Filter
Top Products
68-36
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 68 Health and Performance Monitoring
Alerts and Notifications
Tip When VPN alerts are enabled, HPM polls the monitored devices and contexts at normal and Priority
intervals (ten and five minutes, respectively), according to your normal/Priority designations. You also
can enable SNMP monitoring which updates HPM tunnel status immediately upon processing the traps.
See Configuring SNMP for S2S Polling, page 68-36 for more about enabling SNMP processing for
HPM.
The tunnel-status configuration parameters are grouped into a section that can be expanded and
collapsed. When expanded, you have access to the alert settings. The checkbox next to the heading is
used to enable or disable the alert.
The VPN alert parameters are described in the following table.
Configuring SNMP for S2S Polling
The Health and Performance Monitor (HPM) application uses SNMP to poll site-to-site (S2S) VPN
tunnels for up/down status updates. The generation of alerts for site-to-site (S2S) tunnels on monitored
devices and contexts is configured on the VPN panel of the HPM Alerts Configuration dialog box. Refer
to Alerts: Configuring, page 68-31 for information about opening the dialog box, accessing the VPN
panel, and providing email addresses for VPN-related Notifications.
Configuring SNMP in Security Manager to provide S2S polling is outlined here. The basic steps are:
1. Enable and configure SNMP on the SNMP Page, page 48-8 for the device or individual context;
specifically: check Enable SNMP Servers and provide and confirm the Read Community String.
2. In the SNMP Trap Configuration Dialog Box, page 48-9, check IPSEC Start and IPSEC Stop on
the Other panel.
3. In the Add SNMP Host Access Entry Dialog Box, page 48-12, provide Interface Name, IP Address,
Community String (and Confirm it), and choose the SNMP Version (1 or 2c).
Versions 1, 2c and 3 are supported for S2S polling, but version 3 must be configured separately, as
described in the next section.
4. Configure SNMP credentials for the device or individual context in the SNMP Credentials Dialog
Box, page 3-47.
For versions 1 and 2c, provide and confirm the RO Community String.
For version 3, Security Manager supports three modes; which to use is determined from your input:
–
noauthnopriv (no authentication, no privacy) – User name is mandatory, others are optional.
Table 68-6 VPN Alerts Configuration
Setting Description
Tunnel Status The status of each monitored S2S tunnel is updated whenever it comes
up or goes down, based on periodic polling or SNMP trap processing.
Each “down” result for any given tunnel is tallied as one Occurrence.
An alert is generated when the number of occurrences reaches the
values specified here.
For Priority Devices and for Standard Devices, you can separately
configure both Critical and Warning tunnel-down alerts: choose
Critical or Warning to specify the type of alert generated, and then in
the Occurrence field, specify the number of times a tunnel is down
when polled before the critical or warning alert is issued.