Monitoring the Firewall Services Module
SNMP Overview
The FWSM provides support for network monitoring using SNMP V1. The FWSM supports traps and
SNMP get requests, but does not support SNMP set requests.
You can configure the FWSM to send traps (event notifications) to a network management station
(NMS), or you can use the NMS to browse the Management Information Bases (MIBs) on the FWSM.
MIBs are a collection of definitions, and the FWSM maintains a database of values for each definition.
Browsing a MIB entails issuing an SNMP get request from the NMS. Use CiscoWorks for Windows or
any other SNMP V1, MIB-II compliant browser to receive SNMP traps and browse a MIB.
Table 17-1
can download Cisco MIBs from the following website:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
After you download the MIBs, compile them for your NMS.
Table 17-1 SNMP MIB and Trap Support
MIB or Trap Support
SNMP core traps
MIB-II
Cisco Firewall MIB
Cisco Memory Pool MIB The FWSM supports browsing of the following table:
Cisco Process MIB
Cisco Syslog MIB
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
17-2
lists supported MIBs and traps for the FWSM and, in multiple mode, for each context. You
Description
The FWSM sends the following core SNMP traps:
authentication—An SNMP request fails because the NMS did not authenticate with the
•
correct community string.
linkup—A VLAN interface is up.
•
linkdown—A VLAN interface is down, for example, if you removed the nameif command,
•
or the VLAN was removed from the switch configuration.
•
coldstart—The FWSM is running after a reload.
The FWSM supports browsing of the following groups and tables:
system
•
interfaces
•
ip.ipAddrTable
•
The FWSM supports browsing of the following groups:
cfwEvents
•
cfwSystem
•
The information is cfwSystem.cfwStatus, which relates to failover status, pertains to the
entire device and not just a single context.
The FWSM supports the following trap:
cfwSecurityNotification
•
ciscoMemoryPoolTable—The memory usage described in this table applies only to the
•
FWSM general-purpose processor, and not to the network processors.
The FWSM supports browsing of the following table:
•
cpmCPUTotalTable—The CPU usage described in this table applies only to the FWSM
general-purpose processor, and not to the network processors.
The FWSM supports the following trap:
clogMessageGenerated
•
You cannot browse this MIB.
Chapter 17
Monitoring and Troubleshooting the Firewall Services Module
OL-6392-01