[c-nsp] ASA 7.2(3) SNMP issues?

[Frank Schadwill]

Hi,

On Saturday, February 16, 2008 6:38 AM,
cisco-nsp-bounces at puck.nether.net wrote: 
> On Fri, 15 Feb 2008, Brian Landers wrote:
> 
> > On Feb 15, 2008, at 11:37 AM, Jeff Kell wrote:
> > 
> > > Recently upgraded 7.2(2) -> 7.2(3)12 and our network monitors
> > > stopped reading interface stats off the ASAs.  Anyone know of
> > > any issues? 
> > > 
> > > We can get system status fine, so it's not an SNMP permissions
> > > issue; but interface stats disappeared.
> > 
> > We saw the same issue when going from 7.2(3) -> 7.2(3)12. Going
> > back to 7.2(3) release fixed it.  Nothing I can find in Bug
> > Toolkit or the 
> > 7.2(3) interim release notes to explain it, though.
> 
> I also ran into this; it appears you can snmpwalk the
> counters in IF-MIB
> but you can't snmpget them:
> 
> % snmpwalk -v 2c -c blah asa .1.3.6.1.2.1.31.1.1.1.6
> IF-MIB::ifHCInOctets.1 = Counter64: 11871409813
> IF-MIB::ifHCInOctets.2 = Counter64: 58711253205
> IF-MIB::ifHCInOctets.3 = Counter64: 504682365
> IF-MIB::ifHCInOctets.4 = Counter64: 2510676
> IF-MIB::ifHCInOctets.5 = Counter64: 0
> 
> % snmpget -v 2c -c blah asa .1.3.6.1.2.1.31.1.1.1.6.1
> IF-MIB::ifHCInOctets.1 = No Such Instance currently exists at this
> OID 
> 
> I keep forgetting to submit the bug to Cisco, mostly because
> 7.2(3) works
> well enough for me and our particular configs aren't affected by
> the security issue it has... 

yes, there is a bug:

> Version 7.2.3.12 is affected by bug CSCsl88067 which is the issue
> you are having. 

>From TAC you got the image 7.2.3.17, there is this issue fixed.

Regards,
    Frank