CISCO-REMOTE-ACCESS-MONITOR-MIB

File: CISCO-REMOTE-ACCESS-MONITOR-MIB.mib (74519 bytes)

Imported modules

SNMPv2-SMI SNMPv2-TC SNMPv2-CONF
INET-ADDRESS-MIB SNMP-FRAMEWORK-MIB CISCO-SMI

Imported symbols

MODULE-IDENTITY OBJECT-TYPE NOTIFICATION-TYPE
Counter32 Counter64 Gauge32
Integer32 Unsigned32 zeroDotZero
TEXTUAL-CONVENTION TimeStamp TruthValue
MODULE-COMPLIANCE OBJECT-GROUP NOTIFICATION-GROUP
InetAddressType InetAddress SnmpAdminString
ciscoMgmt

Defined Types

RasProtocol  
The protocol immediately underlying the remote access session. The value 'other' has been listed to allow for the MIB to be supported on proprietary protocols not listed here.
TEXTUAL-CONVENTION    
  INTEGER other(1), ipsec(2), l2tp(3), l2tpoveripsec(4), pptp(5), l2f(6), ssl(7)  

UserAuthenMethod  
The mechanism used to authenticate the user. The value 'other' has been listed to allow for the MIB to support proprietary authentication methods not listed here.
TEXTUAL-CONVENTION    
  INTEGER none(1), other(2), radius(3), tacacsplus(4), kerberos(5), local(6), ldap(7), ntlm(8), sdi(9)  

UserAuthorMethod  
The mechanism used to authorize the user. The value 'other' has been listed to allow for the MIB to support proprietary authorization mechanisms not listed here.
TEXTUAL-CONVENTION    
  INTEGER none(1), other(2), radius(3), tacacsplus(4), kerberos(5), local(6), ldap(7)  

SessionEncrAlgo  
The encryption algorithm used to secure the remote access session.
TEXTUAL-CONVENTION    
  INTEGER none(1), des(2), des3(3), rc4(4), rc5(5), idea(6), cast(7), blowfish(8), aes(9)  

SessionAuthAlgo  
The authentication algorithm used by to perform packet authentication in the remote access session. The value 'other' has been listed to allow for the MIB to support packet validation algorithms not listed here.
TEXTUAL-CONVENTION    
  INTEGER none(1), other(2), hmacMd5(3), hmacSha(4)  

SessionCompressionAlgo  
The compression algorithm used in the remote access session. The value 'other' has been listed to allow for the MIB to support compression not listed here.
TEXTUAL-CONVENTION    
  INTEGER none(1), other(2), lzs(3)  

SessionStatus  
The status of a remote access session. initializing: the session is in the process of being established established : the session is established and is ready to carry application traffic. Sessions in this state may also be referred to as 'active' sessions. terminating : the session is in the process of termination. Objects of this type may be used to terminate an established session by setting value of the object to terminating(3). Management entity may not write values initializing(1) or established(2) onto objects of this type. Doing so would cause the managed entity to return an error condition.
TEXTUAL-CONVENTION    
  INTEGER initializing(1), established(2), terminating(3)  

SessionIndex  
The type used to index a remote access session.
TEXTUAL-CONVENTION    
  Integer32 1..2147483647  

FailureRecordIndex  
The type used to index failure records in the failure archive.
TEXTUAL-CONVENTION    
  Unsigned32 1..4294967295  

CrasSessionEntry  
SEQUENCE    
  crasUsername SnmpAdminString
  crasGroup SnmpAdminString
  crasSessionIndex SessionIndex
  crasAuthenMethod UserAuthenMethod
  crasAuthorMethod UserAuthorMethod
  crasSessionDuration Counter32
  crasLocalAddressType InetAddressType
  crasLocalAddress InetAddress
  crasISPAddressType InetAddressType
  crasISPAddress InetAddress
  crasSessionProtocol RasProtocol
  crasProtocolElement OBJECT IDENTIFIER
  crasSessionEncryptionAlgo SessionEncrAlgo
  crasSessionPktAuthenAlgo SessionAuthAlgo
  crasSessionCompressionAlgo SessionCompressionAlgo
  crasHeartbeatInterval Unsigned32
  crasClientVendorString SnmpAdminString
  crasClientVersionString SnmpAdminString
  crasClientOSVendorString SnmpAdminString
  crasClientOSVersionString SnmpAdminString
  crasPrimWINSServerAddrType InetAddressType
  crasPrimWINSServer InetAddress
  crasSecWINSServerAddrType InetAddressType
  crasSecWINSServer InetAddress
  crasPrimDNSServerAddrType InetAddressType
  crasPrimDNSServer InetAddress
  crasSecDNSServerAddrType InetAddressType
  crasSecDNSServer InetAddress
  crasDHCPServerAddrType InetAddressType
  crasDHCPServer InetAddress
  crasSessionInPkts Counter64
  crasSessionOutPkts Counter64
  crasSessionInDropPkts Counter64
  crasSessionOutDropPkts Counter64
  crasSessionInOctets Counter64
  crasSessionOutOctets Counter64
  crasSessionState SessionStatus

CrasActGroupEntry  
SEQUENCE    
  crasActGrpName SnmpAdminString
  crasActGrNumUsers Integer32
  crasActGrpInPkts Counter64
  crasActGrpOutPkts Counter64
  crasActGrpInDropPkts Counter64
  crasActGrpOutDropPkts Counter64
  crasActGrpInOctets Counter64
  crasActGrpOutOctets Counter64

