-- MIB file created 04-Sep-2008 11:29:52, by -- SMICng version 2.2.11-beta(PRO)(Solaris), January 20, 2001. Enterprise key cisco.com CISCO-REMOTE-ACCESS-MONITOR-MIB DEFINITIONS ::= BEGIN -- From file: "CISCO-REMOTE-ACCESS-MONITOR-MIB.my" -- Compile options "4 7 F H N O W 03 06 0B 0G 0N 0T" IMPORTS -- zeroDotZero -- FROM SNMPv2-SMI-v1 TimeStamp, TruthValue FROM SNMPv2-TC-v1 InetAddressType, InetAddress FROM INET-ADDRESS-MIB SnmpAdminString FROM SNMP-FRAMEWORK-MIB ciscoMgmt FROM CISCO-SMI Counter, Gauge FROM RFC1155-SMI OBJECT-TYPE FROM RFC-1212 TRAP-TYPE FROM RFC-1215; ciscoRemoteAccessMonitorMIB OBJECT IDENTIFIER ::= { ciscoMgmt 392 } -- MODULE-IDENTITY -- LastUpdated -- 200402030000Z -- OrgName -- Cisco Systems -- ContactInfo -- -- Cisco Systems -- Customer Service -- -- Postal: 170 W Tasman Drive -- San Jose, CA 95134 -- USA -- -- Tel: +1 800 553-NETS -- E-mail: cs-snmp@cisco.com -- Descr -- -- Acronyms and Definitions -- The following acronyms and terms are used in this -- document: -- -- IPSec: Secure IP Protocol -- -- VPN: Virtual Private Network -- -- RAS: Remote Access Service -- -- ISP: Internet Service Provider. -- -- LAN: Local Area Network -- -- Group: A collection of remote access users grouped -- and managed together as a single entity for -- administrative convenience. -- -- Session: A Remote Access Session. -- -- SVC: SSL VPN Client -- -- Webvpn: VPN connection established using web browser. -- -- Overview of the MIB -- -- This is a MIB Module for monitoring the structures in Virtual -- Private Networks based remote access networks. The MIB seeks -- to create a common model of Remote Access across implementations -- of the service on layer 2 (PPTP, L2TP, L2F), layer 3 (IPsec) and -- layer 4 (SSL) virtual private networks. The MIB defines counters -- and objects of interest to performance/fault monitoring in a -- way which is independent of the technology of the remote access -- implementation. -- -- MIB contains eight major groups of objects which are used -- to manage Remote Access connections: -- a) Remote Access capacity group -- This section defines metrics to gauge the limits of -- resources on this device which are critical to RAS -- service. -- -- b) Remote Access resource usage group -- This section defines metrics to gauge the usage of -- resources on this device which are critical to RAS -- service service. -- -- c) Current activity and performance of RAS service -- This section defines metrics to gauge the current -- remote access activity. -- -- d) Remote Access Service failures -- This section defines metrics to monitor session -- failures and failures of the service itself, measured -- at aggregate level, session level and group level. -- -- e) Security violations in the Remote Access service -- This section defines metrics which reflect the state -- of remote access service of interest to Security -- Operations staff in an enterprise. -- -- f) Threshold group (allows definition of high water marks) -- This section allows the management entity to define -- thresholds to set high water marks on critical metrics. -- -- g) Notifications -- This section defines notifications to signal -- significant events pertaining to the Remote Access -- Service. -- RevDate -- 200808280000Z -- RevDescr -- Added crasEmailNumSessions -- crasEmailCumulateSessions -- crasEmailPeakConcurrentSessions -- crasIPSecNumSessions -- crasIPSecCumulateSessions -- crasIPSecPeakConcurrentSessions -- crasL2LNumSessions -- crasL2LCumulateSessions -- crasL2LPeakConcurrentSessions -- crasLBNumSessions -- crasLBCumulateSessions -- crasLBPeakConcurrentSessions -- crasSVCNumSessions -- crasSVCCumulateSessions -- crasSVCPeakConcurrentSessions -- crasWebvpnNumSessions -- crasWebvpnCumulateSessions -- crasWebvpnPeakConcurrentSessions objects -- ciscoRasMonitorMIBNotifs OBJECT IDENTIFIER ::= { ciscoRemoteAccessMonitorMIB 0 } ciscoRasMonitorMIBObjects OBJECT IDENTIFIER ::= { ciscoRemoteAccessMonitorMIB 1 } ciscoRasMonitorMIBConform OBJECT IDENTIFIER ::= { ciscoRemoteAccessMonitorMIB 2 } crasCapacity OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBObjects 1 } crasResourceUsage OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBObjects 2 } crasActivity OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBObjects 3 } crasFailures OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBObjects 4 } crasSecurity OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBObjects 5 } crasThresholds OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBObjects 6 } crasNotifCntl OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBObjects 7 } crasFailuresGlobals OBJECT IDENTIFIER ::= { crasFailures 1 } crasFailGlobalCntl OBJECT IDENTIFIER ::= { crasFailures 2 } crasSessFailures OBJECT IDENTIFIER ::= { crasFailures 3 } crasGroupFailures OBJECT IDENTIFIER ::= { crasFailures 4 } crasSecurityGlobals OBJECT IDENTIFIER ::= { crasSecurity 1 } ciscoRasMonitorMIBCompliances OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBConform 1 } ciscoRasMonitorMIBGroups OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBConform 2 } RasProtocol ::= INTEGER { other(1), ipsec(2), l2tp(3), l2tpoveripsec(4), pptp(5), l2f(6), ssl(7) } -- TEXTUAL-CONVENTION -- Status -- mandatory -- Descr -- The protocol immediately underlying the remote -- access session. -- -- The value 'other' has been listed to allow for the -- MIB to be supported on proprietary protocols not -- listed here. UserAuthenMethod ::= INTEGER { none(1), other(2), radius(3), tacacsplus(4), kerberos(5), local(6), ldap(7), ntlm(8), sdi(9) } -- TEXTUAL-CONVENTION -- Status -- mandatory -- Descr -- The mechanism used to authenticate the user. -- -- The value 'other' has been listed to allow for the -- MIB to support proprietary authentication methods -- not listed here. UserAuthorMethod ::= INTEGER { none(1), other(2), radius(3), tacacsplus(4), kerberos(5), local(6), ldap(7) } -- TEXTUAL-CONVENTION -- Status -- mandatory -- Descr -- The mechanism used to authorize the user. -- The value 'other' has been listed to allow for the -- MIB to support proprietary authorization mechanisms -- not listed here. SessionEncrAlgo ::= INTEGER { none(1), des(2), des3(3), rc4(4), rc5(5), idea(6), cast(7), blowfish(8), aes(9) } -- TEXTUAL-CONVENTION -- Status -- mandatory -- Descr -- The encryption algorithm used to secure the remote -- access session. SessionAuthAlgo ::= INTEGER { none(1), other(2), hmacMd5(3), hmacSha(4) } -- TEXTUAL-CONVENTION -- Status -- mandatory -- Descr -- The authentication algorithm used by to perform -- packet authentication in the remote access session. -- -- The value 'other' has been listed to allow for the -- MIB to support packet validation algorithms not -- listed here. SessionCompressionAlgo ::= INTEGER { none(1), other(2), lzs(3) } -- TEXTUAL-CONVENTION -- Status -- mandatory -- Descr -- The compression algorithm used in the remote access -- session. -- -- The value 'other' has been listed to allow for the -- MIB to support compression not listed here. SessionStatus ::= INTEGER { initializing(1), established(2), terminating(3) } -- TEXTUAL-CONVENTION -- Status -- mandatory -- Descr -- The status of a remote access session. -- -- initializing: the session is in the process -- of being established -- -- established : the session is established and -- is ready to carry application -- traffic. Sessions in this state -- may also be referred to as -- 'active' sessions. -- -- terminating : the session is in the process -- of termination. -- -- Objects of this type may be used to terminate an -- established session by setting value of the object -- to terminating(3). -- -- Management entity may not write values initializing(1) -- or established(2) onto objects of this type. Doing so -- would cause the managed entity to return an error -- condition. SessionIndex ::= INTEGER(1..2147483647) -- TEXTUAL-CONVENTION -- Status -- mandatory -- Descr -- The type used to index a remote access session. FailureRecordIndex ::= Gauge(1..4294967295) -- TEXTUAL-CONVENTION -- Status -- mandatory -- Descr -- The type used to index failure records in the -- failure archive. crasMaxSessionsSupportable OBJECT-TYPE SYNTAX INTEGER(0..2147483647) -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The maximum number of remote access sessions that may be supported on this device. If the device imposes no arbitrary limit on the maximum number of sessions, it should return a value of 0." ::= { crasCapacity 1 } crasMaxUsersSupportable OBJECT-TYPE SYNTAX INTEGER(0..2147483647) -- Units -- Users ACCESS read-only STATUS mandatory DESCRIPTION "The maximum number of remote access users for whom Remote Access sessions may be supported on this device. If the device imposes no arbitrary limit on the maximum number of users, it should return a value of 0." ::= { crasCapacity 2 } crasMaxGroupsSupportable OBJECT-TYPE SYNTAX INTEGER(0..2147483647) -- Units -- Groups ACCESS read-only STATUS mandatory DESCRIPTION "The maximum number of remote access groups that may be defined on this device. 'Group' refers to a collection of users grouped together for administrative convenience. If the device imposes no arbitrary limit on the maximum number of groups, it should return a value of 0." ::= { crasCapacity 3 } crasNumCryptoAccelerators OBJECT-TYPE SYNTAX INTEGER(0..2147483647) -- Units -- Users ACCESS read-only STATUS mandatory DESCRIPTION "The maximum number of hardware crypto accelerators which can be installed on this device to support remote access sessions. 'cryptoaccelerator' denotes a hardware/software entity which the managed entity uses to offload some or all computations pertaining to cryptographic operations. If the device imposes no arbitrary limit on the number of crypto accelerators to support Remote Access function, it should return a value of 0." ::= { crasCapacity 4 } crasGlobalBwUsage OBJECT-TYPE SYNTAX Gauge -- Units -- MBytes/second ACCESS read-only STATUS mandatory DESCRIPTION "The average bandwidth used by all the active remote access sessions." ::= { crasResourceUsage 1 } crasNumSessions OBJECT-TYPE SYNTAX Gauge -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of currently active sessions. A session is a connection terminating on the managed entity which has been established to provide remote access connectivity to a user. A session is said to be 'active' if it is ready to carry application traffic between the user and the managed entity. A session which is not active is defined to be 'dormant'." ::= { crasActivity 1 } crasNumPrevSessions OBJECT-TYPE SYNTAX Counter -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of remote access sessions which were previously active but which where since terminated. Measured since the last reboot of the device." ::= { crasActivity 2 } crasNumUsers OBJECT-TYPE SYNTAX Gauge -- Units -- Users ACCESS read-only STATUS mandatory DESCRIPTION "The number of users who have active sessions." ::= { crasActivity 3 } crasNumGroups OBJECT-TYPE SYNTAX Gauge -- Units -- Groups ACCESS read-only STATUS mandatory DESCRIPTION "The number of user groups whose members have active sessions." ::= { crasActivity 4 } crasGlobalInPkts OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Packets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of packets received by all currently and previously active remote access sessions." ::= { crasActivity 5 } crasGlobalOutPkts OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Packets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of packets transmitted by all currently and previously active remote access sessions." ::= { crasActivity 6 } crasGlobalInOctets OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Octets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of octets received by all currently and previously active remote access sessions. This value is accumulated BEFORE determining whether or not the packet should be decompressed." ::= { crasActivity 7 } crasGlobalInDecompOctets OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Octets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of decompressed octets received by all current and previous remote access sessions. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of crasGlobalInOctets. " ::= { crasActivity 8 } crasGlobalOutOctets OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Octets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of octets transmitted by all currently and previously active remote access sessions. This value is accumulated AFTER determining whether or not the packet should be compressed. " ::= { crasActivity 9 } crasGlobalOutUncompOctets OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Octets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of uncompressed octets sent by all current and previous remote access sessions. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of crasGlobalOutOctets. " ::= { crasActivity 10 } crasGlobalInDropPkts OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Packets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of packets which were dropped during receive processing by all currently and previously active remote access sessions." ::= { crasActivity 11 } crasGlobalOutDropPkts OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Packets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of packets which were dropped during receive processing by all currently and previously active remote access sessions." ::= { crasActivity 12 } crasSessionTable OBJECT-TYPE SYNTAX SEQUENCE OF CrasSessionEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table lists all the currently active sessions. For each session, it lists the attributes (user, group, protocol, security), statistics (packet and octets) and status." ::= { crasActivity 21 } crasSessionEntry OBJECT-TYPE SYNTAX CrasSessionEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "Each entry contains the attributes, statistics and status of an active session." INDEX { crasUsername, crasSessionIndex } ::= { crasSessionTable 1 } CrasSessionEntry ::= SEQUENCE { crasUsername SnmpAdminString, crasGroup SnmpAdminString, crasSessionIndex SessionIndex, crasAuthenMethod UserAuthenMethod, crasAuthorMethod UserAuthorMethod, crasSessionDuration Counter, crasLocalAddressType InetAddressType, crasLocalAddress InetAddress, crasISPAddressType InetAddressType, crasISPAddress InetAddress, crasSessionProtocol RasProtocol, crasProtocolElement OBJECT IDENTIFIER, crasSessionEncryptionAlgo SessionEncrAlgo, crasSessionPktAuthenAlgo SessionAuthAlgo, crasSessionCompressionAlgo SessionCompressionAlgo, crasHeartbeatInterval Gauge, crasClientVendorString SnmpAdminString, crasClientVersionString SnmpAdminString, crasClientOSVendorString SnmpAdminString, crasClientOSVersionString SnmpAdminString, crasPrimWINSServerAddrType InetAddressType, crasPrimWINSServer InetAddress, crasSecWINSServerAddrType InetAddressType, crasSecWINSServer InetAddress, crasPrimDNSServerAddrType InetAddressType, crasPrimDNSServer InetAddress, crasSecDNSServerAddrType InetAddressType, crasSecDNSServer InetAddress, crasDHCPServerAddrType InetAddressType, crasDHCPServer InetAddress, crasSessionInPkts Counter, crasSessionOutPkts Counter, crasSessionInDropPkts Counter, crasSessionOutDropPkts Counter, crasSessionInOctets Counter, crasSessionOutOctets Counter, crasSessionState SessionStatus } crasUsername OBJECT-TYPE SYNTAX SnmpAdminString(SIZE(0..128)) -- Rsyntax OCTET STRING(SIZE(0..128)) ACCESS not-accessible STATUS mandatory DESCRIPTION "The name of the user associated with this remote access session." ::= { crasSessionEntry 1 } crasGroup OBJECT-TYPE SYNTAX SnmpAdminString -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-only STATUS mandatory DESCRIPTION "The name of the user group to which this remote access session belongs." ::= { crasSessionEntry 2 } crasSessionIndex OBJECT-TYPE SYNTAX SessionIndex -- Rsyntax INTEGER(1..2147483647) ACCESS not-accessible STATUS mandatory DESCRIPTION "Unique index to distinguish between multiple Remote Access Sessions associated with the same user. The value of crasSessionIndex must increase monotonically till it wraps. An implementation may choose to wrap this index before the value of 2147483647. " ::= { crasSessionEntry 3 } crasAuthenMethod OBJECT-TYPE SYNTAX UserAuthenMethod -- Rsyntax INTEGER { -- none(1), -- other(2), -- radius(3), -- tacacsplus(4), -- kerberos(5), -- local(6), -- ldap(7), -- ntlm(8), -- sdi(9) -- } ACCESS read-only STATUS mandatory DESCRIPTION "The method used to authenticate the user prior to establishing the session." ::= { crasSessionEntry 4 } crasAuthorMethod OBJECT-TYPE SYNTAX UserAuthorMethod -- Rsyntax INTEGER { -- none(1), -- other(2), -- radius(3), -- tacacsplus(4), -- kerberos(5), -- local(6), -- ldap(7) -- } ACCESS read-only STATUS mandatory DESCRIPTION "The method used to authorize the user prior to establishing the session." ::= { crasSessionEntry 5 } crasSessionDuration OBJECT-TYPE SYNTAX Counter ACCESS read-only STATUS mandatory DESCRIPTION "The number of seconds elapsed since this session was established." ::= { crasSessionEntry 6 } crasLocalAddressType OBJECT-TYPE SYNTAX InetAddressType -- Rsyntax INTEGER { -- ?? enum value of zero may cause problems -- unknown(0), -- ipv4(1), -- ipv6(2), -- ipv4z(3), -- ipv6z(4), -- dns(16) -- } ACCESS read-only STATUS mandatory DESCRIPTION "The type of the address returned in 'crasLocalAddress'." ::= { crasSessionEntry 7 } crasLocalAddress OBJECT-TYPE SYNTAX InetAddress -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-only STATUS mandatory DESCRIPTION "The IP address assigned to the client of this session in the private network assigned by the managed entity." ::= { crasSessionEntry 8 } crasISPAddressType OBJECT-TYPE SYNTAX InetAddressType -- Rsyntax INTEGER { -- ?? enum value of zero may cause problems -- unknown(0), -- ipv4(1), -- ipv6(2), -- ipv4z(3), -- ipv6z(4), -- dns(16) -- } ACCESS read-only STATUS mandatory DESCRIPTION "The type of the address returned in 'crasISPAddress'." ::= { crasSessionEntry 9 } crasISPAddress OBJECT-TYPE SYNTAX InetAddress -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-only STATUS mandatory DESCRIPTION "The IP address of the peer (client) assigned by the ISP. This is the address of the client device in the public network." ::= { crasSessionEntry 10 } crasSessionProtocol OBJECT-TYPE SYNTAX RasProtocol -- Rsyntax INTEGER { -- other(1), -- ipsec(2), -- l2tp(3), -- l2tpoveripsec(4), -- pptp(5), -- l2f(6), -- ssl(7) -- } ACCESS read-only STATUS mandatory DESCRIPTION "The protocol underlying this remote access session." ::= { crasSessionEntry 11 } crasProtocolElement OBJECT-TYPE SYNTAX OBJECT IDENTIFIER ACCESS read-only STATUS mandatory DESCRIPTION "A reference to MIB definitions specific to the protocol underlying corresponding to the session or tunnel used to realized the remote access session corresponding to this conceptual row. For instance, if this remote access session is based on IPsec, then this object must contain the complete instance identifier of the IPsec tunnel corresponding to this remote access session. If no MIB definitions specific to the underlying protocol are available, the value should be set to the OBJECT IDENTIFIER { 0 0 }." -- DEFVAL { zeroDotZero } ::= { crasSessionEntry 12 } crasSessionEncryptionAlgo OBJECT-TYPE SYNTAX SessionEncrAlgo -- Rsyntax INTEGER { -- none(1), -- des(2), -- des3(3), -- rc4(4), -- rc5(5), -- idea(6), -- cast(7), -- blowfish(8), -- aes(9) -- } ACCESS read-only STATUS mandatory DESCRIPTION "The algorithm used by this remote access session to encrypt its payload." ::= { crasSessionEntry 13 } crasSessionPktAuthenAlgo OBJECT-TYPE SYNTAX SessionAuthAlgo -- Rsyntax INTEGER { -- none(1), -- other(2), -- hmacMd5(3), -- hmacSha(4) -- } ACCESS read-only STATUS mandatory DESCRIPTION "The algorithm used by this remote access session to to validate packets." ::= { crasSessionEntry 14 } crasSessionCompressionAlgo OBJECT-TYPE SYNTAX SessionCompressionAlgo -- Rsyntax INTEGER { -- none(1), -- other(2), -- lzs(3) -- } ACCESS read-only STATUS mandatory DESCRIPTION "The algorithm used by this remote access session to compress packets." ::= { crasSessionEntry 15 } crasHeartbeatInterval OBJECT-TYPE SYNTAX Gauge(0..4294967295) -- Units -- Seconds ACCESS read-only STATUS