Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Wei_Zhang
Employee
Employee

SNMP OID for Mobile Access total used licenses.

Hi Team,

Do we have one SNMP OID for Mobile Access total used licenses? I know that we have one SNMP OID(.1.3.6.1.4.1.2620.1.2.5.4.23.0) for the number of Remote Access users (SR/SC/EPC/SNX) currently connected to a VPN-1 gateway described in sk54641, but I don't find one SNMP OID related to Mobile Access.

And I also have another questions that the Mobile Access total used licenses (sk112412,cvpnd_admin license all) will include the number of Remote Access users (fw tab -t userc_users -s), right?

Many thanks.

0 Kudos
10 Replies
Wei_Zhang
Employee
Employee

Any ideas?

Many thanks.

0 Kudos
John_Fleming
Advisor

On the licensing question..

 

I just opened a ticket about SMB devices not showing this tree correctly but this is the only license bits i've found.

 

.1.3.6.1.4.1.2620.1.6.18

svnLicensing

 

under there i see...

licensingBladeActive

licensingTotalQuota

licensingUsedQuota

No idea if this will show correct info for MAB or not, but its worth checking out. If it doesn't I would raise a ticket. 

 

Wei_Zhang
Employee
Employee

Hi John,

Much appreciated for your help! 

It seems the one I need, I will check it later!

Thanks again!

0 Kudos
John_Fleming
Advisor

reply back with what you find. 

 

Good luck!

0 Kudos
Wei_Zhang
Employee
Employee

I don't know why the  licensingUsedQuota result is always 0, seems related to the Eval license.

0 Kudos
Wei_Zhang
Employee
Employee

According to my new findings, the result doesn't update in real-time, after waiting for about 20-30 mins, the quota is update.

SNMPv2-SMI::enterprises.2620.1.6.18.1.1.10.19.0 = INTEGER: 4

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Also have a look at .1.3.6.1.4.1.2620.500.9000 per sk90860.

This SK also talks to extending snmp with custom shell scripts if needed.

 

 

CCSM R77/R80/ELITE
Wei_Zhang
Employee
Employee

Great suggestions! I just ignore that part in sk90860.

cvpnd_admin license mob | grep "Total used licenses are:" | awk -F ': ' '{print $2}'

It can be a perfect workaround to achieve this. Thanks a lot!

0 Kudos
Jeroen_Deckers
Participant

I want to monitor current mobile vpn users connected via SNMP.
I have the following issue, the difference between the snmp and the ssh command:

[Expert@DC1FWCHP01:0]# fw tab -t userc_users -s
HOST NAME ID #VALS #PEAK #SLINKS
localhost userc_users 153 94 97 0

08-Jul-20 13:01:47 (18 ms) : SNMP V2c
08-Jul-20 13:01:47 (23 ms) : Custom OID 1.3.6.1.4.1.2620.1.2.5.4.23.0
08-Jul-20 13:01:47 (31 ms) : SNMP Datatype: ASN_OCTET_STR
08-Jul-20 13:01:47 (36 ms) : -------
08-Jul-20 13:01:47 (41 ms) : Value: 285
08-Jul-20 13:01:47 (46 ms) : Done

Someone has an explanation for this?
For some weeks the SNMP was giving the correct information, since a week it is giving way higher and incorrect numbers

0 Kudos
Americo_two
Participant

Hi Jeroen,
I have a case with TAC about this same question, they suggested check on this sk152132 about the solution, as explained on SK table userc_users is not the best way to monitoring VPN users, but I don´t have yet the best way to monitoring it with SNMP.

For a while I´m using this workaround - https://community.checkpoint.com/t5/Security-Gateways/How-to-Monitor-Concurrent-VPN-users-connected-....

 

In my opinion, monitoring VPN users with SNMP it should be simple monitoring and not something as complicated as we are seeing, there are several people with the same doubts.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events