[c-nsp] ASA 7.2(3) SNMP issues?

[Mike Andrews]

On Fri, 15 Feb 2008, Brian Landers wrote:

> On Feb 15, 2008, at 11:37 AM, Jeff Kell wrote:
>
>> Recently upgraded 7.2(2) -> 7.2(3)12 and our network monitors stopped
>> reading interface stats off the ASAs.  Anyone know of any issues?
>>
>> We can get system status fine, so it's not an SNMP permissions issue;
>> but interface stats disappeared.
>
> We saw the same issue when going from 7.2(3) -> 7.2(3)12.  Going back
> to 7.2(3) release fixed it.  Nothing I can find in Bug Toolkit or the
> 7.2(3) interim release notes to explain it, though.

I also ran into this; it appears you can snmpwalk the counters in IF-MIB 
but you can't snmpget them:

% snmpwalk -v 2c -c blah asa .1.3.6.1.2.1.31.1.1.1.6
IF-MIB::ifHCInOctets.1 = Counter64: 11871409813
IF-MIB::ifHCInOctets.2 = Counter64: 58711253205
IF-MIB::ifHCInOctets.3 = Counter64: 504682365
IF-MIB::ifHCInOctets.4 = Counter64: 2510676
IF-MIB::ifHCInOctets.5 = Counter64: 0

% snmpget -v 2c -c blah asa .1.3.6.1.2.1.31.1.1.1.6.1
IF-MIB::ifHCInOctets.1 = No Such Instance currently exists at this OID

I keep forgetting to submit the bug to Cisco, mostly because 7.2(3) works 
well enough for me and our particular configs aren't affected by the 
security issue it has...


Mike Andrews  *  mandrews at bit0.com  *  http://www.fark.com
It's not news, it's Fark.com.                  Carpe cavy!