Administration Guide
Page 12
... Agent Communication 8-4 SNMP Traps and Informs 8-5 SNMPv3 CLI User Management and AAA Integration 8-6 CLI and SNMP User Synchronization 8-6 Supported MIBs and Notifications 8-7 SNMP Limitations 8-24 SNMP Configuration Quick Start 8-25 Configuring SNMP Users 8-27 Defining SNMP Communities 8-29 Configuring an SNMP... Map 8-42 Creating a Layer 3 and Layer 4 Policy Map for SNMP Network Management Traffic Received by the ACE 8-42 Specifying a Layer 3 and Layer 4 Traffic Class with the Traffic Policy 8-43 Cisco 4700 Series Application Control Engine Appliance Administration Guide xii OL-11157-01
... Agent Communication 8-4 SNMP Traps and Informs 8-5 SNMPv3 CLI User Management and AAA Integration 8-6 CLI and SNMP User Synchronization 8-6 Supported MIBs and Notifications 8-7 SNMP Limitations 8-24 SNMP Configuration Quick Start 8-25 Configuring SNMP Users 8-27 Defining SNMP Communities 8-29 Configuring an SNMP... Map 8-42 Creating a Layer 3 and Layer 4 Policy Map for SNMP Network Management Traffic Received by the ACE 8-42 Specifying a Layer 3 and Layer 4 Traffic Class with the Traffic Policy 8-43 Cisco 4700 Series Application Control Engine Appliance Administration Guide xii OL-11157-01
Administration Guide
Page 17
... failover Appliances of flows. Chapter 7, Configuring Describes how to configure the ACE for redundancy, Redundant ACE which provides fault tolerance for Cisco Management Information Bases (MIBs) and to send event notifications to upgrade the software on your ACE. Upgrading Your ACE Software OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide xvii Appendix A, Describes...
... failover Appliances of flows. Chapter 7, Configuring Describes how to configure the ACE for redundancy, Redundant ACE which provides fault tolerance for Cisco Management Information Bases (MIBs) and to send event notifications to upgrade the software on your ACE. Upgrading Your ACE Software OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide xvii Appendix A, Describes...
Administration Guide
Page 311
... SNMP Contact • Configuring an SNMP Location • Configuring SNMP Notifications • Assigning a Trap-Source Interface for Cisco Management Information Bases (MIBs) and to send event notifications to query the Cisco 4700 Series Application Control Engine (ACE) appliance for SNMP Traps • Configuring SNMP Management Traffic Services • Example of an SNMP Configuration •...
... SNMP Contact • Configuring an SNMP Location • Configuring SNMP Notifications • Assigning a Trap-Source Interface for Cisco Management Information Bases (MIBs) and to send event notifications to query the Cisco 4700 Series Application Control Engine (ACE) appliance for SNMP Traps • Configuring SNMP Management Traffic Services • Example of an SNMP Configuration •...
Administration Guide
Page 312
... • SNMP Traps and Informs • SNMPv3 CLI User Management and AAA Integration • Supported MIBs and Notifications • SNMP Limitations Cisco 4700 Series Application Control Engine Appliance Administration Guide 8-2 OL-11157-01 You can configure the ACE to send traps (event notifications) to prevent it from being seen by using strong authentication...
... • SNMP Traps and Informs • SNMPv3 CLI User Management and AAA Integration • Supported MIBs and Notifications • SNMP Limitations Cisco 4700 Series Application Control Engine Appliance Administration Guide 8-2 OL-11157-01 You can configure the ACE to send traps (event notifications) to prevent it from being seen by using strong authentication...
Administration Guide
Page 313
... are contained in and out of the device or the number of bytes and packets in the MIB, which define the MIB object name, description, and default value.The ACE maintains a database of values for each variable is a database of the managed objects called managers and...agent resides in a managed network. OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 8-3 There are transmitted through an agent's port. Browsing a MIB entails issuing an SNMP get request from the network devices.The ACE supports traps and SNMP get requests but they all other...
