Security

Reply
New Contributor
Posts: 1
Registered: ‎02-09-2017

ClearPass monitoring via SNMP

Hi,

 

I'm trying to build some basic monitoring around the key metrics like response latency, and auth counters. Using SNMP looked like a good idea, but found some interesting behavior for which I'm asking your help.
 
While querying the device I got the below results:
08:16:52 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37849
08:17:57 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37866
08:19:01 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37858
08:20:05 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37867
08:21:07 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37867
08:22:07 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37877
08:23:07 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37886
08:24:07 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37885
08:25:08 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37891
08:26:08 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37899
08:27:08 - CPPM-MIB::radServerCounterFailure."" = INTEGER: 37899
 
Can you explain how should these numbers be interpreted? Since the name implies it's a counter, I'd expect a counter behavior (always increasing), but it's defined as Integer32 even in the CPPM-MIB.
 
Thanks!
Guru Elite
Posts: 8,456
Registered: ‎09-08-2010

Re: ClearPass monitoring via SNMP

Checking with engineering...standby.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Guru Elite
Posts: 8,456
Registered: ‎09-08-2010

Re: ClearPass monitoring via SNMP

These numbers are a 24 hour window.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
Showing results for 
Search instead for 
Did you mean: