Supported Mibs - Cisco IPS-4255-K9 - Intrusion Protection Sys 4255 Installation Manual

Chapter A Troubleshooting
Virtualization has the following advantages:
•
•
•
Virtualization has the following restrictions:
•
•
•
Virtualization has the following traffic capture requirements:
•
•
The following sensors support virtualization:
•
•
•
•
•
•

Supported MIBs

To avoid problems with configuring SNMP, be aware of the MIBs that are supported on the sensor.
The following private MIBs are supported on the sensor:
•
•
•
You can obtain these private Cisco MIBs under the heading SNMP v2 MIBs at this URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
MIB II is available on the sensor, but we do not support it. We know that some elements are not correct
Note
(for example, the packet counts from the IF MIB on the sensing interfaces). While you can use elements
from MIB II, we do not guarantee that they all provide correct information. We fully support the other
listed MIBs and their output is correct.
OL-18504-01
You can apply different configurations to different sets of traffic.
You can monitor two networks with overlapping IP spaces with one sensor.
You can monitor both inside and outside of a firewall or NAT device.
You must assign both sides of asymmetric traffic to the same virtual sensor.
Using VACL capture or SPAN (promiscuous monitoring) is inconsistent with regard to VLAN
tagging, which causes problems with VLAN groups.
When using Cisco IOS software, a VACL capture port or a SPAN target does not always receive
–
tagged packets even if it is configured for trunking.
When using the MSFC, fast path switching of learned routes changes the behavior of VACL
–
captures and SPAN.
Persistent store is limited.
The virtual sensor must receive traffic that has 802.1q headers (other than traffic on the native VLAN
of the capture port).
The sensor must see both directions of traffic in the same VLAN group in the same virtual sensor
for any given sensor.
IPS 4240
IPS 4255
IPS 4260
IPS 4270-20
AIP SSM
IDSM2 (with the exception of VLAN groups on inline interface pairs)
CISCO-CIDS-MIB
CISCO-ENHANCED-MEMPOOL-MIB
CISCO-ENTITY-ALARM-MIB
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.0
Supported MIBs
A-19