[c-nsp] PIX/ASA OID for "show service-policy"

Antonio Soares amsoares at netcabo.pt
Tue Jan 19 13:34:11 EST 2010


Thank you very much for this information. 


Regards,
 
Antonio Soares, CCIE #18473 (R&S/SP)
amsoares at netcabo.pt

-----Original Message-----
From: David White, Jr. (dwhitejr) [mailto:dwhitejr at cisco.com] 
Sent: terça-feira, 19 de Janeiro de 2010 18:22
To: Antonio Soares
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] PIX/ASA OID for "show service-policy"

Hi Antonio,

The "show service-policy" output is not available via SNMP.

Sorry,

David.

Antonio Soares wrote:
> Hello group,
>
> I'm trying to find the OID that gives us the same type of information we see in the "show service-policy" output:
>
> pixfirewall(config)# show service-policy 
>
> Global policy: 
>   Service-policy: global_policy
>     Class-map: inspection_default
>       Inspect: dns preset_dns_map, packet 0, drop 0, reset-drop 0
>       Inspect: ftp, packet 0, drop 0, reset-drop 0
>       Inspect: h323 h225 _default_h323_map, packet 0, drop 0, reset-drop 0
>       Inspect: h323 ras _default_h323_map, packet 0, drop 0, reset-drop 0
>       Inspect: netbios, packet 0, drop 0, reset-drop 0
>       Inspect: rsh, packet 0, drop 0, reset-drop 0
>       Inspect: rtsp, packet 0, drop 0, reset-drop 0
>       Inspect: skinny , packet 0, drop 0, reset-drop 0
>       Inspect: esmtp _default_esmtp_map, packet 0, drop 0, reset-drop 0
>       Inspect: sqlnet, packet 0, drop 0, reset-drop 0
>       Inspect: sunrpc, packet 0, drop 0, reset-drop 0
>       Inspect: tftp, packet 0, drop 0, reset-drop 0
>       Inspect: sip , packet 0, drop 0, reset-drop 0
>       Inspect: xdmcp, packet 0, drop 0, reset-drop 0
>
> Interface outside:
>   Service-policy: OUTSIDE
>     Class-map: CONNECTIONS
>       Set connection policy: conn-max 123 
>         current conns 0, drop 0
> pixfirewall(config)#
>
> The best SNMP objects i was able to find are 1.3.6.1.4.1.9.9.147 (ciscoFirewallMIB) and 1.3.6.1.4.1.9.9.491
> (ciscoUnifiedFirewallMIB) but they don't seem to have what i need.
>
>
>
> Thanks.
>
> Regards,
>  
> Antonio Soares, CCIE #18473 (R&S/SP)
> amsoares at netcabo.pt
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>   




More information about the cisco-nsp mailing list