CrasSessFailEntry  
SEQUENCE    
  crasSessFailIndex FailureRecordIndex
  crasSessFailUsername SnmpAdminString
  crasSessFailGroupname SnmpAdminString
  crasSessFailType INTEGER
  crasSessFailReason INTEGER
  crasSessFailTime TimeStamp
  crasSessFailSessionIndex SessionIndex
  crasSessFailISPAddrType InetAddressType
  crasSessFailISPAddr InetAddress
  crasSessFailLocalAddrType InetAddressType
  crasSessFailLocalAddr InetAddress

CrasGrpFailEntry  
SEQUENCE    
  crasGrpFailGroupname SnmpAdminString
  crasGrpFailNumFailAuths Counter64
  crasGrpFailNumResourceFailures Counter64
  crasGrpFailNumDeclined Counter64
  crasGrpFailNumTerminatedMgmt Counter64
  crasGrpFailNumTerminatedOther Counter64

Defined Values

ciscoRemoteAccessMonitorMIB 1.3.6.1.4.1.9.9.392
Acronyms and Definitions The following acronyms and terms are used in this document: IPSec: Secure IP Protocol VPN: Virtual Private Network RAS: Remote Access Service ISP: Internet Service Provider. LAN: Local Area Network Group: A collection of remote access users grouped and managed together as a single entity for administrative convenience. Session: A Remote Access Session. SVC: SSL VPN Client Webvpn: VPN connection established using web browser. Overview of the MIB This is a MIB Module for monitoring the structures in Virtual Private Networks based remote access networks. The MIB seeks to create a common model of Remote Access across implementations of the service on layer 2 (PPTP, L2TP, L2F), layer 3 (IPsec) and layer 4 (SSL) virtual private networks. The MIB defines counters and objects of interest to performance/fault monitoring in a way which is independent of the technology of the remote access implementation. MIB contains eight major groups of objects which are used to manage Remote Access connections: a) Remote Access capacity group This section defines metrics to gauge the limits of resources on this device which are critical to RAS service. b) Remote Access resource usage group This section defines metrics to gauge the usage of resources on this device which are critical to RAS service service. c) Current activity and performance of RAS service This section defines metrics to gauge the current remote access activity. d) Remote Access Service failures This section defines metrics to monitor session failures and failures of the service itself, measured at aggregate level, session level and group level. e) Security violations in the Remote Access service This section defines metrics which reflect the state of remote access service of interest to Security Operations staff in an enterprise. f) Threshold group (allows definition of high water marks) This section allows the management entity to define thresholds to set high water marks on critical metrics. g) Notifications This section defines notifications to signal significant events pertaining to the Remote Access Service.
MODULE-IDENTITY    

ciscoRasMonitorMIBNotifs 1.3.6.1.4.1.9.9.392.0
OBJECT IDENTIFIER    

ciscoRasMonitorMIBObjects 1.3.6.1.4.1.9.9.392.1
OBJECT IDENTIFIER    

ciscoRasMonitorMIBConform 1.3.6.1.4.1.9.9.392.2
OBJECT IDENTIFIER    

crasCapacity 1.3.6.1.4.1.9.9.392.1.1
OBJECT IDENTIFIER    

crasResourceUsage 1.3.6.1.4.1.9.9.392.1.2
OBJECT IDENTIFIER    

crasActivity 1.3.6.1.4.1.9.9.392.1.3
OBJECT IDENTIFIER    

crasFailures 1.3.6.1.4.1.9.9.392.1.4
OBJECT IDENTIFIER    

crasSecurity 1.3.6.1.4.1.9.9.392.1.5
OBJECT IDENTIFIER    

crasThresholds 1.3.6.1.4.1.9.9.392.1.6
OBJECT IDENTIFIER    

crasNotifCntl 1.3.6.1.4.1.9.9.392.1.7
OBJECT IDENTIFIER    

crasMaxSessionsSupportable 1.3.6.1.4.1.9.9.392.1.1.1
The maximum number of remote access sessions that may be supported on this device. If the device imposes no arbitrary limit on the maximum number of sessions, it should return a value of 0.
OBJECT-TYPE    
  Integer32 0..2147483647  

crasMaxUsersSupportable 1.3.6.1.4.1.9.9.392.1.1.2
The maximum number of remote access users for whom Remote Access sessions may be supported on this device. If the device imposes no arbitrary limit on the maximum number of users, it should return a value of 0.
OBJECT-TYPE    
  Integer32 0..2147483647  

crasMaxGroupsSupportable 1.3.6.1.4.1.9.9.392.1.1.3
The maximum number of remote access groups that may be defined on this device. 'Group' refers to a collection of users grouped together for administrative convenience. If the device imposes no arbitrary limit on the maximum number of groups, it should return a value of 0.
OBJECT-TYPE    
  Integer32 0..2147483647  

crasNumCryptoAccelerators 1.3.6.1.4.1.9.9.392.1.1.4
The maximum number of hardware crypto accelerators which can be installed on this device to support remote access sessions. 'cryptoaccelerator' denotes a hardware/software entity which the managed entity uses to offload some or all computations pertaining to cryptographic operations. If the device imposes no arbitrary limit on the number of crypto accelerators to support Remote Access function, it should return a value of 0.
OBJECT-TYPE    
  Integer32 0..2147483647  

