUAL-CONVENTION + STATUS current + DESCRIPTION + "The type used to index failure records in the + failure archive." + SYNTAX Unsigned32 (1..4294967295) + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- Remote Access MIB Object Groups +-- +-- This MIB module contains the following groups: +-- 1) Remote Access capacity group +-- 2) Remote Access resource usage group +-- 3) Current activity and performance +-- 4) Failures +-- 5) Security violations +-- 6) Threshold group +-- 7) Notifications: +-- 7a) Controls +-- 7b) Notification definitions +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ciscoRasMonitorMIBNotifs OBJECT IDENTIFIER + ::= { ciscoRemoteAccessMonitorMIB 0} + + ciscoRasMonitorMIBObjects OBJECT IDENTIFIER + ::= {ciscoRemoteAccessMonitorMIB 1} + + ciscoRasMonitorMIBConform OBJECT IDENTIFIER + ::= { ciscoRemoteAccessMonitorMIB 2 } + + crasCapacity OBJECT IDENTIFIER + ::= { ciscoRasMonitorMIBObjects 1 } + crasResourceUsage OBJECT IDENTIFIER + ::= { ciscoRasMonitorMIBObjects 2 } + crasActivity OBJECT IDENTIFIER + ::= { ciscoRasMonitorMIBObjects 3 } + crasFailures OBJECT IDENTIFIER + ::= { ciscoRasMonitorMIBObjects 4 } + crasSecurity OBJECT IDENTIFIER + ::= { ciscoRasMonitorMIBObjects 5 } + crasThresholds OBJECT IDENTIFIER + ::= { ciscoRasMonitorMIBObjects 6 } + crasNotifCntl OBJECT IDENTIFIER + ::= { ciscoRasMonitorMIBObjects 7 } + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- The Remote Access capacity group. +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + crasMaxSessionsSupportable OBJECT-TYPE + SYNTAX Integer32 (0..2147483647) + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The maximum number of remote access sessions + that may be supported on this device. + + If the device imposes no arbitrary limit on the + maximum number of sessions, it should return a + value of 0." + ::= { crasCapacity 1 } + + crasMaxUsersSupportable OBJECT-TYPE + SYNTAX Integer32 (0..2147483647) + UNITS "Users" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The maximum number of remote access users + for whom Remote Access sessions may be supported on + this device. + + If the device imposes no arbitrary limit on the + maximum number of users, it should return a + value of 0." + ::= { crasCapacity 2 } + + crasMaxGroupsSupportable OBJECT-TYPE + SYNTAX Integer32 (0..2147483647) + UNITS "Groups" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The maximum number of remote access groups + that may be defined on this device. 'Group' + refers to a collection of users grouped together + for administrative convenience. + + If the device imposes no arbitrary limit on + the maximum number of groups, it should return + a value of 0." + ::= { crasCapacity 3 } + + crasNumCryptoAccelerators OBJECT-TYPE + SYNTAX Integer32 (0..2147483647) + UNITS "Users" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The maximum number of hardware crypto accelerators + which can be installed on this device to support + remote access sessions. 'cryptoaccelerator' denotes + a hardware/software entity which the managed entity + uses to offload some or all computations pertaining + to cryptographic operations. + + If the device imposes no arbitrary limit on the + number of crypto accelerators to support Remote Access + function, it should return a value of 0." + ::= { crasCapacity 4 } + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- The Remote Access resource usage group. +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + crasGlobalBwUsage OBJECT-TYPE + SYNTAX Gauge32 + UNITS "MBytes/second" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The average bandwidth used by all the active + remote access sessions." + ::= { crasResourceUsage 1 } + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- The Remote Access activity usage group. +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + crasNumSessions OBJECT-TYPE + SYNTAX Gauge32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of currently active sessions. + + A session is a connection terminating on the managed + entity which has been established to provide remote + access connectivity to a user. A session is said to be + 'active' if it is ready to carry application traffic + between the user and the managed entity. A session which + is not active is defined to be 'dormant'. + " + + ::= { crasActivity 1 } + + crasNumPrevSessions OBJECT-TYPE + SYNTAX Counter32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of remote access sessions which were + previously active but which where since terminated. + + Measured since the last reboot of the device." + ::= { crasActivity 2 } + + crasNumUsers OBJECT-TYPE + SYNTAX Gauge32 + UNITS "Users" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of users who have active sessions. + " + ::= { crasActivity 3 } + + crasNumGroups OBJECT-TYPE + SYNTAX Gauge32 + UNITS "Groups" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of user groups whose members have + active sessions." + ::= { crasActivity 4 } + + crasGlobalInPkts OBJECT-TYPE + SYNTAX Counter64 + UNITS "Packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of packets received by all + currently and previously active remote access + sessions." + ::= { crasActivity 5 } + + crasGlobalOutPkts OBJECT-TYPE + SYNTAX Counter64 + UNITS "Packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of packets transmitted by all + currently and previously active remote access + sessions." + ::= { crasActivity 6 } + + crasGlobalInOctets OBJECT-TYPE + SYNTAX Counter64 + UNITS "Octets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of octets received by all currently + and previously active remote access sessions. + This value is accumulated BEFORE determining whether + or not the packet should be decompressed. + " + ::= { crasActivity 7 } + + crasGlobalInDecompOctets OBJECT-TYPE + SYNTAX Counter64 + UNITS "Octets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of decompressed octets received + by all current and previous remote access sessions. + This value is accumulated AFTER the packet is + decompressed. If compression is not being used, + this value will match the value of crasGlobalInOctets. + " + ::= { crasActivity 8 } + + crasGlobalOutOctets OBJECT-TYPE + SYNTAX Counter64 + UNITS "Octets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of octets transmitted by all + currently and previously active remote access + sessions. + + This value is accumulated AFTER determining + whether or not the packet should be compressed. + " + ::= { crasActivity 9 } + + crasGlobalOutUncompOctets OBJECT-TYPE + SYNTAX Counter64 + UNITS "Octets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of uncompressed octets sent + by all current and previous remote access sessions. + This value is accumulated BEFORE the packet is + compressed. If compression is not being used, this + value will match the value of crasGlobalOutOctets. + " + ::= { crasActivity 10 } + + crasGlobalInDropPkts OBJECT-TYPE + SYNTAX Counter64 + UNITS "Packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of packets which were dropped + during receive processing by all currently and + previously active remote access sessions." + ::= { crasActivity 11 } + + crasGlobalOutDropPkts OBJECT-TYPE + SYNTAX Counter64 + UNITS "Packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of packets which were + dropped during receive processing by all + currently and previously active remote access + sessions." + ::= { crasActivity 12 } + + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- The Remote Access session table +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + crasSessionTable OBJECT-TYPE + SYNTAX SEQUENCE OF CrasSessionEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This table lists all the currently active sessions. + For each session, it lists the attributes (user, + group, protocol, security), statistics (packet and + octets) and status." + ::= { crasActivity 21 } + + crasSessionEntry OBJECT-TYPE + SYNTAX CrasSessionEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Each entry contains the attributes, statistics and + status of an active session." + INDEX { crasUsername, + crasSessionIndex} + ::= { crasSessionTable 1} + + CrasSessionEntry ::= SEQUENCE { + crasUsername SnmpAdminString, + crasGroup SnmpAdminString, + crasSessionIndex SessionIndex, + crasAuthenMethod UserAuthenMethod, + crasAuthorMethod UserAuthorMethod, + crasSessionDuration Counter32, + crasLocalAddressType InetAddressType, + crasLocalAddress InetAddress, + crasISPAddressType InetAddressType, + crasISPAddress InetAddress, + crasSessionProtocol RasProtocol, + crasProtocolElement OBJECT IDENTIFIER, + crasSessionEncryptionAlgo SessionEncrAlgo, + crasSessionPktAuthenAlgo SessionAuthAlgo, + crasSessionCompressionAlgo SessionCompressionAlgo, + crasHeartbeatInterval Unsigned32, + crasClientVendorString SnmpAdminString, + crasClientVersionString SnmpAdminString, + crasClientOSVendorString SnmpAdminString, + crasClientOSVersionString SnmpAdminString, + -- + crasPrimWINSServerAddrType InetAddressType, + crasPrimWINSServer InetAddress, + crasSecWINSServerAddrType InetAddressType, + crasSecWINSServer InetAddress, + crasPrimDNSServerAddrType InetAddressType, + crasPrimDNSServer InetAddress, + crasSecDNSServerAddrType InetAddressType, + crasSecDNSServer InetAddress, + crasDHCPServerAddrType InetAddressType, + crasDHCPServer InetAddress, + -- + crasSessionInPkts Counter64, + crasSessionOutPkts Counter64, + crasSessionInDropPkts Counter64, + crasSessionOutDropPkts Counter64, + crasSessionInOctets Counter64, + crasSessionOutOctets Counter64, + crasSessionState SessionStatus + -- + } + + crasUsername OBJECT-TYPE + SYNTAX SnmpAdminString (SIZE(0..128)) + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The name of the user associated with this remote + access session." + ::= { crasSessionEntry 1 } + + crasGroup OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The name of the user group to which this remote + access session belongs." + ::= { crasSessionEntry 2 } + + crasSessionIndex OBJECT-TYPE + SYNTAX SessionIndex + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Unique index to distinguish between multiple + Remote Access Sessions associated with the same + user. + + The value of crasSessionIndex must increase monotonically + till it wraps. An implementation may choose to wrap this + index before the value of 2147483647. + " + ::= { crasSessionEntry 3 } + + + crasAuthenMethod OBJECT-TYPE + SYNTAX UserAuthenMethod + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The method used to authenticate the user prior to + establishing the session." + ::= { crasSessionEntry 4 } + + crasAuthorMethod OBJECT-TYPE + SYNTAX UserAuthorMethod + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The method used to authorize the user prior to + establishing the session." + ::= { crasSessionEntry 5 } + + crasSessionDuration OBJECT-TYPE + SYNTAX Counter32 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of seconds elapsed since this session + was established." + ::= { crasSessionEntry 6 } + + crasLocalAddressType OBJECT-TYPE + SYNTAX InetAddressType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of the address returned in 'crasLocalAddress'. + " + ::= { crasSessionEntry 7 } + + crasLocalAddress OBJECT-TYPE + SYNTAX InetAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The IP address assigned to the client of this session + in the private network assigned by the managed entity." + ::= { crasSessionEntry 8 } + + crasISPAddressType OBJECT-TYPE + SYNTAX InetAddressType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of the address returned in 'crasISPAddress'. + " + ::= { crasSessionEntry 9 } + + crasISPAddress OBJECT-TYPE + SYNTAX InetAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The IP address of the peer (client) assigned by the ISP. + This is the address of the client device in the public + network." + ::= { crasSessionEntry 10 } + + crasSessionProtocol OBJECT-TYPE + SYNTAX RasProtocol + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The protocol underlying this remote access session." + ::= { crasSessionEntry 11 } + + crasProtocolElement OBJECT-TYPE + SYNTAX OBJECT IDENTIFIER + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "A reference to MIB definitions specific to the protocol + underlying corresponding to the session or tunnel + used to realized the remote access session corresponding + to this conceptual row. + + For instance, if this remote access session is based on + IPsec, then this object must contain the complete + instance identifier of the IPsec tunnel corresponding + to this remote access session. + + If no MIB definitions specific to the underlying + protocol are available, the value should be set to the + OBJECT IDENTIFIER { 0 0 }. + " + DEFVAL { zeroDotZero } + ::= { crasSessionEntry 12 } + + crasSessionEncryptionAlgo OBJECT-TYPE + SYNTAX SessionEncrAlgo + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The algorithm used by this remote access session to + encrypt its payload." + ::= { crasSessionEntry 13 } + + crasSessionPktAuthenAlgo OBJECT-TYPE + SYNTAX SessionAuthAlgo + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The algorithm used by this remote access session to + to validate packets." + ::= { crasSessionEntry 14 } + + crasSessionCompressionAlgo OBJECT-TYPE + SYNTAX SessionCompressionAlgo + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The algorithm used by this remote access session to + compress packets." + ::= { crasSessionEntry 15 } + + crasHeartbeatInterval OBJECT-TYPE + SYNTAX Unsigned32 (0..4294967295) + UNITS "Seconds" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The interval in seconds between two successive heartbeats + employed by this session. Value of 0 denotes that no + heartbeat is used." + ::= { crasSessionEntry 16 } + + crasClientVendorString OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The string identifying the vendor of the client + application initiating this Remote Access session." + ::= { crasSessionEntry 17 } + + crasClientVersionString OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The string identifying the version of the of the client + application initiating the Remote Access session. + This can be used by the administrator to identify which + users are running unsupported client versions." + ::= { crasSessionEntry 18 } + + crasClientOSVendorString OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The string identifying the vendor of the operating system + on which the client application initiating the Remote Access + Session is running." + ::= { crasSessionEntry 19 } + + crasClientOSVersionString OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The string identifying the version of the operating + system of the entity which initiated this Remote Access + session." + ::= { crasSessionEntry 20 } + + crasPrimWINSServerAddrType OBJECT-TYPE + SYNTAX InetAddressType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of the address returned in + 'crasPrimWINSServer'. + " + ::= { crasSessionEntry 21 } + + crasPrimWINSServer OBJECT-TYPE + SYNTAX InetAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The IP address of the primary WINS server assigned + managed entity to this client session." + ::= { crasSessionEntry 22 } + + crasSecWINSServerAddrType OBJECT-TYPE + SYNTAX InetAddressType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of the address returned in + 'crasSecWINSServer'. + " + ::= { crasSessionEntry 23 } + + crasSecWINSServer OBJECT-TYPE + SYNTAX InetAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The IP address of the secondary WINS server assigned + by the managed entity to this client session." + ::= { crasSessionEntry 24 } + + crasPrimDNSServerAddrType OBJECT-TYPE + SYNTAX InetAddressType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of the address returned in + 'crasPrimDNSServer'. + " + ::= { crasSessionEntry 25 } + + crasPrimDNSServer OBJECT-TYPE + SYNTAX InetAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The IP address of the primary DNS server assigned by + the managed entity to this client session." + ::= { crasSessionEntry 26 } + + crasSecDNSServerAddrType OBJECT-TYPE + SYNTAX InetAddressType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of the address returned in + 'crasSecDNSServer'. + " + ::= { crasSessionEntry 27 } + + crasSecDNSServer OBJECT-TYPE + SYNTAX InetAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The IP address of the secondary DNS server assigned + by the managed entity to this client session." + ::= { crasSessionEntry 28 } + + crasDHCPServerAddrType OBJECT-TYPE + SYNTAX InetAddressType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of the address returned in + 'crasDHCPServer'. + " + ::= { crasSessionEntry 29 } + + crasDHCPServer OBJECT-TYPE + SYNTAX InetAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The IP address of the DHCP server assigned by the + managed entity to this client session." + ::= { crasSessionEntry 30 } + + crasSessionInPkts OBJECT-TYPE + SYNTAX Counter64 + UNITS "Packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of packets received by this Remote + Access session." + ::= { crasSessionEntry 31 } + + crasSessionOutPkts OBJECT-TYPE + SYNTAX Counter64 + UNITS "Packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of packets transmitted by this + Remote Access Session." + ::= { crasSessionEntry 32 } + + crasSessionInDropPkts OBJECT-TYPE + SYNTAX Counter64 + UNITS "Packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of packets received for processing + on this session which were dropped by the managed entity." + ::= { crasSessionEntry 33 } + + crasSessionOutDropPkts OBJECT-TYPE + SYNTAX Counter64 + UNITS "Packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of outgoing packets on this session + which were dropped during transmit processing by the + managed entity." + ::= { crasSessionEntry 34 } + + crasSessionInOctets OBJECT-TYPE + SYNTAX Counter64 + UNITS "Octets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of octets received by this Remote + Access Session. + + This value is accumulated BEFORE determining whether + or not the packet should be decompressed. + " + ::= { crasSessionEntry 35 } + + crasSessionOutOctets OBJECT-TYPE + SYNTAX Counter64 + UNITS "Octets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of octets transmitted by this Remote + Access Session. + + This value is accumulated AFTER determining whether + or not the packet should be compressed. + " + ::= { crasSessionEntry 36 } + + crasSessionState OBJECT-TYPE + SYNTAX SessionStatus + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The state of the remote access session corresponding + to this conceptual row. + + The management entity