Table Of Contents
Support Information for Cisco Security Appliances
Cisco Adaptive Security Appliance 5550 Series
Cisco ASA 5550 Series—Supported Software Versions
Cisco ASA 5550 Series—Supported Topologies
Cisco ASA 5550 Series—Supported Modules
Cisco ASA 5550 Series—Supported Technologies
Cisco ASA 5550 Series—Supported Service Events
Supported Technologies on Cisco Security Appliances
IP
Ethernet (IEEE 802.3)
Physical Equipment
Base Logical Components
Common
Support Information for Cisco Security Appliances
This chapter contains support information for Virtual Network Elements (VNEs) that manage Cisco security appliances in Cisco ANA 3.6.5, and contains the following topics:
•
Cisco Adaptive Security Appliance 5550 Series
•
Supported Technologies on Cisco Security Appliances
Note
For more information about the objects and attributes described in this chapter, see the Cisco Active Network Abstraction 3.6.5 Technology Support and Information Model Reference Manual.
Cisco Adaptive Security Appliance 5550 Series
This section includes the following information about Cisco ASA 5550 Series security appliances:
•
Cisco ASA 5550 Series—Supported Software Versions
•
Cisco ASA 5550 Series—Supported Topologies
•
Cisco ASA 5550 Series—Supported Modules
•
Cisco ASA 5550 Series—Supported Technologies
•
Cisco ASA 5550 Series—Supported Service Events
Note
For information about which NE types are supported in Cisco ANA 3.6.5, see Cisco Adaptive Security Appliance 5550 Series.
Cisco ASA 5550 Series—Supported Software Versions
Table 6-1 Supported Software Versions for Cisco ASA 5550 Series—Cisco ANA 3.6.5
Version Name
|
ANA Version
|
|
7.2(3)12
|
3.6.3
|
S
|
Note
Software versions marked with an asterisk (representing a wildcard) are supported by Cisco ANA 3.6.5. Specific software versions that have been tested and verified are listed individually and marked as V.
Cisco ASA 5550 Series—Supported Topologies
Table 6-2 Supported Topologies for Cisco ASA 5550 Series—Cisco ANA 3.6.5
Topology Type
|
Link Type
|
ANA Version
|
Ethernet
|
Ethernet
|
3.6.3
|
Cisco ASA 5550 Series—Supported Modules
Table 6-3 Supported Modules for Cisco ASA 5550 Series—Cisco ANA 3.6.5
Module Name
|
ANA Version
|
Module Description
|
|
SSM-4GE-INC
|
3.6.3
|
SSM-4GE Included with ASA 5550 System
|
S
|
Cisco ASA 5550 Series—Supported Technologies
The following technologies are supported by the Cisco ASA 5550 Series in Cisco ANA 3.6.5:
•
IP
•
Ethernet (IEEE 802.3)
•
Physical Equipment
•
Base Logical Components
•
Common
Cisco ASA 5550 Series—Supported Service Events
Table 6-4 Supported Service Events for Cisco ASA 5550 Series—Cisco ANA 3.6.5
Event Name
|
ANA Version
|
|
Primary HSRP Interface Active/Inactive
|
3.6.0
|
Y
|
All IP Interfaces Down / Active IP Interfaces Found
|
3.6.3
|
Y
|
Interface Status Down/Up
|
3.6.3
|
Y
|
Card In/Out
|
3.6.3
|
Y
|
Link Down/Up
|
3.6.3
|
Y
|
Device Unreachable
|
3.6.3
|
Y
|
CPU Over Utilized
|
3.6.3
|
Y
|
Memory Over Utilized
|
3.6.3
|
Y
|
Device Unsupported
|
3.6.3
|
Y
|
Discard Packets
|
3.6.3
|
N
|
Dropped Packets
|
3.6.3
|
N
|
Module Unsupported
|
3.6.3
|
N
|
Port Down
|
3.6.3
|
Y
|
Card Up/Down
|
3.6.3
|
Y
|