crasGlobalBwUsage 1.3.6.1.4.1.9.9.392.1.2.1
The average bandwidth used by all the active remote access sessions.
OBJECT-TYPE    
  Gauge32  

crasNumSessions 1.3.6.1.4.1.9.9.392.1.3.1
The number of currently active sessions. A session is a connection terminating on the managed entity which has been established to provide remote access connectivity to a user. A session is said to be 'active' if it is ready to carry application traffic between the user and the managed entity. A session which is not active is defined to be 'dormant'.
OBJECT-TYPE    
  Gauge32  

crasNumPrevSessions 1.3.6.1.4.1.9.9.392.1.3.2
The number of remote access sessions which were previously active but which where since terminated. Measured since the last reboot of the device.
OBJECT-TYPE    
  Counter32  

crasNumUsers 1.3.6.1.4.1.9.9.392.1.3.3
The number of users who have active sessions.
OBJECT-TYPE    
  Gauge32  

crasNumGroups 1.3.6.1.4.1.9.9.392.1.3.4
The number of user groups whose members have active sessions.
OBJECT-TYPE    
  Gauge32  

crasGlobalInPkts 1.3.6.1.4.1.9.9.392.1.3.5
The total number of packets received by all currently and previously active remote access sessions.
OBJECT-TYPE    
  Counter64  

crasGlobalOutPkts 1.3.6.1.4.1.9.9.392.1.3.6
The total number of packets transmitted by all currently and previously active remote access sessions.
OBJECT-TYPE    
  Counter64  

crasGlobalInOctets 1.3.6.1.4.1.9.9.392.1.3.7
The total number of octets received by all currently and previously active remote access sessions. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
OBJECT-TYPE    
  Counter64  

crasGlobalInDecompOctets 1.3.6.1.4.1.9.9.392.1.3.8
The total number of decompressed octets received by all current and previous remote access sessions. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of crasGlobalInOctets.
OBJECT-TYPE    
  Counter64  

crasGlobalOutOctets 1.3.6.1.4.1.9.9.392.1.3.9
The total number of octets transmitted by all currently and previously active remote access sessions. This value is accumulated AFTER determining whether or not the packet should be compressed.
OBJECT-TYPE    
  Counter64  

crasGlobalOutUncompOctets 1.3.6.1.4.1.9.9.392.1.3.10
The total number of uncompressed octets sent by all current and previous remote access sessions. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of crasGlobalOutOctets.
OBJECT-TYPE    
  Counter64  

crasGlobalInDropPkts 1.3.6.1.4.1.9.9.392.1.3.11
The total number of packets which were dropped during receive processing by all currently and previously active remote access sessions.
OBJECT-TYPE    
  Counter64  

crasGlobalOutDropPkts 1.3.6.1.4.1.9.9.392.1.3.12
The total number of packets which were dropped during receive processing by all currently and previously active remote access sessions.
OBJECT-TYPE    
  Counter64  

crasSessionTable 1.3.6.1.4.1.9.9.392.1.3.21
This table lists all the currently active sessions. For each session, it lists the attributes (user, group, protocol, security), statistics (packet and octets) and status.
OBJECT-TYPE    
  SEQUENCE OF  
    CrasSessionEntry

crasSessionEntry 1.3.6.1.4.1.9.9.392.1.3.21.1
Each entry contains the attributes, statistics and status of an active session.
OBJECT-TYPE    
  CrasSessionEntry  

crasUsername 1.3.6.1.4.1.9.9.392.1.3.21.1.1
The name of the user associated with this remote access session.
OBJECT-TYPE    
  SnmpAdminString Size(0..128)  

crasGroup 1.3.6.1.4.1.9.9.392.1.3.21.1.2
The name of the user group to which this remote access session belongs.
OBJECT-TYPE    
  SnmpAdminString  

crasSessionIndex 1.3.6.1.4.1.9.9.392.1.3.21.1.3
Unique index to distinguish between multiple Remote Access Sessions associated with the same user. The value of crasSessionIndex must increase monotonically till it wraps. An implementation may choose to wrap this index before the value of 2147483647.
OBJECT-TYPE    
  SessionIndex  

crasAuthenMethod 1.3.6.1.4.1.9.9.392.1.3.21.1.4
The method used to authenticate the user prior to establishing the session.
OBJECT-TYPE    
  UserAuthenMethod  

crasAuthorMethod 1.3.6.1.4.1.9.9.392.1.3.21.1.5
The method used to authorize the user prior to establishing the session.
OBJECT-TYPE    
  UserAuthorMethod  

crasSessionDuration 1.3.6.1.4.1.9.9.392.1.3.21.1.6
The number of seconds elapsed since this session was established.
OBJECT-TYPE    
  Counter32  

crasLocalAddressType 1.3.6.1.4.1.9.9.392.1.3.21.1.7
The type of the address returned in 'crasLocalAddress'.
OBJECT-TYPE    
  InetAddressType  

crasLocalAddress 1.3.6.1.4.1.9.9.392.1.3.21.1.8
The IP address assigned to the client of this session in the private network assigned by the managed entity.
OBJECT-TYPE    
  InetAddress  

crasISPAddressType 1.3.6.1.4.1.9.9.392.1.3.21.1.9
The type of the address returned in 'crasISPAddress'.
OBJECT-TYPE    
  InetAddressType  