... are contained in and out of the device or the number of bytes and packets in the MIB, which define the MIB object name, description, and default value.The ACE maintains a database of values for each variable is a database of the managed objects called managers and...agent resides in a managed network. OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 8-3 There are transmitted through an agent's port. Browsing a MIB entails issuing an SNMP get request from the network devices.The ACE supports traps and SNMP get requests but they all other...
Administration Guide
Page 314
... operation). Retrieve the value immediately after the variable that allows a request recipient to see the "Supported MIBs and Notifications" section. Retrieve a number of values (a get -next operation). Cisco 4700 Series Application Control Engine Appliance Administration Guide 8-4 OL-11157-01 Retrieve a value (a get -next...any time if a significant, predetermined event takes place on to know the exact MIB object instance you do the following: - The SNMP manager requests information from a MIB by the ACE, see what the originator wants to the agent device, or the status of ...
... operation). Retrieve the value immediately after the variable that allows a request recipient to see the "Supported MIBs and Notifications" section. Retrieve a number of values (a get -next operation). Cisco 4700 Series Application Control Engine Appliance Administration Guide 8-4 OL-11157-01 Retrieve a value (a get -next...any time if a significant, predetermined event takes place on to know the exact MIB object instance you do the following: - The SNMP manager requests information from a MIB by the ACE, see what the originator wants to the agent device, or the status of ...
Administration Guide
Page 315
.... However, an SNMP manager that clarify the status being relayed by the ACE, see the Cisco 4700 Series Application Control Engine Appliance System Message Guide. For standard MIBs, Cisco has enhanced some instances, traps can configure the values for clogOriginID and clogOriginIDType...associated with a notification is usually retransmitted. Notifications may contain a list of MIB variable bindings that receives inform requests acknowledges the message with each notification can configure the ACE to send notifications (such as traps or inform requests) to reach their ...
.... However, an SNMP manager that clarify the status being relayed by the ACE, see the Cisco 4700 Series Application Control Engine Appliance System Message Guide. For standard MIBs, Cisco has enhanced some instances, traps can configure the values for clogOriginID and clogOriginIDType...associated with a notification is usually retransmitted. Notifications may contain a list of MIB variable bindings that receives inform requests acknowledges the message with each notification can configure the ACE to send notifications (such as traps or inform requests) to reach their ...
Administration Guide
Page 317
... cevFanACE4710K9DimmFan {cevFan 92} PCI fan cevFanACE4710K9PciFan {cevFan 93} OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 8-7 Table 8-1 SNMP MIB Support MIB Support Capability MIB Appliance MIBs CISCO-ENTITY-VENDOR N/A TYPE-OID-MIB Description Defines the object identifiers (OIDs) assigned to various ACE components. The OIDs in the SNMP database by the entPhysicalTable of physical...
... cevFanACE4710K9DimmFan {cevFan 92} PCI fan cevFanACE4710K9PciFan {cevFan 93} OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 8-7 Table 8-1 SNMP MIB Support MIB Support Capability MIB Appliance MIBs CISCO-ENTITY-VENDOR N/A TYPE-OID-MIB Description Defines the object identifiers (OIDs) assigned to various ACE components. The OIDs in the SNMP database by the entPhysicalTable of physical...
Administration Guide
Page 318
... and logical entities within the ACE appliance chassis. Cisco 4700 Series Application Control Engine Appliance Administration Guide 8-8 OL-11157-01 SNMP Overview Table 8-1 SNMP MIB Support (continued) MIB Support Capability MIB CISCO-ENTITY-VENDOR N/A TYPE-OID-MIB (continued) ENTITY-MIB CISCO-ENTITYCAPABILITY Chapter 8 Configuring SNMP Description... AmbientTemp {cevSensor 57} Provides basic management and identification of these entities within the ACE. This MIB provides details on the physical entities within the ACE. The ENTITY-MIB is described in the Admin context.
