SNMP OID for Mobile Access total used licenses.

[Wei_Zhang]

Hi Team,

Do we have one SNMP OID for Mobile Access total used licenses? I know that we have one SNMP OID(.1.3.6.1.4.1.2620.1.2.5.4.23.0) for the number of Remote Access users (SR/SC/EPC/SNX) currently connected to a VPN-1 gateway described in sk54641, but I don't find one SNMP OID related to Mobile Access.

And I also have another questions that the Mobile Access total used licenses (sk112412,cvpnd_admin license all) will include the number of Remote Access users (fw tab -t userc_users -s), right?

Many thanks.

[Wei_Zhang]

Any ideas?

Many thanks.

[John_Fleming]

On the licensing question..

I just opened a ticket about SMB devices not showing this tree correctly but this is the only license bits i've found.

.1.3.6.1.4.1.2620.1.6.18

svnLicensing

under there i see...

licensingBladeActive

licensingTotalQuota

licensingUsedQuota

No idea if this will show correct info for MAB or not, but its worth checking out. If it doesn't I would raise a ticket. 

[Wei_Zhang]

Hi John,

Much appreciated for your help! 

It seems the one I need, I will check it later!

Thanks again!

[John_Fleming]

reply back with what you find. 

Good luck!

[Wei_Zhang]

I don't know why the  licensingUsedQuota result is always 0, seems related to the Eval license.

[Wei_Zhang]

According to my new findings, the result doesn't update in real-time, after waiting for about 20-30 mins, the quota is update.

SNMPv2-SMI::enterprises.2620.1.6.18.1.1.10.19.0 = INTEGER: 4

[Chris_Atkinson]

Also have a look at .1.3.6.1.4.1.2620.500.9000 per sk90860.

This SK also talks to extending snmp with custom shell scripts if needed.

[Wei_Zhang]

Great suggestions! I just ignore that part in sk90860.

cvpnd_admin license mob | grep "Total used licenses are:" | awk -F ': ' '{print $2}'

It can be a perfect workaround to achieve this. Thanks a lot!

[Jeroen_Deckers]

I want to monitor current mobile vpn users connected via SNMP.
I have the following issue, the difference between the snmp and the ssh command:

[Expert@DC1FWCHP01:0]# fw tab -t userc_users -s
HOST NAME ID #VALS #PEAK #SLINKS
localhost userc_users 153 94 97 0

08-Jul-20 13:01:47 (18 ms) : SNMP V2c
08-Jul-20 13:01:47 (23 ms) : Custom OID 1.3.6.1.4.1.2620.1.2.5.4.23.0
08-Jul-20 13:01:47 (31 ms) : SNMP Datatype: ASN_OCTET_STR
08-Jul-20 13:01:47 (36 ms) : -------
08-Jul-20 13:01:47 (41 ms) : Value: 285
08-Jul-20 13:01:47 (46 ms) : Done

Someone has an explanation for this?
For some weeks the SNMP was giving the correct information, since a week it is giving way higher and incorrect numbers

[Americo_two]

Hi Jeroen,
I have a case with TAC about this same question, they suggested check on this sk152132 about the solution, as explained on SK table userc_users is not the best way to monitoring VPN users, but I don´t have yet the best way to monitoring it with SNMP.

For a while I´m using this workaround - https://community.checkpoint.com/t5/Security-Gateways/How-to-Monitor-Concurrent-VPN-users-connected-....

In my opinion, monitoring VPN users with SNMP it should be simple monitoring and not something as complicated as we are seeing, there are several people with the same doubts.