may use this object to terminate + an established session by setting value of the object + to 'terminating'. + " + ::= { crasSessionEntry 37 } + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- The Remote Access session table organized by user group +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + crasActGroupTable OBJECT-TYPE + SYNTAX SEQUENCE OF CrasActGroupEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This table lists all the currently active remote + access user groups. For each group, it lists the + attributes (group, aggregate activity, aggregate + traffic), and status." + ::= { crasActivity 22 } + + crasActGroupEntry OBJECT-TYPE + SYNTAX CrasActGroupEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Each entry contains the attributes, statistics and + status of an active session." + INDEX { crasActGrpName } + ::= { crasActGroupTable 1} + + CrasActGroupEntry ::= SEQUENCE { + crasActGrpName SnmpAdminString, + crasActGrNumUsers Integer32, + crasActGrpInPkts Counter64, + crasActGrpOutPkts Counter64, + crasActGrpInDropPkts Counter64, + crasActGrpOutDropPkts Counter64, + crasActGrpInOctets Counter64, + crasActGrpOutOctets Counter64 + } + + crasActGrpName OBJECT-TYPE + SYNTAX SnmpAdminString (SIZE(0..64)) + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The name of the active user group corresponding to + this entry." + ::= { crasActGroupEntry 1 } + + crasActGrNumUsers OBJECT-TYPE + SYNTAX Integer32 (1..2147483647) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of users in this group currently connected + to the managed device." + ::= { crasActGroupEntry 2 } + + crasActGrpInPkts OBJECT-TYPE + SYNTAX Counter64 + UNITS "Packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of packets received by this session." + ::= { crasActGroupEntry 3 } + + crasActGrpOutPkts OBJECT-TYPE + SYNTAX Counter64 + UNITS "Packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of packets transmitted by this session." + ::= { crasActGroupEntry 4 } + + crasActGrpInDropPkts OBJECT-TYPE + SYNTAX Counter64 + UNITS "Packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of packets dropped by this session + which were received for processing." + ::= { crasActGroupEntry 5 } + + crasActGrpOutDropPkts OBJECT-TYPE + SYNTAX Counter64 + UNITS "Packets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of outgoing packets which were + dropped during transmit processing by this session." + ::= { crasActGroupEntry 6 } + + crasActGrpInOctets OBJECT-TYPE + SYNTAX Counter64 + UNITS "Octets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of octets received by this session." + ::= { crasActGroupEntry 7 } + + crasActGrpOutOctets OBJECT-TYPE + SYNTAX Counter64 + UNITS "Octets" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of octets transmitted by this session." + ::= { crasActGroupEntry 8 } + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- The Remote Access session activity global statistics. +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + crasEmailNumSessions OBJECT-TYPE + SYNTAX Gauge32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of currently active Email proxy sessions." + ::= { crasActivity 23 } + + + crasEmailCumulateSessions OBJECT-TYPE + SYNTAX Counter32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of cumulative Email proxy sessions since system up." + ::= { crasActivity 24 } + + crasEmailPeakConcurrentSessions OBJECT-TYPE + SYNTAX Unsigned32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of peak concurrent Email proxy sessions since system up." + ::= { crasActivity 25 } + + crasIPSecNumSessions OBJECT-TYPE + SYNTAX Gauge32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of currently active IPSec sessions." + ::= { crasActivity 26 } + + + crasIPSecCumulateSessions OBJECT-TYPE + SYNTAX Counter32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of cumulative IPSec sessions since system up." + ::= { crasActivity 27 } + + crasIPSecPeakConcurrentSessions OBJECT-TYPE + SYNTAX Unsigned32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of peak concurrent Email proxy sessions since system up." + ::= { crasActivity 28 } + + crasL2LNumSessions OBJECT-TYPE + SYNTAX Gauge32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of currently active LAN to LAN sessions." + ::= { crasActivity 29 } + + + crasL2LCumulateSessions OBJECT-TYPE + SYNTAX Counter32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of cumulative LAN to LAN sessions since system up." + ::= { crasActivity 30 } + + crasL2LPeakConcurrentSessions OBJECT-TYPE + SYNTAX Unsigned32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of peak concurrent LAN to LAN sessions since system up." + ::= { crasActivity 31 } + + crasLBNumSessions OBJECT-TYPE + SYNTAX Gauge32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of currently active Load Balancing sessions." + ::= { crasActivity 32 } + + + crasLBCumulateSessions OBJECT-TYPE + SYNTAX Counter32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of cumulative Load Balancing sessions since system up." + ::= { crasActivity 33 } + + crasLBPeakConcurrentSessions OBJECT-TYPE + SYNTAX Unsigned32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of peak concurrent Load Balancing sessions since system up." + ::= { crasActivity 34 } + + crasSVCNumSessions OBJECT-TYPE + SYNTAX Gauge32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of currently active SVC sessions." + ::= { crasActivity 35 } + + + crasSVCCumulateSessions OBJECT-TYPE + SYNTAX Counter32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of cumulative SVC sessions since system up." + ::= { crasActivity 36 } + + crasSVCPeakConcurrentSessions OBJECT-TYPE + SYNTAX Unsigned32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of peak concurrent SVC sessions since system up." + ::= { crasActivity 37 } + + crasWebvpnNumSessions OBJECT-TYPE + SYNTAX Gauge32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of currently active Webvpn sessions." + ::= { crasActivity 38 } + + + crasWebvpnCumulateSessions OBJECT-TYPE + SYNTAX Counter32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of cumulative Webvpn sessions since system up." + ::= { crasActivity 39 } + + crasWebvpnPeakConcurrentSessions OBJECT-TYPE + SYNTAX Unsigned32 