17-2
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
OL-6392-01
Chapter 17 Monitoring and Troubleshooting the Firewall Services Module
Monitoring the Firewall Services Module
SNMP Overview
The FWSM provides support for network monitoring using SNMP V1. The FWSM supports traps and
SNMP get requests, but does not support SNMP set requests.
You can configure the FWSM to send traps (event notifications) to a network management station
(NMS), or you can use the NMS to browse the Management Information Bases (MIBs) on the FWSM.
MIBs are a collection of definitions, and the FWSM maintains a database of values for each definition.
Browsing a MIB entails issuing an SNMP get request from the NMS. Use CiscoWorks for Windows or
any other SNMP V1, MIB-II compliant browser to receive SNMP traps and browse a MIB.
Table 17-1 lists supported MIBs and traps for the FWSM and, in multiple mode, for each context. You
can download Cisco MIBs from the following website:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
After you download the MIBs, compile them for your NMS.
Table 17-1 SNMP MIB and Trap Support
MIB or Trap Support Description
SNMP core traps The FWSM sends the following core SNMP traps:
• authentication—An SNMP request fails because the NMS did not authenticate with the
correct community string.
• linkup—A VLAN interface is up.
• linkdown—A VLAN interface is down, for example, if you removed the nameif command,
or the VLAN was removed from the switch configuration.
• coldstart—The FWSM is running after a reload.
MIB-II The FWSM supports browsing of the following groups and tables:
• system
• interfaces
• ip.ipAddrTable
Cisco Firewall MIB The FWSM supports browsing of the following groups:
• cfwEvents
• cfwSystem
The information is cfwSystem.cfwStatus, which relates to failover status, pertains to the
entire device and not just a single context.
The FWSM supports the following trap:
• cfwSecurityNotification
Cisco Memory Pool MIB The FWSM supports browsing of the following table:
• ciscoMemoryPoolTable—The memory usage described in this table applies only to the
FWSM general-purpose processor, and not to the network processors.
Cisco Process MIB The FWSM supports browsing of the following table:
• cpmCPUTotalTable—The CPU usage described in this table applies only to the FWSM
general-purpose processor, and not to the network processors.
Cisco Syslog MIB The FWSM supports the following trap:
• clogMessageGenerated
You cannot browse this MIB.