crasISPAddress 1.3.6.1.4.1.9.9.392.1.3.21.1.10
The IP address of the peer (client) assigned by the ISP. This is the address of the client device in the public network.
OBJECT-TYPE    
  InetAddress  

crasSessionProtocol 1.3.6.1.4.1.9.9.392.1.3.21.1.11
The protocol underlying this remote access session.
OBJECT-TYPE    
  RasProtocol  

crasProtocolElement 1.3.6.1.4.1.9.9.392.1.3.21.1.12
A reference to MIB definitions specific to the protocol underlying corresponding to the session or tunnel used to realized the remote access session corresponding to this conceptual row. For instance, if this remote access session is based on IPsec, then this object must contain the complete instance identifier of the IPsec tunnel corresponding to this remote access session. If no MIB definitions specific to the underlying protocol are available, the value should be set to the OBJECT IDENTIFIER { 0 0 }.
OBJECT-TYPE    
  OBJECT IDENTIFIER  

crasSessionEncryptionAlgo 1.3.6.1.4.1.9.9.392.1.3.21.1.13
The algorithm used by this remote access session to encrypt its payload.
OBJECT-TYPE    
  SessionEncrAlgo  

crasSessionPktAuthenAlgo 1.3.6.1.4.1.9.9.392.1.3.21.1.14
The algorithm used by this remote access session to to validate packets.
OBJECT-TYPE    
  SessionAuthAlgo  

crasSessionCompressionAlgo 1.3.6.1.4.1.9.9.392.1.3.21.1.15
The algorithm used by this remote access session to compress packets.
OBJECT-TYPE    
  SessionCompressionAlgo  

crasHeartbeatInterval 1.3.6.1.4.1.9.9.392.1.3.21.1.16
The interval in seconds between two successive heartbeats employed by this session. Value of 0 denotes that no heartbeat is used.
OBJECT-TYPE    
  Unsigned32 0..4294967295  

crasClientVendorString 1.3.6.1.4.1.9.9.392.1.3.21.1.17
The string identifying the vendor of the client application initiating this Remote Access session.
OBJECT-TYPE    
  SnmpAdminString  

crasClientVersionString 1.3.6.1.4.1.9.9.392.1.3.21.1.18
The string identifying the version of the of the client application initiating the Remote Access session. This can be used by the administrator to identify which users are running unsupported client versions.
OBJECT-TYPE    
  SnmpAdminString  

crasClientOSVendorString 1.3.6.1.4.1.9.9.392.1.3.21.1.19
The string identifying the vendor of the operating system on which the client application initiating the Remote Access Session is running.
OBJECT-TYPE    
  SnmpAdminString  

crasClientOSVersionString 1.3.6.1.4.1.9.9.392.1.3.21.1.20
The string identifying the version of the operating system of the entity which initiated this Remote Access session.
OBJECT-TYPE    
  SnmpAdminString  

crasPrimWINSServerAddrType 1.3.6.1.4.1.9.9.392.1.3.21.1.21
The type of the address returned in 'crasPrimWINSServer'.
OBJECT-TYPE    
  InetAddressType  

crasPrimWINSServer 1.3.6.1.4.1.9.9.392.1.3.21.1.22
The IP address of the primary WINS server assigned managed entity to this client session.
OBJECT-TYPE    
  InetAddress  

crasSecWINSServerAddrType 1.3.6.1.4.1.9.9.392.1.3.21.1.23
The type of the address returned in 'crasSecWINSServer'.
OBJECT-TYPE    
  InetAddressType  

crasSecWINSServer 1.3.6.1.4.1.9.9.392.1.3.21.1.24
The IP address of the secondary WINS server assigned by the managed entity to this client session.
OBJECT-TYPE    
  InetAddress  

crasPrimDNSServerAddrType 1.3.6.1.4.1.9.9.392.1.3.21.1.25
The type of the address returned in 'crasPrimDNSServer'.
OBJECT-TYPE    
  InetAddressType  

crasPrimDNSServer 1.3.6.1.4.1.9.9.392.1.3.21.1.26
The IP address of the primary DNS server assigned by the managed entity to this client session.
OBJECT-TYPE    
  InetAddress  

crasSecDNSServerAddrType 1.3.6.1.4.1.9.9.392.1.3.21.1.27
The type of the address returned in 'crasSecDNSServer'.
OBJECT-TYPE    
  InetAddressType  

crasSecDNSServer 1.3.6.1.4.1.9.9.392.1.3.21.1.28
The IP address of the secondary DNS server assigned by the managed entity to this client session.
OBJECT-TYPE    
  InetAddress  

crasDHCPServerAddrType 1.3.6.1.4.1.9.9.392.1.3.21.1.29
The type of the address returned in 'crasDHCPServer'.
OBJECT-TYPE    
  InetAddressType  

crasDHCPServer 1.3.6.1.4.1.9.9.392.1.3.21.1.30
The IP address of the DHCP server assigned by the managed entity to this client session.
OBJECT-TYPE    
  InetAddress  

crasSessionInPkts 1.3.6.1.4.1.9.9.392.1.3.21.1.31
The total number of packets received by this Remote Access session.
OBJECT-TYPE    
  Counter64  

crasSessionOutPkts 1.3.6.1.4.1.9.9.392.1.3.21.1.32
The total number of packets transmitted by this Remote Access Session.
OBJECT-TYPE    
  Counter64  

