topic Re: SNMP OID for Mobile Access total used licenses. in SASE and Remote Access

SNMP OID for Mobile Access total used licenses.

Wei_Zhang — Wed, 26 Feb 2020 15:32:16 GMT

Hi Team,

Do we have one SNMP OID for Mobile Access total used licenses? I know that we have one SNMP OID(.1.3.6.1.4.1.2620.1.2.5.4.23.0) for the number of Remote Access users (SR/SC/EPC/SNX) currently connected to a VPN-1 gateway described in sk54641, but I don't find one SNMP OID related to Mobile Access.

And I also have another questions that the Mobile Access total used licenses (sk112412,cvpnd_admin license all) will include the number of Remote Access users (fw tab -t userc_users -s), right?

Many thanks.

Re: SNMP OID for Mobile Access total used licenses.

Wei_Zhang — Fri, 28 Feb 2020 02:18:10 GMT

Any ideas?

Many thanks.

Re: SNMP OID for Mobile Access total used licenses.

John_Fleming — Fri, 28 Feb 2020 06:16:58 GMT

On the licensing question..

I just opened a ticket about SMB devices not showing this tree correctly but this is the only license bits i've found.

.1.3.6.1.4.1.2620.1.6.18

svnLicensing

under there i see...

licensingBladeActive

licensingTotalQuota

licensingUsedQuota

No idea if this will show correct info for MAB or not, but its worth checking out. If it doesn't I would raise a ticket.

Re: SNMP OID for Mobile Access total used licenses.

Wei_Zhang — Fri, 28 Feb 2020 15:30:06 GMT

Hi John,

Much appreciated for your help!

It seems the one I need, I will check it later!

Thanks again!

Re: SNMP OID for Mobile Access total used licenses.

John_Fleming — Fri, 28 Feb 2020 16:09:11 GMT

reply back with what you find.

Good luck!

Re: SNMP OID for Mobile Access total used licenses.

Chris_Atkinson — Sat, 29 Feb 2020 00:45:38 GMT

Also have a look at .1.3.6.1.4.1.2620.500.9000 per sk90860.

This SK also talks to extending snmp with custom shell scripts if needed.

Re: SNMP OID for Mobile Access total used licenses.

Wei_Zhang — Sat, 29 Feb 2020 05:43:42 GMT

Great suggestions! I just ignore that part in sk90860.

cvpnd_admin license mob | grep "Total used licenses are:" | awk -F ': ' '{print $2}'

It can be a perfect workaround to achieve this. Thanks a lot!

Re: SNMP OID for Mobile Access total used licenses.

Wei_Zhang — Sat, 29 Feb 2020 05:53:35 GMT

I don't know why the licensingUsedQuota result is always 0, seems related to the Eval license.

Re: SNMP OID for Mobile Access total used licenses.

Wei_Zhang — Sat, 29 Feb 2020 06:44:20 GMT

According to my new findings, the result doesn't update in real-time, after waiting for about 20-30 mins, the quota is update.

SNMPv2-SMI::enterprises.2620.1.6.18.1.1.10.19.0 = INTEGER: 4

Re: SNMP OID for Mobile Access total used licenses.

Jeroen_Deckers — Wed, 08 Jul 2020 11:03:50 GMT

I want to monitor current mobile vpn users connected via SNMP.
I have the following issue, the difference between the snmp and the ssh command:

[Expert@DC1FWCHP01:0]# fw tab -t userc_users -s
HOST NAME ID #VALS #PEAK #SLINKS
localhost userc_users 153 94 97 0

08-Jul-20 13:01:47 (18 ms) : SNMP V2c
08-Jul-20 13:01:47 (23 ms) : Custom OID 1.3.6.1.4.1.2620.1.2.5.4.23.0
08-Jul-20 13:01:47 (31 ms) : SNMP Datatype: ASN_OCTET_STR
08-Jul-20 13:01:47 (36 ms) : -------
08-Jul-20 13:01:47 (41 ms) : Value: 285
08-Jul-20 13:01:47 (46 ms) : Done

Someone has an explanation for this?
For some weeks the SNMP was giving the correct information, since a week it is giving way higher and incorrect numbers

Re: SNMP OID for Mobile Access total used licenses.

Americo_two — Thu, 01 Apr 2021 14:43:39 GMT

Hi Jeroen,
I have a case with TAC about this same question, they suggested check on this sk152132 about the solution, as explained on SK table userc_users is not the best way to monitoring VPN users, but I don´t have yet the best way to monitoring it with SNMP.

For a while I´m using this workaround - https://community.checkpoint.com/t5/Security-Gateways/How-to-Monitor-Concurrent-VPN-users-connected-to-a-Gateway-OID/td-p/79897.

In my opinion, monitoring VPN users with SNMP it should be simple monitoring and not something as complicated as we are seeing, there are several people with the same doubts.