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of peak concurrent Webvpn sessions since system up." + ::= { crasActivity 40 } + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- Remote Access Failures Group +-- +-- This group consists of: +-- 1) Remote Access global failures +-- 2) Remote Access session failures +-- 3) Remote Access Group failures +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- The global failures group +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + crasFailuresGlobals OBJECT IDENTIFIER + ::= { crasFailures 1 } + + crasNumTotalFailures OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of attempts to establish sessions which + failed, since the last reboot of the managed device." + ::= { crasFailuresGlobals 1 } + + crasNumDeclinedSessions OBJECT-TYPE + SYNTAX Unsigned32 (0..4294967295) + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of session setup attempts, counted since + the last time the notification + 'ciscoRasTooManyFailedAuths' was issued, which were + declined due to authentication or authorization + failure. + " + ::= { crasFailuresGlobals 2 } + + crasNumSetupFailInsufResources OBJECT-TYPE + SYNTAX Counter64 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of session setup attempts that failed + due to insufficient resources." + ::= { crasFailuresGlobals 3 } + + crasNumAbortedSessions OBJECT-TYPE + SYNTAX Counter64 + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of sessions which were successfully + setup but were since terminated abnormally." + ::= { crasFailuresGlobals 4 } + + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- The Failure Global Control Objects +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + crasFailGlobalCntl OBJECT IDENTIFIER + ::= { crasFailures 2 } + + crasFailTableSize OBJECT-TYPE + SYNTAX Unsigned32 (0..4294967295) + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "The window size of the Remote Access Failure tables. + + The failure tables for session and group failures + maintain only the last crasFailTableSize number of + failure records. A value of 0 for this MIB variable + indicates that archiving of the failures is disabled. + + An implementation may choose suitable minimum and + maximum values for this element based on the local + policy and available resources. If an SNMP SET request + specifies a value outside this window for this element, + a BAD VALUE may be returned." + + ::= { crasFailGlobalCntl 1 } + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- The Remote Access Service failure history +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + crasSessFailures OBJECT IDENTIFIER + ::= { crasFailures 3 } + + + crasSessFailTable OBJECT-TYPE + SYNTAX SEQUENCE OF CrasSessFailEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + " + This table records the last 'N' session failures, + where 'N' is the value of the MIB element + 'crasFailTableSize' defined earlier. + + A failure could be a failure to establish a session + ('setup' failure) or a failure of a session after it + was established ('operational' failure). + " + ::= { crasSessFailures 1 } + + crasSessFailEntry OBJECT-TYPE + SYNTAX CrasSessFailEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Each entry contains the attributes associated with + a remote access session failure." + INDEX { crasSessFailIndex } + ::= { crasSessFailTable 1 } + + CrasSessFailEntry ::= SEQUENCE { + crasSessFailIndex FailureRecordIndex, + crasSessFailUsername SnmpAdminString, + crasSessFailGroupname SnmpAdminString, + crasSessFailType INTEGER, + crasSessFailReason INTEGER, + crasSessFailTime TimeStamp, + crasSessFailSessionIndex SessionIndex, + crasSessFailISPAddrType InetAddressType, + crasSessFailISPAddr InetAddress, + crasSessFailLocalAddrType InetAddressType, + crasSessFailLocalAddr InetAddress + } + + crasSessFailIndex OBJECT-TYPE + SYNTAX FailureRecordIndex + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The index of the session failure table. + The value of the index is a number which + begins at one and is incremented with each + session failure. The value of this object will + wrap at 4,294,967,295." + ::= { crasSessFailEntry 1 } + + crasSessFailUsername OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The name of the user associated with this failed + remote access session." + ::= { crasSessFailEntry 2 } + + crasSessFailGroupname OBJECT-TYPE + SYNTAX SnmpAdminString + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The name of the user group to which this failed + remote access session belongs." + ::= { crasSessFailEntry 3 } + + crasSessFailType OBJECT-TYPE + SYNTAX INTEGER{ + setupFailure(1), + operationalFailure(2) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of the failure: + 1 = failure occurred during session setup + 2 = failed occurred after the session was setup + successfully. + " + ::= { crasSessFailEntry 4 } + + crasSessFailReason OBJECT-TYPE + SYNTAX INTEGER{ + other(1), + internalError(2), + authenticationFailure(3), + authorizationFailure(4), + sysCapExceeded(5), + peerAbortRequest(6), + peerLost(7), + operRequest(8) + } + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The reason for the failure. Possible reasons + include: + 1 = other (error which cannot be classified in + any of the types listed below). + 2 = internal error occurred + 3 = failed to authenticate the peer/user + 4 = failed to authorize the peer/user + 5 = system capacity exceeded (memory, cpu, max + users etc) + 6 = peer requested to abort the session or the + setup + 7 = lost peer's heartbeat + 8 = local management request." + ::= { crasSessFailEntry 5 } + + crasSessFailTime OBJECT-TYPE + SYNTAX TimeStamp + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The value of the MIB element 'sysUpTime' + at the time of the failure." + ::= { crasSessFailEntry 6 } + + crasSessFailSessionIndex OBJECT-TYPE + SYNTAX SessionIndex + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The index of the session which failed (in case + this was an operational failure). In case of setup + failures (where the value of 'crasSessFailType' of + this conceptual row is 'operationalFailure'), the + value of this object is undefined and should not be + processed." + ::= { crasSessFailEntry 7 } + + crasSessFailISPAddrType OBJECT-TYPE + SYNTAX InetAddressType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of the address returned in + 'crasSessFailISPAddr'. + " + ::= { crasSessFailEntry 8 } + + crasSessFailISPAddr OBJECT-TYPE + SYNTAX InetAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The public address of the peer." + ::= { crasSessFailEntry 9 } + + crasSessFailLocalAddrType OBJECT-TYPE + SYNTAX InetAddressType + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The type of the address returned in + 'crasSessFailLocalAddr'. + " + ::= { crasSessFailEntry 10 } + + crasSessFailLocalAddr OBJECT-TYPE + SYNTAX InetAddress + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The address assigned to the peer by the local + address management mechanism. In case no address + was assigned to the peer when the failure occurred, + this MIB variable would contain the IPv4 address + value 0.0.0.0" + ::= { crasSessFailEntry 11 } + + + crasFailLastFailIndex OBJECT-TYPE + SYNTAX FailureRecordIndex + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The value of column 'crasSessFailIndex' + corresponding to the last row added to the + crasSessFailTable. + + The value of this object is undefined and should + not be processed by the management entity if the + value of the object 'crasFailTableSize' is 0. + " + ::= { crasSessFailures 2 } + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- Remote Access session failure history, catalogued by +-- user group +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + crasGroupFailures OBJECT IDENTIFIER + ::= { crasFailures 4 } + + crasGrpFailTable OBJECT-TYPE + SYNTAX SEQUENCE OF CrasGrpFailEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "This table records the last 'N' occurrences of + failures (setup or operational) per user group, + where 'N' is the value of the MIB element + 'crasFailTableSize' defined earlier. + + When 'N' entries have been created, the failure + information about a new user group must be created by + deleting the oldest entry in this table. + " + ::= { crasGroupFailures 1 } + + crasGrpFailEntry OBJECT-TYPE + SYNTAX CrasGrpFailEntry + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "Each entry contains the summary of failures for a + specific user group." + INDEX { crasGrpFailGroupname } + ::= { crasGrpFailTable 1 } + + CrasGrpFailEntry ::= SEQUENCE { + crasGrpFailGroupname SnmpAdminString, + crasGrpFailNumFailAuths Counter64, + crasGrpFailNumResourceFailures Counter64, + crasGrpFailNumDeclined Counter64, + crasGrpFailNumTerminatedMgmt Counter64, + crasGrpFailNumTerminatedOther Counter64 + } + + crasGrpFailGroupname OBJECT-TYPE + SYNTAX SnmpAdminString (SIZE(0..64)) + MAX-ACCESS not-accessible + STATUS current + DESCRIPTION + "The name of the user group to which this failure + record corresponds. + + This is the index of the group failure table." + ::= { crasGrpFailEntry 1 } + + crasGrpFailNumFailAuths OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of sessions belonging to this group which + failed authentication; counted since last reboot." + ::= { crasGrpFailEntry 2 } + + crasGrpFailNumResourceFailures OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of session setup attempts which failed due + to insufficient resources." + ::= { crasGrpFailEntry 3 } + + crasGrpFailNumDeclined OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of session setup attempts which were declined + by the managed entity due to local policy. These would + include sessions which were denied due to rate control + settings." + ::= { crasGrpFailEntry 4 } + + crasGrpFailNumTerminatedMgmt OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of established sessions which were terminated + by explicit management action. The termination may have + been triggered locally or based on a request from the peer." + ::= { crasGrpFailEntry 5 } + + crasGrpFailNumTerminatedOther OBJECT-TYPE + SYNTAX Counter64 + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The number of established sessions which were + terminated due to insufficient reasons, internal error + or other reasons not caused by management action." + ::= { crasGrpFailEntry 6 } + + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- RAS Security Group +-- +-- This group consists of: +-- 1) RAS security global counters +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + crasSecurityGlobals OBJECT IDENTIFIER + ::= { crasSecurity 1 } + + crasNumDisabledAccounts OBJECT-TYPE + SYNTAX Counter64 + UNITS "Users" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The total number of user accounts which were + disabled due to repeated login failures." + ::= { crasSecurityGlobals 1 } + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- RAS Thrshold Group +-- +-- This group consists of threshold values for RAS parameters +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + crasThrMaxSessions OBJECT-TYPE + SYNTAX Integer32 (0..2147483647) + UNITS "Sessions" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The maximum number of sessions which are successfully + setup after which the managed entity should alert the + network management entity using the notification + 'ciscoRasTooManySessions', if the notification has been + enabled. + + A value of 0 indicates that the threshold has not been + set." + DEFVAL { 0 } + ::= { crasThresholds 1 } + + crasThrMaxFailedAuths OBJECT-TYPE + SYNTAX Unsigned32 (0..4294967295) + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The value of object 'crasNumDeclinedSessions' at + which the managed entity should alert the network + management entity using the notification + 'ciscoRasTooManyFailedAuths', if the notification + has been enabled. + + A value of 0 indicates that the threshold has not been + set." + DEFVAL { 4294967295 } + ::= { crasThresholds 2 } + + crasThrMaxThroughput OBJECT-TYPE + SYNTAX Integer32 (0..2147483647) + UNITS "Octets Per Second" + MAX-ACCESS read-only + STATUS current + DESCRIPTION + "The highest throughput of the Remote Access Service at + which the managed entity should alert the network management + entity using the notification 'ciscoRasTooHighThroughput', + if the notification has been enabled. + + The notification is disabled till the value of the + aggregate throughput