... and logical entities within the ACE appliance chassis. Cisco 4700 Series Application Control Engine Appliance Administration Guide 8-8 OL-11157-01 SNMP Overview Table 8-1 SNMP MIB Support (continued) MIB Support Capability MIB CISCO-ENTITY-VENDOR N/A TYPE-OID-MIB (continued) ENTITY-MIB CISCO-ENTITYCAPABILITY Chapter 8 Configuring SNMP Description... AmbientTemp {cevSensor 57} Provides basic management and identification of these entities within the ACE. This MIB provides details on the physical entities within the ACE. The ENTITY-MIB is described in the Admin context.
Administration Guide
Page 319
...mapping between community strings and version-independent SNMP message parameters. The ENTITY-SENSOR-MIB is supported only in RFC 3584. OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 8-9 Note SNMP communities are...value and status of the sensor. Chapter 8 Configuring SNMP Table 8-1 SNMP MIB Support (continued) MIB Support ENTITY-SENSOR-MIB Capability MIB CISCO-ENTITYSENSOR-RFCCAPABILITY SNMPv3 Agent MIBs SNMP-COMMUNITY-MIB CISCO-SNMPCOMMUNITYCAPABILITY SNMP Overview Description Contains a single group called the entPhySensorTable, which ...
...mapping between community strings and version-independent SNMP message parameters. The ENTITY-SENSOR-MIB is supported only in RFC 3584. OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 8-9 Note SNMP communities are...value and status of the sensor. Chapter 8 Configuring SNMP Table 8-1 SNMP MIB Support (continued) MIB Support ENTITY-SENSOR-MIB Capability MIB CISCO-ENTITYSENSOR-RFCCAPABILITY SNMPv3 Agent MIBs SNMP-COMMUNITY-MIB CISCO-SNMPCOMMUNITYCAPABILITY SNMP Overview Description Contains a single group called the entPhySensorTable, which ...
Administration Guide
Page 320
... to SNMP applications. The Dispatcher in RFC 3413. 8-10 Cisco 4700 Series Application Control Engine Appliance Administration Guide OL-11157-01 Defines MIB objects that proper security is described in RFC 3412. Multiple transport...SNMP Overview Chapter 8 Configuring SNMP Table 8-1 SNMP MIB Support (continued) MIB Support SNMP-FRAMEWORKMIB Capability MIB CISCO-SNMPFRAMEWORKCAPABILITY SNMP-MPD-MIB CISCO-SNMP-MPDCAPABILITY.my SNMP-NOTIFICATIONMIB CISCO-SNMPNOTIFICATIONCAPABILITY SNMP-TARGET-MIB CISCO-SNMPTARGETCAPABILITY Description Defines the elements of SNMP parameters, or...
... to SNMP applications. The Dispatcher in RFC 3413. 8-10 Cisco 4700 Series Application Control Engine Appliance Administration Guide OL-11157-01 Defines MIB objects that proper security is described in RFC 3412. Multiple transport...SNMP Overview Chapter 8 Configuring SNMP Table 8-1 SNMP MIB Support (continued) MIB Support SNMP-FRAMEWORKMIB Capability MIB CISCO-SNMPFRAMEWORKCAPABILITY SNMP-MPD-MIB CISCO-SNMP-MPDCAPABILITY.my SNMP-NOTIFICATIONMIB CISCO-SNMPNOTIFICATIONCAPABILITY SNMP-TARGET-MIB CISCO-SNMPTARGETCAPABILITY Description Defines the elements of SNMP parameters, or...
Administration Guide
Page 321
... the authentication data and creates the PDUs. SNMPv1 and SNMPv2c use a community string match for SMNPv3. The MIB also enables the agent to the message processor, which then invokes the dispatcher. OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 8-11 The module then passes the PDUs to ensure...