crasSessionInDropPkts 1.3.6.1.4.1.9.9.392.1.3.21.1.33
The total number of packets received for processing on this session which were dropped by the managed entity.
OBJECT-TYPE    
  Counter64  

crasSessionOutDropPkts 1.3.6.1.4.1.9.9.392.1.3.21.1.34
The total number of outgoing packets on this session which were dropped during transmit processing by the managed entity.
OBJECT-TYPE    
  Counter64  

crasSessionInOctets 1.3.6.1.4.1.9.9.392.1.3.21.1.35
The total number of octets received by this Remote Access Session. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
OBJECT-TYPE    
  Counter64  

crasSessionOutOctets 1.3.6.1.4.1.9.9.392.1.3.21.1.36
The total number of octets transmitted by this Remote Access Session. This value is accumulated AFTER determining whether or not the packet should be compressed.
OBJECT-TYPE    
  Counter64  

crasSessionState 1.3.6.1.4.1.9.9.392.1.3.21.1.37
The state of the remote access session corresponding to this conceptual row. The management entity may use this object to terminate an established session by setting value of the object to 'terminating'.
OBJECT-TYPE    
  SessionStatus  

crasActGroupTable 1.3.6.1.4.1.9.9.392.1.3.22
This table lists all the currently active remote access user groups. For each group, it lists the attributes (group, aggregate activity, aggregate traffic), and status.
OBJECT-TYPE    
  SEQUENCE OF  
    CrasActGroupEntry

crasActGroupEntry 1.3.6.1.4.1.9.9.392.1.3.22.1
Each entry contains the attributes, statistics and status of an active session.
OBJECT-TYPE    
  CrasActGroupEntry  

crasActGrpName 1.3.6.1.4.1.9.9.392.1.3.22.1.1
The name of the active user group corresponding to this entry.
OBJECT-TYPE    
  SnmpAdminString Size(0..64)  

crasActGrNumUsers 1.3.6.1.4.1.9.9.392.1.3.22.1.2
The number of users in this group currently connected to the managed device.
OBJECT-TYPE    
  Integer32 1..2147483647  

crasActGrpInPkts 1.3.6.1.4.1.9.9.392.1.3.22.1.3
The total number of packets received by this session.
OBJECT-TYPE    
  Counter64  

crasActGrpOutPkts 1.3.6.1.4.1.9.9.392.1.3.22.1.4
The total number of packets transmitted by this session.
OBJECT-TYPE    
  Counter64  

crasActGrpInDropPkts 1.3.6.1.4.1.9.9.392.1.3.22.1.5
The total number of packets dropped by this session which were received for processing.
OBJECT-TYPE    
  Counter64  

crasActGrpOutDropPkts 1.3.6.1.4.1.9.9.392.1.3.22.1.6
The total number of outgoing packets which were dropped during transmit processing by this session.
OBJECT-TYPE    
  Counter64  

crasActGrpInOctets 1.3.6.1.4.1.9.9.392.1.3.22.1.7
The total number of octets received by this session.
OBJECT-TYPE    
  Counter64  

crasActGrpOutOctets 1.3.6.1.4.1.9.9.392.1.3.22.1.8
The total number of octets transmitted by this session.
OBJECT-TYPE    
  Counter64  

crasEmailNumSessions 1.3.6.1.4.1.9.9.392.1.3.23
The number of currently active Email proxy sessions.
OBJECT-TYPE    
  Gauge32  

crasEmailCumulateSessions 1.3.6.1.4.1.9.9.392.1.3.24
The number of cumulative Email proxy sessions since system up.
OBJECT-TYPE    
  Counter32  

crasEmailPeakConcurrentSessions 1.3.6.1.4.1.9.9.392.1.3.25
The number of peak concurrent Email proxy sessions since system up.
OBJECT-TYPE    
  Unsigned32  

crasIPSecNumSessions 1.3.6.1.4.1.9.9.392.1.3.26
The number of currently active IPSec sessions.
OBJECT-TYPE    
  Gauge32  

crasIPSecCumulateSessions 1.3.6.1.4.1.9.9.392.1.3.27
The number of cumulative IPSec sessions since system up.
OBJECT-TYPE    
  Counter32  

crasIPSecPeakConcurrentSessions 1.3.6.1.4.1.9.9.392.1.3.28
The number of peak concurrent Email proxy sessions since system up.
OBJECT-TYPE    
  Unsigned32  

crasL2LNumSessions 1.3.6.1.4.1.9.9.392.1.3.29
The number of currently active LAN to LAN sessions.
OBJECT-TYPE    
  Gauge32  

crasL2LCumulateSessions 1.3.6.1.4.1.9.9.392.1.3.30
The number of cumulative LAN to LAN sessions since system up.
OBJECT-TYPE    
  Counter32  

crasL2LPeakConcurrentSessions 1.3.6.1.4.1.9.9.392.1.3.31
The number of peak concurrent LAN to LAN sessions since system up.
OBJECT-TYPE    
  Unsigned32  

crasLBNumSessions 1.3.6.1.4.1.9.9.392.1.3.32
The number of currently active Load Balancing sessions.
OBJECT-TYPE    
  Gauge32  

crasLBCumulateSessions 1.3.6.1.4.1.9.9.392.1.3.33
The number of cumulative Load Balancing sessions since system up.
OBJECT-TYPE    
  Counter32  