of the managed entity drops below + the value of this object. + + A value of 0 indicates that the threshold has not been + set." + DEFVAL { 0 } + ::= { crasThresholds 3 } + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- Notification Control Group +-- +-- This group of objects controls the sending of +-- Remote Access MIB TRAPs. +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + crasCntlTooManySessions OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object defines the administrative state of + sending the trap to signal the violation of the + Max session threshold." + DEFVAL { false } + ::= { crasNotifCntl 1 } + + crasCntlTooManyFailedAuths OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object defines the administrative state of + sending the trap to signal the violation of the + Max authentication failure count threshold." + DEFVAL { false } + ::= { crasNotifCntl 2 } + + crasCntlTooHighThroughput OBJECT-TYPE + SYNTAX TruthValue + MAX-ACCESS read-write + STATUS current + DESCRIPTION + "This object defines the administrative state of + sending the trap to signal the violation of the + Max throughput threshold." + DEFVAL { false } + ::= { crasNotifCntl 3 } + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- Cisco Remote Access Notifications - TRAPs +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ciscoRasTooManySessions NOTIFICATION-TYPE + OBJECTS { + crasNumSessions, + crasNumUsers, + crasMaxSessionsSupportable, + crasMaxUsersSupportable, + crasThrMaxSessions + } + STATUS current + DESCRIPTION + "This notification is generated when the managed entity + detects that the number of sessions established exceeds + the set threshold crasThrMaxSessions. + + Once the notification has been issued, further + notifications are suppressed till the value returns + below the specified threshold." + ::= { ciscoRasMonitorMIBNotifs 1 } + + ciscoRasTooManyFailedAuths NOTIFICATION-TYPE + OBJECTS { + crasNumDeclinedSessions, + crasThrMaxFailedAuths + } + STATUS current + DESCRIPTION + "This notification is generated when the managed entity + detects that the number of login attempts (over all + users) exceeds the set threshold for throughput + (crasThrMaxFailedAuths). + + Once the notification has been issued, further + notifications are suppressed till the value returns + below the specified threshold." + ::= { ciscoRasMonitorMIBNotifs 2 } + + ciscoRasTooHighThroughput NOTIFICATION-TYPE + OBJECTS { + crasGlobalInOctets, + crasGlobalOutOctets, + crasThrMaxThroughput + } + STATUS current + DESCRIPTION + "This notification is generated when the managed entity + detects that the current throughput of the device exceeds + the set threshold for throughput (crasThrMaxThroughput). + + Once the notification has been issued, further + notiifcations are suppressed till the value returns + below the specified threshold." + ::= { ciscoRasMonitorMIBNotifs 3 } + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- Conformance Information +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ciscoRasMonitorMIBCompliances OBJECT IDENTIFIER + ::= { ciscoRasMonitorMIBConform 1 } + + ciscoRasMonitorMIBGroups OBJECT IDENTIFIER + ::= { ciscoRasMonitorMIBConform 2 } + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- Compliance Statements +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ciscoRasMonitorMIBCompliance MODULE-COMPLIANCE + STATUS deprecated + DESCRIPTION + "The compliance statement for SNMP entities + the Cisco Remote Access Monitoring MIB." + + MODULE -- this module + MANDATORY-GROUPS { + ciscoRasCapacityGroup, + ciscoRasResourceUsageGroup, + ciscoRasActivityGroup, + ciscoRasMandatoryFailureGroup + } + + GROUP ciscoRasGrpActivityGroup + DESCRIPTION + "This group is optional." + + GROUP ciscoRasOptionalFailureGroup + DESCRIPTION + "This group is optional." + + GROUP ciscoRasSecurityGroup + DESCRIPTION + "This group is optional." + + GROUP ciscoRasThresholdsGroup + DESCRIPTION + "This group is optional." + + GROUP ciscoRasNotificationsGroup + DESCRIPTION + "This group is mandatory if and only if + the SNMP agent on the managed entity + implements the group + 'ciscoRasThresholdsGroup'." + + GROUP ciscoRasNotificationCntlGroup + DESCRIPTION + "This group is mandatory if and only if + the SNMP agent on the managed entity + implements the group + 'ciscoRasNotificationsGroup'." + + OBJECT crasSessionState + MIN-ACCESS read-only + DESCRIPTION + "Write access is not required." + + + OBJECT crasCntlTooManySessions + MIN-ACCESS read-only + DESCRIPTION + "Write access is not required." + + OBJECT crasCntlTooManyFailedAuths + MIN-ACCESS read-only + DESCRIPTION + "Write access is not required." + + OBJECT crasCntlTooHighThroughput + MIN-ACCESS read-only + DESCRIPTION + "Write access is not required." + + ::= { ciscoRasMonitorMIBCompliances 1 } + + ciscoRasMonitorMIBComplianceRev1 MODULE-COMPLIANCE + STATUS current + DESCRIPTION + "The compliance statement for SNMP entities + the Cisco Remote Access Monitoring MIB." + + MODULE -- this module + MANDATORY-GROUPS { + ciscoRasCapacityGroup, + ciscoRasResourceUsageGroup, + ciscoRasActivityGroup, + ciscoRasActivityGroupRev1, + ciscoRasMandatoryFailureGroup + } + + GROUP ciscoRasGrpActivityGroup + DESCRIPTION + "This group is optional." + + GROUP ciscoRasOptionalFailureGroup + DESCRIPTION + "This group is optional." + + GROUP ciscoRasSecurityGroup + DESCRIPTION + "This group is optional." + + GROUP ciscoRasThresholdsGroup + DESCRIPTION + "This group is optional." + + GROUP ciscoRasNotificationsGroup + DESCRIPTION + "This group is mandatory if and only if + the SNMP agent on the managed entity + implements the group + 'ciscoRasThresholdsGroup'." + + GROUP ciscoRasNotificationCntlGroup + DESCRIPTION + "This group is mandatory if and only if + the SNMP agent on the managed entity + implements the group + 'ciscoRasNotificationsGroup'." + + OBJECT crasSessionState + MIN-ACCESS read-only + DESCRIPTION + "Write access is not required." + + + OBJECT crasCntlTooManySessions + MIN-ACCESS read-only + DESCRIPTION + "Write access is not required." + + OBJECT crasCntlTooManyFailedAuths + MIN-ACCESS read-only + DESCRIPTION + "Write access is not required." + + OBJECT crasCntlTooHighThroughput + MIN-ACCESS read-only + DESCRIPTION + "Write access is not required." + + ::= { ciscoRasMonitorMIBCompliances 2 } + +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ +-- Units of Conformance +-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ciscoRasCapacityGroup OBJECT-GROUP + OBJECTS { + -- The RAS capacity group + crasMaxSessionsSupportable , + crasMaxUsersSupportable , + crasMaxGroupsSupportable , + crasNumCryptoAccelerators + } + STATUS current + DESCRIPTION + "This group consists of the MIB objects pertaining + to Remote Access Service capacity parameters defined + in the Cisco Remote Access MIB." + ::= { ciscoRasMonitorMIBGroups 1 } + + ciscoRasResourceUsageGroup OBJECT-GROUP + OBJECTS { + crasGlobalBwUsage + } + STATUS current + DESCRIPTION + "This group consists of the MIB objects pertaining + to Remote Access Service resource usage parameters + defined in the Cisco Remote Access MIB." + ::= { ciscoRasMonitorMIBGroups 2 } + + ciscoRasActivityGroup OBJECT-GROUP + OBJECTS { + crasNumSessions , + crasNumPrevSessions , + crasNumUsers , + crasGlobalInPkts , + crasGlobalOutPkts , + crasGlobalInOctets , + crasGlobalOutOctets , + crasGlobalInDecompOctets, + crasGlobalOutUncompOctets, + crasGlobalInDropPkts , + crasGlobalOutDropPkts , + crasGroup , + crasAuthenMethod , + crasAuthorMethod , + crasSessionDuration , + crasLocalAddressType, + crasLocalAddress , + crasISPAddressType , + crasISPAddress , + crasSessionProtocol , + crasProtocolElement, + crasSessionEncryptionAlgo , + crasSessionPktAuthenAlgo , + crasSessionCompressionAlgo , + crasHeartbeatInterval , + crasClientVendorString , + crasClientVersionString , + crasClientOSVendorString , + crasClientOSVersionString , + -- + crasPrimWINSServerAddrType , + crasPrimWINSServer , + crasSecWINSServerAddrType , + crasSecWINSServer , + crasPrimDNSServerAddrType, + crasPrimDNSServer , + crasSecDNSServerAddrType , + crasSecDNSServer , + crasDHCPServerAddrType , + crasDHCPServer , + -- + crasSessionInPkts , + crasSessionOutPkts , + crasSessionInDropPkts , + crasSessionOutDropPkts , + crasSessionInOctets , + crasSessionOutOctets, + crasSessionState + -- + } + STATUS current + DESCRIPTION + "This group consists of the MIB objects pertaining + to the Cisco Remote Access MIB Activity group. + + Following are definitions of some terms used in + this compliance group: + + User: + A remote access user. + + Group: + A collection of remote access users grouped + and managed together as a single entity for + administrative convenience. + + ISP: + Internet Service Provider. + + Crypto Accelerator + 'Crypto Accelerator' denotes a device which + the managed entity uses to offload some or all + computations pertaining to cryptographic + operations. + + Session + A connection terminating on the managed device + which has been established to provide remote access + connectivity to a user. + " + ::= { ciscoRasMonitorMIBGroups 3 } + + ciscoRasGrpActivityGroup OBJECT-GROUP + OBJECTS { + crasNumGroups, + crasActGrNumUsers, + crasActGrpInPkts, + crasActGrpOutPkts, + crasActGrpInDropPkts, + crasActGrpOutDropPkts, + crasActGrpInOctets, + crasActGrpOutOctets + } + STATUS current + DESCRIPTION + "This group consists of the MIB objects pertaining + to activity of user groups. + " + ::= { ciscoRasMonitorMIBGroups 4 } + + + ciscoRasMandatoryFailureGroup OBJECT-GROUP + OBJECTS { + crasNumTotalFailures, + crasNumDeclinedSessions, + crasNumAbortedSessions, + crasFailTableSize + } + STATUS current + DESCRIPTION + "This group categorizes objects pertaining to + failures in the Remote Access Service which are + essential for successful monitoring of the + service. + " + ::= { ciscoRasMonitorMIBGroups 5 } + + ciscoRasOptionalFailureGroup OBJECT-GROUP + OBJECTS { + crasNumSetupFailInsufResources, + crasSessFailUsername, + crasSessFailGroupname, + crasSessFailType, + crasSessFailReason, + crasSessFailTime, + crasSessFailSessionIndex, + crasSessFailISPAddr, + crasSessFailLocalAddr, + crasSessFailISPAddrType, + crasSessFailLocalAddrType, + crasFailLastFailIndex, + crasGrpFailNumFailAuths, + crasGrpFailNumResourceFailures, + crasGrpFailNumDeclined, + crasGrpFailNumTerminatedMgmt, + crasGrpFailNumTerminatedOther + } + STATUS current + DESCRIPTION + "This group categorizes optional objects pertaining + to failures in the Remote Access Service." + ::= { ciscoRasMonitorMIBGroups 6 } + + ciscoRasSecurityGroup OBJECT-GROUP + OBJECTS { + crasNumDisabledAccounts + } + STATUS current + DESCRIPTION + "This group categorizes objects pertaining to the + monitoring state of security in the Remote Access + Service." + ::= { ciscoRasMonitorMIBGroups 7 } + + ciscoRasThresholdsGroup OBJECT-GROUP + OBJECTS { + crasThrMaxSessions, + crasThrMaxFailedAuths, + crasThrMaxThroughput + } + STATUS current + DESCRIPTION + "This group categorizes objects which are used to + establish baseline values of metrics instrumenting + the Remote Access Service." + ::= { ciscoRasMonitorMIBGroups 8 } + + ciscoRasNotificationCntlGroup OBJECT-GROUP + OBJECTS { + crasCntlTooManySessions, + crasCntlTooManyFailedAuths, + crasCntlTooHighThroughput + } + STATUS current + DESCRIPTION + "This group of objects controls the sending of + notifications defined in this MIB module." + ::= { ciscoRasMonitorMIBGroups 9 } + + ciscoRasNotificationsGroup NOTIFICATION-GROUP + NOTIFICATIONS { + ciscoRasTooHighThroughput, + ciscoRasTooManyFailedAuths, + ciscoRasTooManySessions + } + STATUS current + DESCRIPTION + "This group contains the notifications for the + Remote Access MIB." + ::= { ciscoRasMonitorMIBGroups 10 } + + ciscoRasActivityGroupRev1 OBJECT-GROUP + OBJECTS { + crasEmailNumSessions, + crasEmailCumulateSessions, + crasEmailPeakConcurrentSessions, + crasIPSecNumSessions, + crasIPSecCumulateSessions, + crasIPSecPeakConcurrentSessions, + crasL2LNumSessions, + crasL2LCumulateSessions, + crasL2LPeakConcurrentSessions, + crasLBNumSessions, + crasLBCumulateSessions, + crasLBPeakConcurrentSessions, + crasSVCNumSessions, + crasSVCCumulateSessions, + crasSVCPeakConcurrentSessions, + crasWebvpnNumSessions, + crasWebvpnCumulateSessions, + crasWebvpnPeakConcurrentSessions + } + STATUS current + DESCRIPTION + "This group contains activity information related + to sessions." + ::= { ciscoRasMonitorMIBGroups 11 } + +END |