... the authentication data and creates the PDUs. SNMPv1 and SNMPv2c use a community string match for SMNPv3. The MIB also enables the agent to the message processor, which then invokes the dispatcher. OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 8-11 The module then passes the PDUs to ensure...
Administration Guide
Page 322
... module with the agent infrastructure. The SNMPv3 architecture introduces VACM for SNMPv3. SNMP Overview Chapter 8 Configuring SNMP Table 8-1 SNMP MIB Support (continued) MIB Support SNMP-VIEW-BASEDACM-MIB Capability MIB CISCO-SNMPVACM-CAPABILITY Other MIBs CISCO-AAA-SERVEREXT-MIB CISCO-AAASERVER-EXTCAPABILITY Description Provides the View-based Access Control Model (VACM) for access control. The SNMP-VIEW-BASED-ACM...
... module with the agent infrastructure. The SNMPv3 architecture introduces VACM for SNMPv3. SNMP Overview Chapter 8 Configuring SNMP Table 8-1 SNMP MIB Support (continued) MIB Support SNMP-VIEW-BASEDACM-MIB Capability MIB CISCO-SNMPVACM-CAPABILITY Other MIBs CISCO-AAA-SERVEREXT-MIB CISCO-AAASERVER-EXTCAPABILITY Description Provides the View-based Access Control Model (VACM) for access control. The SNMP-VIEW-BASED-ACM...
Administration Guide
Page 323
... MIB CISCO-AAASERVERCAPABILITY CISCO-APPLICATIONACCELERATIONCAPABILITY-MIB Description Provides configuration and statistics that provide AAA functions. The CISCO-AAA-SERVER-MIB provides the following information: • A table for configuring AAA servers. • Identities of external AAA servers. • Statistics for each AAA function. • Status of servers that reflect the state of the application acceleration system. The ACE...
... MIB CISCO-AAASERVERCAPABILITY CISCO-APPLICATIONACCELERATIONCAPABILITY-MIB Description Provides configuration and statistics that provide AAA functions. The CISCO-AAA-SERVER-MIB provides the following information: • A table for configuring AAA servers. • Identities of external AAA servers. • Statistics for each AAA function. • Status of servers that reflect the state of the application acceleration system. The ACE...
Administration Guide
Page 324
..., and Secure Socket Layer (SSL). In this case, the CISCO-IF-EXTENSION-MIB supports all the interfaces for the ACE appliance, the slbEntity Index will always have a value of the ACE. The CISCO-IF-EXTENSION-MIB is not applicable for Admin contexts, while each individual user context... supports only VLAN and BVI interfaces. 8-14 Cisco 4700 Series Application Control Engine Appliance Administration Guide OL-11157-01 CISCO-IF-EXTENSION- Note The Ethernet...
..., and Secure Socket Layer (SSL). In this case, the CISCO-IF-EXTENSION-MIB supports all the interfaces for the ACE appliance, the slbEntity Index will always have a value of the ACE. The CISCO-IF-EXTENSION-MIB is not applicable for Admin contexts, while each individual user context... supports only VLAN and BVI interfaces. 8-14 Cisco 4700 Series Application Control Engine Appliance Administration Guide OL-11157-01 CISCO-IF-EXTENSION- Note The Ethernet...
Administration Guide
Page 325
... profile. The IP protocol is independent of the same profile name belong to multiple interfaces. Chapter 8 Configuring SNMP SNMP Overview Table 8-1 SNMP MIB Support (continued) MIB Support CISCO-IP-PROTOCOLFILTER-MIB Capability MIB CISCO-IP-PROTOCOLFILTER-CAPABILITY Description Manages information to create, delete, and get information about filter profiles. A filter profile can be changed once it...
... profile. The IP protocol is independent of the same profile name belong to multiple interfaces. Chapter 8 Configuring SNMP SNMP Overview Table 8-1 SNMP MIB Support (continued) MIB Support CISCO-IP-PROTOCOLFILTER-MIB Capability MIB CISCO-IP-PROTOCOLFILTER-CAPABILITY Description Manages information to create, delete, and get information about filter profiles. A filter profile can be changed once it...