mandatory DESCRIPTION "The interval in seconds between two successive heartbeats employed by this session. Value of 0 denotes that no heartbeat is used." ::= { crasSessionEntry 16 } crasClientVendorString OBJECT-TYPE SYNTAX SnmpAdminString -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-only STATUS mandatory DESCRIPTION "The string identifying the vendor of the client application initiating this Remote Access session." ::= { crasSessionEntry 17 } crasClientVersionString OBJECT-TYPE SYNTAX SnmpAdminString -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-only STATUS mandatory DESCRIPTION "The string identifying the version of the of the client application initiating the Remote Access session. This can be used by the administrator to identify which users are running unsupported client versions." ::= { crasSessionEntry 18 } crasClientOSVendorString OBJECT-TYPE SYNTAX SnmpAdminString -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-only STATUS mandatory DESCRIPTION "The string identifying the vendor of the operating system on which the client application initiating the Remote Access Session is running." ::= { crasSessionEntry 19 } crasClientOSVersionString OBJECT-TYPE SYNTAX SnmpAdminString -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-only STATUS mandatory DESCRIPTION "The string identifying the version of the operating system of the entity which initiated this Remote Access session." ::= { crasSessionEntry 20 } crasPrimWINSServerAddrType OBJECT-TYPE SYNTAX InetAddressType -- Rsyntax INTEGER { -- ?? enum value of zero may cause problems -- unknown(0), -- ipv4(1), -- ipv6(2), -- ipv4z(3), -- ipv6z(4), -- dns(16) -- } ACCESS read-only STATUS mandatory DESCRIPTION "The type of the address returned in 'crasPrimWINSServer'." ::= { crasSessionEntry 21 } crasPrimWINSServer OBJECT-TYPE SYNTAX InetAddress -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-only STATUS mandatory DESCRIPTION "The IP address of the primary WINS server assigned managed entity to this client session." ::= { crasSessionEntry 22 } crasSecWINSServerAddrType OBJECT-TYPE SYNTAX InetAddressType -- Rsyntax INTEGER { -- ?? enum value of zero may cause problems -- unknown(0), -- ipv4(1), -- ipv6(2), -- ipv4z(3), -- ipv6z(4), -- dns(16) -- } ACCESS read-only STATUS mandatory DESCRIPTION "The type of the address returned in 'crasSecWINSServer'." ::= { crasSessionEntry 23 } crasSecWINSServer OBJECT-TYPE SYNTAX InetAddress -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-only STATUS mandatory DESCRIPTION "The IP address of the secondary WINS server assigned by the managed entity to this client session." ::= { crasSessionEntry 24 } crasPrimDNSServerAddrType OBJECT-TYPE SYNTAX InetAddressType -- Rsyntax INTEGER { -- ?? enum value of zero may cause problems -- unknown(0), -- ipv4(1), -- ipv6(2), -- ipv4z(3), -- ipv6z(4), -- dns(16) -- } ACCESS read-only STATUS mandatory DESCRIPTION "The type of the address returned in 'crasPrimDNSServer'." ::= { crasSessionEntry 25 } crasPrimDNSServer OBJECT-TYPE SYNTAX InetAddress -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-only STATUS mandatory DESCRIPTION "The IP address of the primary DNS server assigned by the managed entity to this client session." ::= { crasSessionEntry 26 } crasSecDNSServerAddrType OBJECT-TYPE SYNTAX InetAddressType -- Rsyntax INTEGER { -- ?? enum value of zero may cause problems -- unknown(0), -- ipv4(1), -- ipv6(2), -- ipv4z(3), -- ipv6z(4), -- dns(16) -- } ACCESS read-only STATUS mandatory DESCRIPTION "The type of the address returned in 'crasSecDNSServer'." ::= { crasSessionEntry 27 } crasSecDNSServer OBJECT-TYPE SYNTAX InetAddress -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-only STATUS mandatory DESCRIPTION "The IP address of the secondary DNS server assigned by the managed entity to this client session." ::= { crasSessionEntry 28 } crasDHCPServerAddrType OBJECT-TYPE SYNTAX InetAddressType -- Rsyntax INTEGER { -- ?? enum value of zero may cause problems -- unknown(0), -- ipv4(1), -- ipv6(2), -- ipv4z(3), -- ipv6z(4), -- dns(16) -- } ACCESS read-only STATUS mandatory DESCRIPTION "The type of the address returned in 'crasDHCPServer'." ::= { crasSessionEntry 29 } crasDHCPServer OBJECT-TYPE SYNTAX InetAddress -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-only STATUS mandatory DESCRIPTION "The IP address of the DHCP server assigned by the managed entity to this client session." ::= { crasSessionEntry 30 } crasSessionInPkts OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Packets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of packets received by this Remote Access session." ::= { crasSessionEntry 31 } crasSessionOutPkts OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Packets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of packets transmitted by this Remote Access Session." ::= { crasSessionEntry 32 } crasSessionInDropPkts OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Packets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of packets received for processing on this session which were dropped by the managed entity." ::= { crasSessionEntry 33 } crasSessionOutDropPkts OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Packets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of outgoing packets on this session which were dropped during transmit processing by the managed entity." ::= { crasSessionEntry 34 } crasSessionInOctets OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Octets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of octets received by this Remote Access Session. This value is accumulated BEFORE determining whether or not the packet should be decompressed." ::= { crasSessionEntry 35 } crasSessionOutOctets OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Octets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of octets transmitted by this Remote Access Session. This value is accumulated AFTER determining whether or not the packet should be compressed." ::= { crasSessionEntry 36 } crasSessionState OBJECT-TYPE SYNTAX SessionStatus -- Rsyntax INTEGER { -- initializing(1), -- established(2), -- terminating(3) -- } ACCESS read-write STATUS mandatory DESCRIPTION "The state of the remote access session corresponding to this conceptual row. The management entity may use this object to terminate an established session by setting value of the object to 'terminating'." ::= { crasSessionEntry 37 } crasActGroupTable OBJECT-TYPE SYNTAX SEQUENCE OF CrasActGroupEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table lists all the currently active remote access user groups. For each group, it lists the attributes (group, aggregate activity, aggregate traffic), and status." ::= { crasActivity 22 } crasActGroupEntry OBJECT-TYPE