crasLBPeakConcurrentSessions 1.3.6.1.4.1.9.9.392.1.3.34
The number of peak concurrent Load Balancing sessions since system up.
OBJECT-TYPE    
  Unsigned32  

crasSVCNumSessions 1.3.6.1.4.1.9.9.392.1.3.35
The number of currently active SVC sessions.
OBJECT-TYPE    
  Gauge32  

crasSVCCumulateSessions 1.3.6.1.4.1.9.9.392.1.3.36
The number of cumulative SVC sessions since system up.
OBJECT-TYPE    
  Counter32  

crasSVCPeakConcurrentSessions 1.3.6.1.4.1.9.9.392.1.3.37
The number of peak concurrent SVC sessions since system up.
OBJECT-TYPE    
  Unsigned32  

crasWebvpnNumSessions 1.3.6.1.4.1.9.9.392.1.3.38
The number of currently active Webvpn sessions.
OBJECT-TYPE    
  Gauge32  

crasWebvpnCumulateSessions 1.3.6.1.4.1.9.9.392.1.3.39
The number of cumulative Webvpn sessions since system up.
OBJECT-TYPE    
  Counter32  

crasWebvpnPeakConcurrentSessions 1.3.6.1.4.1.9.9.392.1.3.40
The number of peak concurrent Webvpn sessions since system up.
OBJECT-TYPE    
  Unsigned32  

crasFailuresGlobals 1.3.6.1.4.1.9.9.392.1.4.1
OBJECT IDENTIFIER    

crasNumTotalFailures 1.3.6.1.4.1.9.9.392.1.4.1.1
The number of attempts to establish sessions which failed, since the last reboot of the managed device.
OBJECT-TYPE    
  Counter64  

crasNumDeclinedSessions 1.3.6.1.4.1.9.9.392.1.4.1.2
The number of session setup attempts, counted since the last time the notification 'ciscoRasTooManyFailedAuths' was issued, which were declined due to authentication or authorization failure.
OBJECT-TYPE    
  Unsigned32 0..4294967295  

crasNumSetupFailInsufResources 1.3.6.1.4.1.9.9.392.1.4.1.3
The number of session setup attempts that failed due to insufficient resources.
OBJECT-TYPE    
  Counter64  

crasNumAbortedSessions 1.3.6.1.4.1.9.9.392.1.4.1.4
The number of sessions which were successfully setup but were since terminated abnormally.
OBJECT-TYPE    
  Counter64  

crasFailGlobalCntl 1.3.6.1.4.1.9.9.392.1.4.2
OBJECT IDENTIFIER    

crasFailTableSize 1.3.6.1.4.1.9.9.392.1.4.2.1
The window size of the Remote Access Failure tables. The failure tables for session and group failures maintain only the last crasFailTableSize number of failure records. A value of 0 for this MIB variable indicates that archiving of the failures is disabled. An implementation may choose suitable minimum and maximum values for this element based on the local policy and available resources. If an SNMP SET request specifies a value outside this window for this element, a BAD VALUE may be returned.
OBJECT-TYPE    
  Unsigned32 0..4294967295  

crasSessFailures 1.3.6.1.4.1.9.9.392.1.4.3
OBJECT IDENTIFIER    

crasSessFailTable 1.3.6.1.4.1.9.9.392.1.4.3.1
This table records the last 'N' session failures, where 'N' is the value of the MIB element 'crasFailTableSize' defined earlier. A failure could be a failure to establish a session ('setup' failure) or a failure of a session after it was established ('operational' failure).
OBJECT-TYPE    
  SEQUENCE OF  
    CrasSessFailEntry

crasSessFailEntry 1.3.6.1.4.1.9.9.392.1.4.3.1.1
Each entry contains the attributes associated with a remote access session failure.
OBJECT-TYPE    
  CrasSessFailEntry  

crasSessFailIndex 1.3.6.1.4.1.9.9.392.1.4.3.1.1.1
The index of the session failure table. The value of the index is a number which begins at one and is incremented with each session failure. The value of this object will wrap at 4,294,967,295.
OBJECT-TYPE    
  FailureRecordIndex  

crasSessFailUsername 1.3.6.1.4.1.9.9.392.1.4.3.1.1.2
The name of the user associated with this failed remote access session.
OBJECT-TYPE    
  SnmpAdminString  

crasSessFailGroupname 1.3.6.1.4.1.9.9.392.1.4.3.1.1.3
The name of the user group to which this failed remote access session belongs.
OBJECT-TYPE    
  SnmpAdminString  

crasSessFailType 1.3.6.1.4.1.9.9.392.1.4.3.1.1.4
The type of the failure: 1 = failure occurred during session setup 2 = failed occurred after the session was setup successfully.
OBJECT-TYPE    
  INTEGER setupFailure(1), operationalFailure(2)  

crasSessFailReason 1.3.6.1.4.1.9.9.392.1.4.3.1.1.5
The reason for the failure. Possible reasons include: 1 = other (error which cannot be classified in any of the types listed below). 2 = internal error occurred 3 = failed to authenticate the peer/user 4 = failed to authorize the peer/user 5 = system capacity exceeded (memory, cpu, max users etc) 6 = peer requested to abort the session or the setup 7 = lost peer's heartbeat 8 = local management request.
OBJECT-TYPE    
  INTEGER other(1), internalError(2), authenticationFailure(3), authorizationFailure(4), sysCapExceeded(5), peerAbortRequest(6), peerLost(7), operRequest(8)  

