[c-nsp] PIX/ASA OID for "show service-policy"
Antonio Soares
amsoares at netcabo.pt
Tue Jan 19 13:34:11 EST 2010
Thank you very much for this information.
Regards,
Antonio Soares, CCIE #18473 (R&S/SP)
amsoares at netcabo.pt
-----Original Message-----
From: David White, Jr. (dwhitejr) [mailto:dwhitejr at cisco.com]
Sent: terça-feira, 19 de Janeiro de 2010 18:22
To: Antonio Soares
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] PIX/ASA OID for "show service-policy"
Hi Antonio,
The "show service-policy" output is not available via SNMP.
Sorry,
David.
Antonio Soares wrote:
> Hello group,
>
> I'm trying to find the OID that gives us the same type of information we see in the "show service-policy" output:
>
> pixfirewall(config)# show service-policy
>
> Global policy:
> Service-policy: global_policy
> Class-map: inspection_default
> Inspect: dns preset_dns_map, packet 0, drop 0, reset-drop 0
> Inspect: ftp, packet 0, drop 0, reset-drop 0
> Inspect: h323 h225 _default_h323_map, packet 0, drop 0, reset-drop 0
> Inspect: h323 ras _default_h323_map, packet 0, drop 0, reset-drop 0
> Inspect: netbios, packet 0, drop 0, reset-drop 0
> Inspect: rsh, packet 0, drop 0, reset-drop 0
> Inspect: rtsp, packet 0, drop 0, reset-drop 0
> Inspect: skinny , packet 0, drop 0, reset-drop 0
> Inspect: esmtp _default_esmtp_map, packet 0, drop 0, reset-drop 0
> Inspect: sqlnet, packet 0, drop 0, reset-drop 0
> Inspect: sunrpc, packet 0, drop 0, reset-drop 0
> Inspect: tftp, packet 0, drop 0, reset-drop 0
> Inspect: sip , packet 0, drop 0, reset-drop 0
> Inspect: xdmcp, packet 0, drop 0, reset-drop 0
>
> Interface outside:
> Service-policy: OUTSIDE
> Class-map: CONNECTIONS
> Set connection policy: conn-max 123
> current conns 0, drop 0
> pixfirewall(config)#
>
> The best SNMP objects i was able to find are 1.3.6.1.4.1.9.9.147 (ciscoFirewallMIB) and 1.3.6.1.4.1.9.9.491
> (ciscoUnifiedFirewallMIB) but they don't seem to have what i need.
>
>
>
> Thanks.
>
> Regards,
>
> Antonio Soares, CCIE #18473 (R&S/SP)
> amsoares at netcabo.pt
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
More information about the cisco-nsp
mailing list