Supported Technologies on Cisco Security Appliances
The following sections list the objects and attributes that are supported on Cisco security appliances in Cisco ANA 3.6.5 per technology:
•
IP
•
Ethernet (IEEE 802.3)
•
Physical Equipment
•
Base Logical Components
•
Common
IP
Table 6-5 IP Attribute Support on Cisco Security Appliances—Cisco ANA 3.6.5
Attribute
|
|
IMO Name—IIPInterface
|
IP Address
|
Y
|
Subnetwork Mask
|
Y
|
IP Interface Addresses Array
|
Y
|
Interface Name
|
Y
|
Interface Description
|
Y
|
IP Interface State
|
Y
|
OSPF Interface Cost
|
|
Broadcast Address
|
|
MTU
|
|
Lookup Method
|
|
Address Resolution Type
|
|
ARP Timeout
|
|
Secured ARP
|
|
ICMP Mask Reply
|
|
IGMP Proxy
|
|
HSRP Groups
|
|
IP Multiplexing Table
|
|
IANA Type
|
|
Containing CTPs
|
|
Contained CTPs
|
|
IMO Name—IIPMuxEntry
|
Termination Point
|
|
Destination IP Subnet
|
|
IMO Name—IRoutingEntity
|
Routing Table
|
Y
|
ARP Entity
|
Y
|
Routing Table Changes
|
|
Name
|
Y
|
Logical Sons
|
Y
|
IMO Name—IRoutingEntry
|
Destination IP Subnet
|
Y
|
Next Hop IP Address
|
Y
|
Type
|
Y
|
Routing Protocol Type
|
Y
|
Outgoing Interface Name
|
Y
|
IMO Name—IARPEntity
|
ARP Table
|
Y
|
IMO Name—IARPEntry
|
IP Address
|
Y
|
MAC Address
|
Y
|
Port
|
Y
|
Entry Type
|
Y
|
IMO Name—IIPPool
|
IP Address Pool Entries
|
|
Name
|
|
Index
|
|
IMO Name—IIPRangeBasedIPPoolEntry
|
Start IP Address
|
|
End IP Address
|
|
Unused Addresses
|
|
Used Addresses
|
|
Reserved Addresses
|
|
IMO Name—IIPSubnetBasedIPPoolEntry
|
IP Subnet
|
|
Unused Addresses
|
|
Used Addresses
|
|
Reserved Addresses
|
|
IMO Name—HSRPGroupEntry
|
Group Number
|
|
Port Description
|
|
Priority
|
|
Coupled Router
|
|
State
|
|
Tracking Interfaces
|
|
Virtual IP Address
|
|
Virtual MAC Address
|
|
IMO Name—ITunnelGRE
|
Name
|
|
Tunnel Destination and Source
|
|
IP Address
|
|
IP Interface State
|
|
IANA Type
|
|
Containing CTPs
|
|
Contained CTPs
|
|
Ethernet (IEEE 802.3)
Table 6-6 Ethernet (IEEE 802.3) Attribute Support on Cisco Security Appliances—Cisco ANA 3.6.5
Attribute
|
|
IMO Name—ILagPortEntry
|
Actor and Partner Admin Keys
|
|
Actor and Partner Oper Keys
|
|
Selected and Attached Aggregation Identification
|
|
Actor Port
|
|
Actor Port Priority
|
|
Partner Admin and Oper Port
|
|
Partner Admin and Oper Port Priority
|
|
Actor and Partner Admin States
|
|
Actor and Partner Oper States
|
|
IMO Name—IEthernet
|
MAC Address
|
Y
|
Duplex Mode
|
|
Output Flow Control
|
|
Input Flow Control
|
|
IANA Type
|
Y
|
Containing CTPs
|
|
Contained CTPs
|
|
IMO Name—IVlanInterface
|
Mode
|
|
Native VLAN Identification
|
|
Virtual LAN Table
|
|
IANA Type
|
|
Containing CTPs
|
|
Contained CTPs
|
|
IMO Name—IVlanEncapMux
|
IANA Type
|
|
Containing CTPs
|
|
Contained CTPs
|
|
IMO Name—IIEEE802
|
VLAN Identification
|
|
Binding Information
|
|
Binding Status
|
|
IANA Type
|
|
Containing CTPs
|
|
Contained CTPs
|
|
IMO Name—IStpService
|
Protocol Type
|
|
Current and Bridge Max Age
|
|
Current and Bridge Hello Time
|
|
Current and Bridge Forward Delay
|
|
Instance Information Table
|
|
Same as ISystemService
|
|
IMO Name—IMstService
|
Protocol Properties
|
|
Same as IStpService
|
|
IMO Name—IMstProperties