SYNTAX CrasActGroupEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "Each entry contains the attributes, statistics and status of an active session." INDEX { crasActGrpName } ::= { crasActGroupTable 1 } CrasActGroupEntry ::= SEQUENCE { crasActGrpName SnmpAdminString, crasActGrNumUsers INTEGER, crasActGrpInPkts Counter, crasActGrpOutPkts Counter, crasActGrpInDropPkts Counter, crasActGrpOutDropPkts Counter, crasActGrpInOctets Counter, crasActGrpOutOctets Counter } crasActGrpName OBJECT-TYPE SYNTAX SnmpAdminString(SIZE(0..64)) -- Rsyntax OCTET STRING(SIZE(0..64)) ACCESS not-accessible STATUS mandatory DESCRIPTION "The name of the active user group corresponding to this entry." ::= { crasActGroupEntry 1 } crasActGrNumUsers OBJECT-TYPE SYNTAX INTEGER(1..2147483647) ACCESS read-only STATUS mandatory DESCRIPTION "The number of users in this group currently connected to the managed device." ::= { crasActGroupEntry 2 } crasActGrpInPkts OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Packets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of packets received by this session." ::= { crasActGroupEntry 3 } crasActGrpOutPkts OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Packets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of packets transmitted by this session." ::= { crasActGroupEntry 4 } crasActGrpInDropPkts OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Packets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of packets dropped by this session which were received for processing." ::= { crasActGroupEntry 5 } crasActGrpOutDropPkts OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Packets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of outgoing packets which were dropped during transmit processing by this session." ::= { crasActGroupEntry 6 } crasActGrpInOctets OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Octets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of octets received by this session." ::= { crasActGroupEntry 7 } crasActGrpOutOctets OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Octets ACCESS read-only STATUS mandatory DESCRIPTION "The total number of octets transmitted by this session." ::= { crasActGroupEntry 8 } crasEmailNumSessions OBJECT-TYPE SYNTAX Gauge -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of currently active Email proxy sessions." ::= { crasActivity 23 } crasEmailCumulateSessions OBJECT-TYPE SYNTAX Counter -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of cumulative Email proxy sessions since system up." ::= { crasActivity 24 } crasEmailPeakConcurrentSessions OBJECT-TYPE SYNTAX Gauge -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of peak concurrent Email proxy sessions since system up." ::= { crasActivity 25 } crasIPSecNumSessions OBJECT-TYPE SYNTAX Gauge -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of currently active IPSec sessions." ::= { crasActivity 26 } crasIPSecCumulateSessions OBJECT-TYPE SYNTAX Counter -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of cumulative IPSec sessions since system up." ::= { crasActivity 27 } crasIPSecPeakConcurrentSessions OBJECT-TYPE SYNTAX Gauge -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of peak concurrent Email proxy sessions since system up." ::= { crasActivity 28 } crasL2LNumSessions OBJECT-TYPE SYNTAX Gauge -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of currently active LAN to LAN sessions." ::= { crasActivity 29 } crasL2LCumulateSessions OBJECT-TYPE SYNTAX Counter -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of cumulative LAN to LAN sessions since system up." ::= { crasActivity 30 } crasL2LPeakConcurrentSessions OBJECT-TYPE SYNTAX Gauge -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of peak concurrent LAN to LAN sessions since system up." ::= { crasActivity 31 } crasLBNumSessions OBJECT-TYPE SYNTAX Gauge -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of currently active Load Balancing sessions." ::= { crasActivity 32 } crasLBCumulateSessions OBJECT-TYPE SYNTAX Counter -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of cumulative Load Balancing sessions since system up." ::= { crasActivity 33 } crasLBPeakConcurrentSessions OBJECT-TYPE SYNTAX Gauge -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of peak concurrent Load Balancing sessions since system up." ::= { crasActivity 34 } crasSVCNumSessions OBJECT-TYPE SYNTAX Gauge -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of currently active SVC sessions." ::= { crasActivity 35 } crasSVCCumulateSessions OBJECT-TYPE SYNTAX Counter -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of cumulative SVC sessions since system up." ::= { crasActivity 36 } crasSVCPeakConcurrentSessions OBJECT-TYPE SYNTAX Gauge -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of peak concurrent SVC sessions since system up." ::= { crasActivity 37 } crasWebvpnNumSessions OBJECT-TYPE SYNTAX Gauge -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of currently active Webvpn sessions." ::= { crasActivity 38 } crasWebvpnCumulateSessions OBJECT-TYPE SYNTAX Counter -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of cumulative Webvpn sessions since system up." ::= { crasActivity 39 } crasWebvpnPeakConcurrentSessions OBJECT-TYPE SYNTAX Gauge -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of peak concurrent Webvpn sessions since system up." ::= { crasActivity 40 } crasNumTotalFailures OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter ACCESS read-only STATUS mandatory DESCRIPTION "The number of attempts to establish sessions which failed, since the last reboot of the managed device." ::= { crasFailuresGlobals 1 } crasNumDeclinedSessions OBJECT-TYPE SYNTAX Gauge(0..4294967295) -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of session setup attempts, counted since the last time the notification 'ciscoRasTooManyFailedAuths' was issued, which were declined due to authentication or authorization failure." ::= { crasFailuresGlobals 2 } crasNumSetupFailInsufResources OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of session setup attempts that failed due to insufficient resources." ::= { crasFailuresGlobals 3 } crasNumAbortedSessions OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The number of sessions which were successfully setup but were since terminated abnormally." ::= { crasFailuresGlobals 4 } crasFailTableSize OBJECT-TYPE SYNTAX Gauge(0..4294967295) ACCESS read-write STATUS mandatory DESCRIPTION "The window size of the Remote Access Failure tables. The failure tables for session and group failures maintain only the last crasFailTableSize number of failure records. A value of 0 for this MIB variable indicates that archiving of the failures is disabled. An implementation may choose