crasSessFailTime 1.3.6.1.4.1.9.9.392.1.4.3.1.1.6
The value of the MIB element 'sysUpTime' at the time of the failure.
OBJECT-TYPE    
  TimeStamp  

crasSessFailSessionIndex 1.3.6.1.4.1.9.9.392.1.4.3.1.1.7
The index of the session which failed (in case this was an operational failure). In case of setup failures (where the value of 'crasSessFailType' of this conceptual row is 'operationalFailure'), the value of this object is undefined and should not be processed.
OBJECT-TYPE    
  SessionIndex  

crasSessFailISPAddrType 1.3.6.1.4.1.9.9.392.1.4.3.1.1.8
The type of the address returned in 'crasSessFailISPAddr'.
OBJECT-TYPE    
  InetAddressType  

crasSessFailISPAddr 1.3.6.1.4.1.9.9.392.1.4.3.1.1.9
The public address of the peer.
OBJECT-TYPE    
  InetAddress  

crasSessFailLocalAddrType 1.3.6.1.4.1.9.9.392.1.4.3.1.1.10
The type of the address returned in 'crasSessFailLocalAddr'.
OBJECT-TYPE    
  InetAddressType  

crasSessFailLocalAddr 1.3.6.1.4.1.9.9.392.1.4.3.1.1.11
The address assigned to the peer by the local address management mechanism. In case no address was assigned to the peer when the failure occurred, this MIB variable would contain the IPv4 address value 0.0.0.0
OBJECT-TYPE    
  InetAddress  

crasFailLastFailIndex 1.3.6.1.4.1.9.9.392.1.4.3.2
The value of column 'crasSessFailIndex' corresponding to the last row added to the crasSessFailTable. The value of this object is undefined and should not be processed by the management entity if the value of the object 'crasFailTableSize' is 0.
OBJECT-TYPE    
  FailureRecordIndex  

crasGroupFailures 1.3.6.1.4.1.9.9.392.1.4.4
OBJECT IDENTIFIER    

crasGrpFailTable 1.3.6.1.4.1.9.9.392.1.4.4.1
This table records the last 'N' occurrences of failures (setup or operational) per user group, where 'N' is the value of the MIB element 'crasFailTableSize' defined earlier. When 'N' entries have been created, the failure information about a new user group must be created by deleting the oldest entry in this table.
OBJECT-TYPE    
  SEQUENCE OF  
    CrasGrpFailEntry

crasGrpFailEntry 1.3.6.1.4.1.9.9.392.1.4.4.1.1
Each entry contains the summary of failures for a specific user group.
OBJECT-TYPE    
  CrasGrpFailEntry  

crasGrpFailGroupname 1.3.6.1.4.1.9.9.392.1.4.4.1.1.1
The name of the user group to which this failure record corresponds. This is the index of the group failure table.
OBJECT-TYPE    
  SnmpAdminString Size(0..64)  

crasGrpFailNumFailAuths 1.3.6.1.4.1.9.9.392.1.4.4.1.1.2
The number of sessions belonging to this group which failed authentication; counted since last reboot.
OBJECT-TYPE    
  Counter64  

crasGrpFailNumResourceFailures 1.3.6.1.4.1.9.9.392.1.4.4.1.1.3
The number of session setup attempts which failed due to insufficient resources.
OBJECT-TYPE    
  Counter64  

crasGrpFailNumDeclined 1.3.6.1.4.1.9.9.392.1.4.4.1.1.4
The number of session setup attempts which were declined by the managed entity due to local policy. These would include sessions which were denied due to rate control settings.
OBJECT-TYPE    
  Counter64  

crasGrpFailNumTerminatedMgmt 1.3.6.1.4.1.9.9.392.1.4.4.1.1.5
The number of established sessions which were terminated by explicit management action. The termination may have been triggered locally or based on a request from the peer.
OBJECT-TYPE    
  Counter64  

crasGrpFailNumTerminatedOther 1.3.6.1.4.1.9.9.392.1.4.4.1.1.6
The number of established sessions which were terminated due to insufficient reasons, internal error or other reasons not caused by management action.
OBJECT-TYPE    
  Counter64  

crasSecurityGlobals 1.3.6.1.4.1.9.9.392.1.5.1
OBJECT IDENTIFIER    

crasNumDisabledAccounts 1.3.6.1.4.1.9.9.392.1.5.1.1
The total number of user accounts which were disabled due to repeated login failures.
OBJECT-TYPE    
  Counter64  

crasThrMaxSessions 1.3.6.1.4.1.9.9.392.1.6.1
The maximum number of sessions which are successfully setup after which the managed entity should alert the network management entity using the notification 'ciscoRasTooManySessions', if the notification has been enabled. A value of 0 indicates that the threshold has not been set.
OBJECT-TYPE    
  Integer32 0..2147483647  

crasThrMaxFailedAuths 1.3.6.1.4.1.9.9.392.1.6.2
The value of object 'crasNumDeclinedSessions' at which the managed entity should alert the network management entity using the notification 'ciscoRasTooManyFailedAuths', if the notification has been enabled. A value of 0 indicates that the threshold has not been set.
OBJECT-TYPE    
  Unsigned32 0..4294967295  

