Monitoring ASA packet loss via SNMP

cisco-asamonitoringsnmp

I want to monitor packet loss on my ASA 5505 VPN endpoints using SNMP. This is so I can graph the rates in Cacti and/or get alerts in Nagios.

However, I am not sure what SNMP values I should use to measure packet loss.

In the ASA I can run sh interface Internet stats to show traffic statistics for the interface connected to the Internet. This shows 1 minute and 5 minute drop rates.

  • Are these measures an indicator of packet loss?
  • Are there SNMP values I can access that correspond to those values?
  • Should I be looking at different values?
  • Is the ASA even able to measure packet loss?

Best Answer

Google for "cacti cisco ASA template". That will tell you which OIDs you need.

Mind you that the SNMP indexes for VPN interfaces don't exist unless the tunnel is up!