suitable minimum and maximum values for this element based on the local policy and available resources. If an SNMP SET request specifies a value outside this window for this element, a BAD VALUE may be returned." ::= { crasFailGlobalCntl 1 } crasSessFailTable OBJECT-TYPE SYNTAX SEQUENCE OF CrasSessFailEntry ACCESS not-accessible STATUS mandatory DESCRIPTION " This table records the last 'N' session failures, where 'N' is the value of the MIB element 'crasFailTableSize' defined earlier. A failure could be a failure to establish a session ('setup' failure) or a failure of a session after it was established ('operational' failure)." ::= { crasSessFailures 1 } crasSessFailEntry OBJECT-TYPE SYNTAX CrasSessFailEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "Each entry contains the attributes associated with a remote access session failure." INDEX { crasSessFailIndex } ::= { crasSessFailTable 1 } CrasSessFailEntry ::= SEQUENCE { crasSessFailIndex FailureRecordIndex, crasSessFailUsername SnmpAdminString, crasSessFailGroupname SnmpAdminString, crasSessFailType INTEGER, crasSessFailReason INTEGER, crasSessFailTime TimeStamp, crasSessFailSessionIndex SessionIndex, crasSessFailISPAddrType InetAddressType, crasSessFailISPAddr InetAddress, crasSessFailLocalAddrType InetAddressType, crasSessFailLocalAddr InetAddress } crasSessFailIndex OBJECT-TYPE SYNTAX FailureRecordIndex -- Rsyntax Gauge(1..4294967295) ACCESS not-accessible STATUS mandatory DESCRIPTION "The index of the session failure table. The value of the index is a number which begins at one and is incremented with each session failure. The value of this object will wrap at 4,294,967,295." ::= { crasSessFailEntry 1 } crasSessFailUsername OBJECT-TYPE SYNTAX SnmpAdminString -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-only STATUS mandatory DESCRIPTION "The name of the user associated with this failed remote access session." ::= { crasSessFailEntry 2 } crasSessFailGroupname OBJECT-TYPE SYNTAX SnmpAdminString -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-only STATUS mandatory DESCRIPTION "The name of the user group to which this failed remote access session belongs." ::= { crasSessFailEntry 3 } crasSessFailType OBJECT-TYPE SYNTAX INTEGER { setupFailure(1), operationalFailure(2) } ACCESS read-only STATUS mandatory DESCRIPTION "The type of the failure: 1 = failure occurred during session setup 2 = failed occurred after the session was setup successfully." ::= { crasSessFailEntry 4 } crasSessFailReason OBJECT-TYPE SYNTAX INTEGER { other(1), internalError(2), authenticationFailure(3), authorizationFailure(4), sysCapExceeded(5), peerAbortRequest(6), peerLost(7), operRequest(8) } ACCESS read-only STATUS mandatory DESCRIPTION "The reason for the failure. Possible reasons include: 1 = other (error which cannot be classified in any of the types listed below). 2 = internal error occurred 3 = failed to authenticate the peer/user 4 = failed to authorize the peer/user 5 = system capacity exceeded (memory, cpu, max users etc) 6 = peer requested to abort the session or the setup 7 = lost peer's heartbeat 8 = local management request." ::= { crasSessFailEntry 5 } crasSessFailTime OBJECT-TYPE SYNTAX TimeStamp -- Rsyntax TimeTicks ACCESS read-only STATUS mandatory DESCRIPTION "The value of the MIB element 'sysUpTime' at the time of the failure." ::= { crasSessFailEntry 6 } crasSessFailSessionIndex OBJECT-TYPE SYNTAX SessionIndex -- Rsyntax INTEGER(1..2147483647) ACCESS read-only STATUS mandatory DESCRIPTION "The index of the session which failed (in case this was an operational failure). In case of setup failures (where the value of 'crasSessFailType' of this conceptual row is 'operationalFailure'), the value of this object is undefined and should not be processed." ::= { crasSessFailEntry 7 } crasSessFailISPAddrType OBJECT-TYPE SYNTAX InetAddressType -- Rsyntax INTEGER { -- ?? enum value of zero may cause problems -- unknown(0), -- ipv4(1), -- ipv6(2), -- ipv4z(3), -- ipv6z(4), -- dns(16) -- } ACCESS read-only STATUS mandatory DESCRIPTION "The type of the address returned in 'crasSessFailISPAddr'." ::= { crasSessFailEntry 8 } crasSessFailISPAddr OBJECT-TYPE SYNTAX InetAddress -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-only STATUS mandatory DESCRIPTION "The public address of the peer." ::= { crasSessFailEntry 9 } crasSessFailLocalAddrType OBJECT-TYPE SYNTAX InetAddressType -- Rsyntax INTEGER { -- ?? enum value of zero may cause problems -- unknown(0), -- ipv4(1), -- ipv6(2), -- ipv4z(3), -- ipv6z(4), -- dns(16) -- } ACCESS read-only STATUS mandatory DESCRIPTION "The type of the address returned in 'crasSessFailLocalAddr'." ::= { crasSessFailEntry 10 } crasSessFailLocalAddr OBJECT-TYPE SYNTAX InetAddress -- Rsyntax OCTET STRING(SIZE(0..255)) ACCESS read-only STATUS mandatory DESCRIPTION "The address assigned to the peer by the local address management mechanism. In case no address was assigned to the peer when the failure occurred, this MIB variable would contain the IPv4 address value 0.0.0.0" ::= { crasSessFailEntry 11 } crasFailLastFailIndex OBJECT-TYPE SYNTAX FailureRecordIndex -- Rsyntax Gauge(1..4294967295) ACCESS read-only STATUS mandatory DESCRIPTION "The value of column 'crasSessFailIndex' corresponding to the last row added to the crasSessFailTable. The value of this object is undefined and should not be processed by the management entity if the value of the object 'crasFailTableSize' is 0." ::= { crasSessFailures 2 } crasGrpFailTable OBJECT-TYPE SYNTAX SEQUENCE OF CrasGrpFailEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "This table records the last 'N' occurrences of failures (setup or operational) per user group, where 'N' is the value of the MIB element 'crasFailTableSize' defined earlier. When 'N' entries have been created, the failure information about a new user group must be created by deleting the oldest entry in this table." ::= { crasGroupFailures 1 } crasGrpFailEntry OBJECT-TYPE SYNTAX CrasGrpFailEntry ACCESS not-accessible STATUS mandatory DESCRIPTION "Each entry contains the summary of failures for a specific user group." INDEX { crasGrpFailGroupname } ::= { crasGrpFailTable 1 } CrasGrpFailEntry ::= SEQUENCE { crasGrpFailGroupname SnmpAdminString, crasGrpFailNumFailAuths Counter, crasGrpFailNumResourceFailures Counter, crasGrpFailNumDeclined Counter, crasGrpFailNumTerminatedMgmt Counter, crasGrpFailNumTerminatedOther Counter } crasGrpFailGroupname OBJECT-TYPE SYNTAX SnmpAdminString(SIZE(0..64)) -- Rsyntax OCTET STRING(SIZE(0..64)) ACCESS not-accessible STATUS mandatory DESCRIPTION "The name of the user group to which this failure record corresponds. This is the index of the group failure table." ::= { crasGrpFailEntry 1 } crasGrpFailNumFailAuths OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter ACCESS read-only STATUS mandatory DESCRIPTION "The number of sessions belonging to this group which failed authentication; counted since last reboot." ::= { crasGrpFailEntry 2 } crasGrpFailNumResourceFailures OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter ACCESS read-only STATUS mandatory DESCRIPTION "The number of session setup attempts which failed due to insufficient resources." ::= { crasGrpFailEntry 3 } crasGrpFailNumDeclined OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter ACCESS read-only STATUS mandatory DESCRIPTION "The number of session setup attempts which were declined by the managed entity due to local policy. These would include sessions which were denied due to rate control settings." ::= { crasGrpFailEntry 4 } crasGrpFailNumTerminatedMgmt OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter ACCESS read-only STATUS mandatory DESCRIPTION "The number of established sessions which were terminated by explicit management action. The termination may have been triggered locally or based on a request from the peer." ::= { crasGrpFailEntry 5 } crasGrpFailNumTerminatedOther OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter ACCESS read-only STATUS mandatory DESCRIPTION "The number of established sessions which were terminated due to insufficient reasons, internal error or other reasons not caused by management action." ::= { crasGrpFailEntry 6 } crasNumDisabledAccounts OBJECT-TYPE SYNTAX --?? syntax is not convertable to SMIv1 Counter -- Units -- Users ACCESS read-only STATUS mandatory DESCRIPTION "The total number of user accounts which were disabled due to repeated login failures." ::= { crasSecurityGlobals 1 } crasThrMaxSessions OBJECT-TYPE SYNTAX INTEGER(0..2147483647) -- Units -- Sessions ACCESS read-only STATUS mandatory DESCRIPTION "The maximum number of sessions which are successfully setup after which the managed entity should alert the network management entity using the notification 'ciscoRasTooManySessions', if the notification has been enabled. A value of 0 indicates that the threshold has not been set." DEFVAL { 0 } ::= { crasThresholds 1 } crasThrMaxFailedAuths OBJECT-TYPE SYNTAX Gauge(0..4294967295) ACCESS read-only STATUS mandatory DESCRIPTION "The value of object 'crasNumDeclinedSessions' at which the managed entity should alert the network management entity using the notification 'ciscoRasTooManyFailedAuths', if the notification has been enabled. A value of 0 indicates that the threshold has not been set." DEFVAL { 4294967295 } ::= { crasThresholds 2 } crasThrMaxThroughput OBJECT-TYPE SYNTAX INTEGER(0..2147483647) -- Units -- Octets Per Second ACCESS read-only STATUS mandatory DESCRIPTION "The highest throughput of the Remote Access Service at which the managed entity should alert the network management entity using the notification 'ciscoRasTooHighThroughput', if the notification has been enabled. The notification is disabled till the value of the aggregate throughput of the managed entity drops below the value of this object. A value of 0 indicates that the threshold has not been set." DEFVAL { 0 } ::= { crasThresholds 3 } crasCntlTooManySessions OBJECT-TYPE SYNTAX TruthValue -- Rsyntax INTEGER { -- true(1), -- false(2) -- } ACCESS read-write STATUS mandatory DESCRIPTION "This object defines the administrative state of sending the trap to signal the violation of the Max session threshold." DEFVAL { false } ::= { crasNotifCntl 1 } crasCntlTooManyFailedAuths OBJECT-TYPE SYNTAX TruthValue -- Rsyntax INTEGER { -- true(1), -- false(2) -- } ACCESS read-write STATUS mandatory DESCRIPTION "This object defines the administrative state of sending the trap to signal the violation of the Max authentication failure count threshold." DEFVAL { false } ::= { crasNotifCntl 2 } crasCntlTooHighThroughput OBJECT-TYPE SYNTAX TruthValue -- Rsyntax INTEGER { -- true(1), -- false(2) -- } ACCESS read-write STATUS mandatory DESCRIPTION "This object defines the administrative state of sending the trap to signal the violation of the Max throughput threshold." DEFVAL { false } ::= { crasNotifCntl 3 } ciscoRasTooManySessions TRAP-TYPE -- Reverse mappable trap ENTERPRISE ciscoRemoteAccessMonitorMIB VARIABLES { crasNumSessions, crasNumUsers, crasMaxSessionsSupportable, crasMaxUsersSupportable, crasThrMaxSessions } -- Status -- mandatory DESCRIPTION "This notification is generated when the managed entity detects that the number of sessions established exceeds the set threshold crasThrMaxSessions. Once the notification has been issued, further notifications are suppressed till the value returns below the specified threshold." ::= 1 ciscoRasTooManyFailedAuths TRAP-TYPE -- Reverse mappable trap ENTERPRISE ciscoRemoteAccessMonitorMIB VARIABLES { crasNumDeclinedSessions, crasThrMaxFailedAuths } -- Status -- mandatory DESCRIPTION "This notification is generated when the managed entity detects that the number of login attempts (over all users) exceeds the set threshold for throughput (crasThrMaxFailedAuths). Once the notification has been issued, further notifications are suppressed till the value returns below the specified threshold." ::= 2 ciscoRasTooHighThroughput TRAP-TYPE -- Reverse mappable trap ENTERPRISE ciscoRemoteAccessMonitorMIB VARIABLES { crasGlobalInOctets, crasGlobalOutOctets, crasThrMaxThroughput } -- Status -- mandatory DESCRIPTION "This notification is generated when the managed entity detects that the current throughput of the device exceeds the set threshold for throughput (crasThrMaxThroughput). Once the notification has been issued, further notiifcations are suppressed till the value returns below the specified threshold." ::= 3 ciscoRasCapacityGroup OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBGroups 1 } -- OBJECT-GROUP -- Status -- mandatory -- Descr -- This group consists of the MIB objects pertaining -- to Remote Access Service capacity parameters defined -- in the Cisco Remote Access MIB. -- objects -- crasMaxSessionsSupportable, crasMaxUsersSupportable, -- crasMaxGroupsSupportable, crasNumCryptoAccelerators ciscoRasResourceUsageGroup OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBGroups 2 } -- OBJECT-GROUP -- Status -- mandatory -- Descr -- This group consists of the MIB objects pertaining -- to Remote Access Service resource usage parameters -- defined in the Cisco Remote Access MIB. -- objects -- crasGlobalBwUsage ciscoRasActivityGroup OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBGroups 3 } -- OBJECT-GROUP -- Status -- mandatory -- Descr -- This group consists of the MIB objects pertaining -- to the Cisco Remote Access MIB Activity group. -- -- Following are definitions of some terms used in -- this compliance group: -- -- User: -- A remote access