Administration Guide
Page 326
... entPhysicalIndex will always be managed independently. Each virtual context is available in the Admin context (the default ACE context). SNMP Overview Chapter 8 Configuring SNMP Table 8-1 SNMP MIB Support (continued) MIB Support CISCO-L4L7RESOURCELIMIT-MIB CISCO-MODULEVIRTUALIZATION-MIB Capability MIB CISCO-L4L7MODULERESOURCE-LIMITCAPABILITY CISCO-MODULEVIRTUALIZATIONCAPABILITY Description Manages resource classes and configuring minimum/maximum limits to Layer 4 through 7 modules that support managing...
... entPhysicalIndex will always be managed independently. Each virtual context is available in the Admin context (the default ACE context). SNMP Overview Chapter 8 Configuring SNMP Table 8-1 SNMP MIB Support (continued) MIB Support CISCO-L4L7RESOURCELIMIT-MIB CISCO-MODULEVIRTUALIZATION-MIB Capability MIB CISCO-L4L7MODULERESOURCE-LIMITCAPABILITY CISCO-MODULEVIRTUALIZATIONCAPABILITY Description Manages resource classes and configuring minimum/maximum limits to Layer 4 through 7 modules that support managing...
Administration Guide
Page 327
... that can be 1. The sysObjectID OID value is listed as follows: Product Name (PID)/sysObjectID ACE4710-K9 ciscoACE4710K9 {ciscoProducts 824} Acts as an extension to the Cisco server load-balancing MIB (CISCO-SLB-MIB). The following MIB objects for the ACE include non-SLB related connections as well: • cslbxStatsCurrConnections • cslbxStatsTimedOutConnections Acts as an estimate. OL...
... that can be 1. The sysObjectID OID value is listed as follows: Product Name (PID)/sysObjectID ACE4710-K9 ciscoACE4710K9 {ciscoProducts 824} Acts as an extension to the Cisco server load-balancing MIB (CISCO-SLB-MIB). The following MIB objects for the ACE include non-SLB related connections as well: • cslbxStatsCurrConnections • cslbxStatsTimedOutConnections Acts as an estimate. OL...
Administration Guide
Page 328
... OL-11157-01 SNMP Overview Chapter 8 Configuring SNMP Table 8-1 SNMP MIB Support (continued) MIB Support CISCO-SLB-MIB CISCO-SYSLOG-EXTMIB Capability MIB CISCO-SLBCAPABILITY CISCO-SYSLOG-EXTCAPABILITY Description Manages the Server Load-Balancing (SLB) Manager(s). Because the slot numbers value is not applicable for the ACE. This MIB monitors the SLB connections statistics, server farms, real servers, VIP status...
... OL-11157-01 SNMP Overview Chapter 8 Configuring SNMP Table 8-1 SNMP MIB Support (continued) MIB Support CISCO-SLB-MIB CISCO-SYSLOG-EXTMIB Capability MIB CISCO-SLBCAPABILITY CISCO-SYSLOG-EXTCAPABILITY Description Manages the Server Load-Balancing (SLB) Manager(s). Because the slot numbers value is not applicable for the ACE. This MIB monitors the SLB connections statistics, server farms, real servers, VIP status...
Administration Guide
Page 329
... RFC 3418. IF-MIB IP-MIB SNMPv2-MIB Syslog is described in Admin context. The CISCO-SYSLOG-MIB provides access to enable or disable the transmission of IP routes. Note This MIB does not track messages that convey management information between the agents and the management stations. The IP-MIB is described by the ACE. In this case...
... RFC 3418. IF-MIB IP-MIB SNMPv2-MIB Syslog is described in Admin context. The CISCO-SYSLOG-MIB provides access to enable or disable the transmission of IP routes. Note This MIB does not track messages that convey management information between the agents and the management stations. The IP-MIB is described by the ACE. In this case...