Security

last person joined: 22 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

ClearPass monitoring via SNMP

This thread has been viewed 5 times

  • 1.  ClearPass monitoring via SNMP

    Posted Feb 14, 2017 06:24 AM

    Hi,

     

    I'm trying to build some basic monitoring around the key metrics like response latency, and auth counters. Using SNMP looked like a good idea, but found some interesting behavior for which I'm asking your help.
     
    While querying the device I got the below results:
    08:16:52 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37849
    08:17:57 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37866
    08:19:01 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37858
    08:20:05 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37867
    08:21:07 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37867
    08:22:07 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37877
    08:23:07 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37886
    08:24:07 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37885
    08:25:08 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37891
    08:26:08 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37899
    08:27:08 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37899
     
    Can you explain how should these numbers be interpreted? Since the name implies it's a counter, I'd expect a counter behavior (always increasing), but it's defined as Integer32 even in the CPPM-MIB.
     
    Thanks!


  • 2.  RE: ClearPass monitoring via SNMP

    EMPLOYEE
    Posted Feb 14, 2017 12:03 PM

    Checking with engineering...standby.



  • 3.  RE: ClearPass monitoring via SNMP

    EMPLOYEE
    Posted Feb 23, 2017 06:18 PM

    These numbers are a 24 hour window.