user. -- -- Group: -- A collection of remote access users grouped -- and managed together as a single entity for -- administrative convenience. -- -- ISP: -- Internet Service Provider. -- -- Crypto Accelerator -- 'Crypto Accelerator' denotes a device which -- the managed entity uses to offload some or all -- computations pertaining to cryptographic -- operations. -- -- Session -- A connection terminating on the managed device -- which has been established to provide remote access -- connectivity to a user. -- objects -- crasNumSessions, crasNumPrevSessions, crasNumUsers, -- crasGlobalInPkts, crasGlobalOutPkts, crasGlobalInOctets, -- crasGlobalOutOctets, crasGlobalInDecompOctets, -- crasGlobalOutUncompOctets, crasGlobalInDropPkts, -- crasGlobalOutDropPkts, crasGroup, crasAuthenMethod, -- crasAuthorMethod, crasSessionDuration, crasLocalAddressType, -- crasLocalAddress, crasISPAddressType, crasISPAddress, -- crasSessionProtocol, crasProtocolElement, -- crasSessionEncryptionAlgo, crasSessionPktAuthenAlgo, -- crasSessionCompressionAlgo, crasHeartbeatInterval, -- crasClientVendorString, crasClientVersionString, -- crasClientOSVendorString, crasClientOSVersionString, -- crasPrimWINSServerAddrType, crasPrimWINSServer, -- crasSecWINSServerAddrType, crasSecWINSServer, -- crasPrimDNSServerAddrType, crasPrimDNSServer, -- crasSecDNSServerAddrType, crasSecDNSServer, -- crasDHCPServerAddrType, crasDHCPServer, crasSessionInPkts, -- crasSessionOutPkts, crasSessionInDropPkts, -- crasSessionOutDropPkts, crasSessionInOctets, -- crasSessionOutOctets, crasSessionState ciscoRasGrpActivityGroup OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBGroups 4 } -- OBJECT-GROUP -- Status -- mandatory -- Descr -- This group consists of the MIB objects pertaining -- to activity of user groups. -- objects -- crasNumGroups, crasActGrNumUsers, crasActGrpInPkts, -- crasActGrpOutPkts, crasActGrpInDropPkts, -- crasActGrpOutDropPkts, crasActGrpInOctets, -- crasActGrpOutOctets ciscoRasMandatoryFailureGroup OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBGroups 5 } -- OBJECT-GROUP -- Status -- mandatory -- Descr -- This group categorizes objects pertaining to -- failures in the Remote Access Service which are -- essential for successful monitoring of the -- service. -- objects -- crasNumTotalFailures, crasNumDeclinedSessions, -- crasNumAbortedSessions, crasFailTableSize ciscoRasOptionalFailureGroup OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBGroups 6 } -- OBJECT-GROUP -- Status -- mandatory -- Descr -- This group categorizes optional objects pertaining -- to failures in the Remote Access Service. -- objects -- crasNumSetupFailInsufResources, crasSessFailUsername, -- crasSessFailGroupname, crasSessFailType, crasSessFailReason, -- crasSessFailTime, crasSessFailSessionIndex, -- crasSessFailISPAddr, crasSessFailLocalAddr, -- crasSessFailISPAddrType, crasSessFailLocalAddrType, -- crasFailLastFailIndex, crasGrpFailNumFailAuths, -- crasGrpFailNumResourceFailures, crasGrpFailNumDeclined, -- crasGrpFailNumTerminatedMgmt, crasGrpFailNumTerminatedOther ciscoRasSecurityGroup OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBGroups 7 } -- OBJECT-GROUP -- Status -- mandatory -- Descr -- This group categorizes objects pertaining to the -- monitoring state of security in the Remote Access -- Service. -- objects -- crasNumDisabledAccounts ciscoRasThresholdsGroup OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBGroups 8 } -- OBJECT-GROUP -- Status -- mandatory -- Descr -- This group categorizes objects which are used to -- establish baseline values of metrics instrumenting -- the Remote Access Service. -- objects -- crasThrMaxSessions, crasThrMaxFailedAuths, -- crasThrMaxThroughput ciscoRasNotificationCntlGroup OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBGroups 9 } -- OBJECT-GROUP -- Status -- mandatory -- Descr -- This group of objects controls the sending of -- notifications defined in this MIB module. -- objects -- crasCntlTooManySessions, crasCntlTooManyFailedAuths, -- crasCntlTooHighThroughput ciscoRasActivityGroupRev1 OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBGroups 11 } -- OBJECT-GROUP -- Status -- mandatory -- Descr -- This group contains activity information related -- to sessions. -- objects -- crasEmailNumSessions, crasEmailCumulateSessions, -- crasEmailPeakConcurrentSessions, crasIPSecNumSessions, -- crasIPSecCumulateSessions, crasIPSecPeakConcurrentSessions, -- crasL2LNumSessions, crasL2LCumulateSessions, -- crasL2LPeakConcurrentSessions, crasLBNumSessions, -- crasLBCumulateSessions, crasLBPeakConcurrentSessions, -- crasSVCNumSessions, crasSVCCumulateSessions, -- crasSVCPeakConcurrentSessions, crasWebvpnNumSessions, -- crasWebvpnCumulateSessions, crasWebvpnPeakConcurrentSessions ciscoRasNotificationsGroup OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBGroups 10 } -- NOTIFICATION-GROUP -- Status -- mandatory -- Descr -- This group contains the notifications for the -- Remote Access MIB. -- notifications -- ciscoRasTooHighThroughput, ciscoRasTooManyFailedAuths, -- ciscoRasTooManySessions ciscoRasMonitorMIBCompliance OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBCompliances 1 } -- MODULE-COMPLIANCE -- Status -- deprecated -- Descr -- The compliance statement for SNMP entities -- the Cisco Remote Access Monitoring MIB. -- Module -- >>current<< -- MandGroup -- ciscoRasCapacityGroup -- MandGroup -- ciscoRasResourceUsageGroup -- MandGroup -- ciscoRasActivityGroup -- MandGroup -- ciscoRasMandatoryFailureGroup -- OptGroup -- ciscoRasGrpActivityGroup -- OptGroup -- ciscoRasOptionalFailureGroup -- OptGroup -- ciscoRasSecurityGroup -- OptGroup -- ciscoRasThresholdsGroup -- OptGroup -- ciscoRasNotificationsGroup -- OptGroup -- ciscoRasNotificationCntlGroup -- ObjVar -- crasSessionState -- ObjVar -- crasCntlTooManySessions -- ObjVar -- crasCntlTooManyFailedAuths -- ObjVar -- crasCntlTooHighThroughput ciscoRasMonitorMIBComplianceRev1 OBJECT IDENTIFIER ::= { ciscoRasMonitorMIBCompliances 2 } -- MODULE-COMPLIANCE -- Status -- mandatory -- Descr -- The compliance statement for SNMP entities -- the Cisco Remote Access Monitoring MIB. -- Module -- >>current<< -- MandGroup -- ciscoRasCapacityGroup -- MandGroup -- ciscoRasResourceUsageGroup -- MandGroup -- ciscoRasActivityGroup -- MandGroup -- ciscoRasActivityGroupRev1 -- MandGroup -- ciscoRasMandatoryFailureGroup -- OptGroup -- ciscoRasGrpActivityGroup -- OptGroup -- ciscoRasOptionalFailureGroup -- OptGroup -- ciscoRasSecurityGroup -- OptGroup -- ciscoRasThresholdsGroup -- OptGroup -- ciscoRasNotificationsGroup -- OptGroup -- ciscoRasNotificationCntlGroup -- ObjVar -- crasSessionState -- ObjVar -- crasCntlTooManySessions -- ObjVar -- crasCntlTooManyFailedAuths -- ObjVar -- crasCntlTooHighThroughput END