crasThrMaxThroughput 1.3.6.1.4.1.9.9.392.1.6.3
The highest throughput of the Remote Access Service at which the managed entity should alert the network management entity using the notification 'ciscoRasTooHighThroughput', if the notification has been enabled. The notification is disabled till the value of the aggregate throughput of the managed entity drops below the value of this object. A value of 0 indicates that the threshold has not been set.
OBJECT-TYPE    
  Integer32 0..2147483647  

crasCntlTooManySessions 1.3.6.1.4.1.9.9.392.1.7.1
This object defines the administrative state of sending the trap to signal the violation of the Max session threshold.
OBJECT-TYPE    
  TruthValue  

crasCntlTooManyFailedAuths 1.3.6.1.4.1.9.9.392.1.7.2
This object defines the administrative state of sending the trap to signal the violation of the Max authentication failure count threshold.
OBJECT-TYPE    
  TruthValue  

crasCntlTooHighThroughput 1.3.6.1.4.1.9.9.392.1.7.3
This object defines the administrative state of sending the trap to signal the violation of the Max throughput threshold.
OBJECT-TYPE    
  TruthValue  

ciscoRasTooManySessions 1.3.6.1.4.1.9.9.392.0.1
This notification is generated when the managed entity detects that the number of sessions established exceeds the set threshold crasThrMaxSessions. Once the notification has been issued, further notifications are suppressed till the value returns below the specified threshold.
NOTIFICATION-TYPE    

ciscoRasTooManyFailedAuths 1.3.6.1.4.1.9.9.392.0.2
This notification is generated when the managed entity detects that the number of login attempts (over all users) exceeds the set threshold for throughput (crasThrMaxFailedAuths). Once the notification has been issued, further notifications are suppressed till the value returns below the specified threshold.
NOTIFICATION-TYPE    

ciscoRasTooHighThroughput 1.3.6.1.4.1.9.9.392.0.3
This notification is generated when the managed entity detects that the current throughput of the device exceeds the set threshold for throughput (crasThrMaxThroughput). Once the notification has been issued, further notiifcations are suppressed till the value returns below the specified threshold.
NOTIFICATION-TYPE    

ciscoRasMonitorMIBCompliances 1.3.6.1.4.1.9.9.392.2.1
OBJECT IDENTIFIER    

ciscoRasMonitorMIBGroups 1.3.6.1.4.1.9.9.392.2.2
OBJECT IDENTIFIER    

ciscoRasMonitorMIBCompliance 1.3.6.1.4.1.9.9.392.2.1.1
The compliance statement for SNMP entities the Cisco Remote Access Monitoring MIB.
MODULE-COMPLIANCE    

ciscoRasMonitorMIBComplianceRev1 1.3.6.1.4.1.9.9.392.2.1.2
The compliance statement for SNMP entities the Cisco Remote Access Monitoring MIB.
MODULE-COMPLIANCE    

ciscoRasCapacityGroup 1.3.6.1.4.1.9.9.392.2.2.1
This group consists of the MIB objects pertaining to Remote Access Service capacity parameters defined in the Cisco Remote Access MIB.
OBJECT-GROUP    

ciscoRasResourceUsageGroup 1.3.6.1.4.1.9.9.392.2.2.2
This group consists of the MIB objects pertaining to Remote Access Service resource usage parameters defined in the Cisco Remote Access MIB.
OBJECT-GROUP    

ciscoRasActivityGroup 1.3.6.1.4.1.9.9.392.2.2.3
This group consists of the MIB objects pertaining to the Cisco Remote Access MIB Activity group. Following are definitions of some terms used in this compliance group: User: A remote access user. Group: A collection of remote access users grouped and managed together as a single entity for administrative convenience. ISP: Internet Service Provider. Crypto Accelerator 'Crypto Accelerator' denotes a device which the managed entity uses to offload some or all computations pertaining to cryptographic operations. Session A connection terminating on the managed device which has been established to provide remote access connectivity to a user.
OBJECT-GROUP    

ciscoRasGrpActivityGroup 1.3.6.1.4.1.9.9.392.2.2.4
This group consists of the MIB objects pertaining to activity of user groups.
OBJECT-GROUP    

ciscoRasMandatoryFailureGroup 1.3.6.1.4.1.9.9.392.2.2.5
This group categorizes objects pertaining to failures in the Remote Access Service which are essential for successful monitoring of the service.
OBJECT-GROUP    

ciscoRasOptionalFailureGroup 1.3.6.1.4.1.9.9.392.2.2.6
This group categorizes optional objects pertaining to failures in the Remote Access Service.
OBJECT-GROUP    

ciscoRasSecurityGroup 1.3.6.1.4.1.9.9.392.2.2.7
This group categorizes objects pertaining to the monitoring state of security in the Remote Access Service.
OBJECT-GROUP    

ciscoRasThresholdsGroup 1.3.6.1.4.1.9.9.392.2.2.8
This group categorizes objects which are used to establish baseline values of metrics instrumenting the Remote Access Service.
OBJECT-GROUP    

ciscoRasNotificationCntlGroup 1.3.6.1.4.1.9.9.392.2.2.9
This group of objects controls the sending of notifications defined in this MIB module.
OBJECT-GROUP    

ciscoRasNotificationsGroup 1.3.6.1.4.1.9.9.392.2.2.10
This group contains the notifications for the Remote Access MIB.
NOTIFICATION-GROUP    

ciscoRasActivityGroupRev1 1.3.6.1.4.1.9.9.392.2.2.11
This group contains activity information related to sessions.
OBJECT-GROUP