Cisco 7604 Configuration Manual page 588

Configuring SNMP
Table 25-3 SNMP MIB and Trap Support (continued)
MIB and Trap
CISCO-IP-PROTOCOL-FILTER-MIB
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
25-22
Description
The FWSM supports browsing of the following tables:
cippfIpProfileTable
•
cippfIpFilterExtTable
•
cippfIpFilterStatsTable
•
cippfIpFilterTable
•
The following example shows how to retrieve entries displayed from the
show access-list command through SNMP operations on the
cippfIpfilterTable and cippfIpfilterStatsTable objects.
!
interface Vlan50
nameif inside
security-level 100
ip address 50.0.0.2 255.0.0.0
!
interface Vlan60
nameif outside
security-level 0
ip address 60.0.0.2 255.0.0.0
!
snmp-server host outside 60.0.0.1 community public version 2c
udp-port 161
!
hostname# show access-list
access-list aaa line 1 extended permit tcp any any eq www
(hitcnt=0) 0xe0998155
snmpwalk 60.0.0.2 -c public -v 2c 1.3.6.1.4.1.9.9.278 returns as
SNMPv2-SMI::enterprises.9.9.278.1.1.1.1.2.3.97.97.97 = INTEGER: 2
<<<< 2 means extended access-list
SNMPv2-SMI::enterprises.9.9.278.1.1.2.1.2.1.1 = STRING: "aaa"
SNMPv2-SMI::enterprises.9.9.278.1.1.2.1.2.2.1 = STRING: "aaa"
SNMPv2-SMI::enterprises.9.9.278.1.1.2.1.3.1.1 = INTEGER: 1
SNMPv2-SMI::enterprises.9.9.278.1.1.2.1.3.2.1 = INTEGER: 1
SNMPv2-SMI::enterprises.9.9.278.1.1.3.1.3.3.97.97.97.1 = INTEGER:
2
SNMPv2-SMI::enterprises.9.9.278.1.1.3.1.4.3.97.97.97.1 = INTEGER:
1
SNMPv2-SMI::enterprises.9.9.278.1.1.3.1.5.3.97.97.97.1 =
Hex-STRING: 00 00 00 00
SNMPv2-SMI::enterprises.9.9.278.1.1.3.1.6.3.97.97.97.1 =
Hex-STRING: 00 00 00 00
SNMPv2-SMI::enterprises.9.9.278.1.1.3.1.7.3.97.97.97.1 =
Hex-STRING: 00 00 00 00
SNMPv2-SMI::enterprises.9.9.278.1.1.3.1.8.3.97.97.97.1 =
Hex-STRING: 00 00 00 00
SNMPv2-SMI::enterprises.9.9.278.1.1.3.1.9.3.97.97.97.1 = INTEGER:
6 <-- 6 stands for tcp protocol number
SNMPv2-SMI::enterprises.9.9.278.1.1.3.1.10.3.97.97.97.1 =
Gauge32: 0 <-0 means any port
SNMPv2-SMI::enterprises.9.9.278.1.1.3.1.11.3.97.97.97.1 =
Gauge32: 0 <-0 means any port.
SNMPv2-SMI::enterprises.9.9.278.1.1.3.1.12.3.97.97.97.1 =
Gauge32: 80 <- www translates to 80
Chapter 25 Monitoring the Firewall Services Module
<-- denotes src network
<-- denotes src network mask
<-- denotes dest network
<-- denotes dest network mask
OL-20748-01