Why are the tunnels not showing up in the interface tab in CA Spectrum OneClick, when the devices have been successfully modeled for Cisco ASA devices?

Document ID : KB000011955
Last Modified Date : 14/02/2018
Show Technical Document Details
Question:

Why are the tunnels not showing up in the interface tab in CA Spectrum OneClick, when the devices have been successfully modelled for Cisco ASA devices?

Answer:

In order to model the tunnels in the interface tab, the device must support both Cisco-IpSec-Mib and Cisco-IpSec-Flow-Monitor-mib.

The Cisco ASA devices only support the Cisco-IpSec-Flow-Monitor-mib and due to the lack of Cisco-IpSec-Mib not being populated, CA Spectrum is unable to create the tunnels in OneClick.

 

If you would like to monitor the tunnels, you can do this via traps as there are traps supported by Cisco-IpSec-Flow-Monitor-Mib.

Additional Information:

For further information on mapping traps and creating alarms in Spectrum from mib objects, please refer to this link.

 

https://docops.ca.com/ca-spectrum/10-1-and-10-1-1/en/managing-network/certification/managing-mibs-and-traps-with-mib-tools/trap-support-for-mib-objects