Cisco 7604 Configuration Manual page 597

Chapter 25 Monitoring the Firewall Services Module
Table 25-3 SNMP MIB and Trap Support (continued)
MIB and Trap
IP-MIB
MIB-II
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Description
The FWSM supports browsing of the following table:
ipNetToPhysicalTable
The following examples show how entries displayed through the show arp
command can be retrieved through SNMP operations.
interface Vlan50
nameif inside
security-level 100
ip address 50.0.0.2 255.0.0.0
!
interface Vlan60
nameif outside
security-level 0
ip address 60.0.0.2 255.0.0.0
!
snmp-server host outside 60.0.0.1 community public version 2c
udp-port 161
!
hostname# show arp
inside 50.0.0.1 0004.23b3.9dea
outside 60.0.0.1 000e.0c4e.f6cc
For an SNMP request from the ipNetToPhysicalTable, enter the following:
snmpwalk 60.0.0.2 -c public -v 2c IP-MIB::ip.35 returns
IP-MIB::ip.35.1.4.1.1.4.50.0.0.1 = Hex-STRING: 00 04 23 B3 9D EA
IP-MIB::ip.35.1.4.2.1.4.60.0.0.1 = Hex-STRING: 00 0E 0C 4E F6 CC
For an SNMP request for a specific IP address from the
ipNetToPhysicalTable, enter the following:
snmpwalk 60.0.0.2 -c public -v 2c
IP-MIB::ip.35.1.4.1.1.4.50.0.0.1 returns
IP-MIB::ip.35.1.4.1.1.4.50.0.0.1 = Hex-STRING: 00 04 23 B3 9D EA
The ipNetToPhysicalTable object is indexed by ipNetToPhysicalIfIndex,
ipNetToPhysicalNetAddressType, and ipNetToPhysicalNetAddress, in
which ipNetToPhysicalIfIndex will be the VLAN interface number. The
ipNetToPhysicalNetAddress object is the IP address for which the MAC
entry is to be retrieved. Only the ipNetToPhysicalPhysAddress object is
populated from ipNetToPhysicalTable to retrieve the MAC address for the
indexed IP address.
Note Up to a three-minute delay may occur between ARP entries
displayed in the show arp command, and you can perform an
SNMP query for this entry.
The FWSM supports browsing of the following group and table:
• system
Configuring SNMP
25-31