|
Force Version
|
|
Configuration Format, Region Name and Revision Level
|
|
External Root Cost
|
|
Maximum Instances
|
|
IMO Name—IStpInstanceInfo
|
Object Identification
|
|
Identification
|
|
Priority
|
|
Designated Parent and Root Bridges
|
|
Root Cost
|
|
Is Root
|
|
Root Port Identification
|
|
Port Information Table
|
|
IMO Name—IMstInstanceInfo
|
Instance Identification
|
|
Same as IStpInstanceInfo
|
|
IMO Name—IPvstpInstanceInfo
|
Protocol Type
|
|
Current and Bridg Maximum Age
|
|
Current and Bridge Hello Time
|
|
Current and Bridge Forward Delay
|
|
Same as IStpInstanceInfo
|
|
IMO Name—IRstpInstanceInfo
|
Force Version
|
|
Same as IStpInstanceInfo
|
|
IMO Name—IStpPortInfo
|
Object Identification
|
|
Priority
|
|
State
|
|
Path Cost
|
|
Is Edge
|
|
Is Point to Point
|
|
Role
|
|
IMO Name—IMstPortInfo
|
Hello Time
|
|
Same as IStpPortInfo
|
|
IMO Name—IEthernetChannel
|
Group Number
|
|
Bandwidth
|
|
Aggregation Protocol
|
|
IANA Type
|
|
Containing CTPs
|
|
Contained CTPs
|
|
Physical Equipment
Table 6-7 Physical Equipment Attribute Support on Cisco Security Appliances—Cisco ANA 3.6.5
Attribute
|
|
IMO Name—IChassis
|
Description
|
|
Equipment Holder Type
|
Y
|
Contained Equipment Holders
|
|
Contained Equipments
|
|
IMO Name—IShelf
|
Description
|
|
Status
|
|
Equipment Holder Type
|
|
Contained Equipment Holders
|
|
Contained Equipments
|
|
IMO Name—IModule
|
Module Name
|
Y
|
Module Description
|
Y
|
Software Version
|
Y
|
Operational Status
|
Y
|
Hardware Type + Version
|
Y
|
Managed IP Address
|
|
Redundant Equipment
|
|
Configured Redundancy
|
|
Redundancy Status
|
|
Operational Status Last Changed
|
|
Supported Physical Termination Points
|
|
Serial Number (soft property)
|
Y
|
Base Logical Components
Table 6-8 Base Logical Components Attribute Support on Cisco Security Appliances—Cisco ANA 3.6.5
Attribute
|
|
IMO Name—IManagedElement
|
IP Address
|
Y
|
Communication State
|
Y
|
Investigation State
|
Y
|
Element Category
|
Y
|
Element Type and Key
|
Y
|
Device Name
|
Y
|
System Name
|
Y
|
System Description
|
Y
|
Up Time
|
Y
|
Software Version
|
Y
|
Vendor Identity
|
Y
|
Memory and CPU Usage
|
Y
|
IMO Name—IContext
|
Name
|
|
Bounded Connections
|
|
IP Address Pools
|
|
Forwarding Components List
|
|
Traffic Descriptors List
|
|
Tunnel Containers List
|
|
Data Link Aggregation Containers List
|
|
IMO Name—ISystemService
|
Type
|
|
Status
|
|
Up Time
|
Y
|
Common
Table 6-9 Common Attribute Support on Cisco Security Appliances—Cisco ANA 3.6.5
Attribute
|
|
IMO Name—IPhysicalLayer
|
Media Type
|
Y
|
Clocking Source
|
|
Maximum Speed
|
Y
|
Is Internal Port
|
Y
|
Discarded Bandwidth
|
|
Dropped Bandwidth
|
|
Input Bandwidth
|
|
Output Bandwidth
|
|
Discarded and Received Input Data Counters
|
|
Dropped and Forward Output Data Counters
|
|
Administrative Status
|
Y
|
Operational Status
|
Y
|
Last Changed
|
|
IANA Type
|
Y
|
Containing CTPs
|
|
Contained CTPs
|
|
IMO Name—IBridge
|
Bridge Table
|
|
Type
|
|
MAC Address
|
|
IP Interface
|
|
Name
|
|
Logical Sons
|
|
IMO Name—IBridgeEntry
|
Destination MAC
|
|
Outgoing Interface
|
|
IMO Name—IVcSwitchingEntity
|
Cross Connect Table
|
|
Logical Sons
|
|