Table Of Contents
Support Information for Cisco Security Appliances
Cisco Adaptive Security Appliance 5550 Series
Cisco ASA 5550 Series—Supported Software Versions
Cisco ASA 5550 Series—Supported Topologies
Cisco ASA 5550 Series—Supported Modules
Cisco ASA 5550 Series—Supported Technologies
Cisco ASA 5550 Series—Supported Service Events
Supported Technologies on Cisco Security Appliances
IP
Ethernet (IEEE 802.3)
Physical Equipment
Base Logical Components
Common
Support Information for Cisco Security Appliances
This chapter contains support information for Virtual Network Elements (VNEs) that manage Cisco security appliances in Cisco ANA Version 3.6.6. For more information about the objects and attributes described in this chapter, see the Cisco Active Network Abstraction 3.6.6 Technology Support and Information Model Reference Manual.
This chapter contains the following topics:
•
Cisco Adaptive Security Appliance 5550 Series
•Supported Technologies on Cisco Security Appliances
Cisco Adaptive Security Appliance 5550 Series
This section includes the following information about Cisco ASA 5550 Series security appliances (for information on the NE types supported in Cisco ANA Version 3.6.6, see Cisco Adaptive Security Appliance 5550 Series):
•Cisco ASA 5550 Series—Supported Software Versions
•Cisco ASA 5550 Series—Supported Topologies
•Cisco ASA 5550 Series—Supported Modules
•Cisco ASA 5550 Series—Supported Technologies
•Cisco ASA 5550 Series—Supported Service Events
Cisco ASA 5550 Series—Supported Software Versions
Table 4-1 Supported Software Versions for Cisco ASA 5550 Series—Cisco ANA Version 3.6.6
Software Version
|
ANA Version
|
|
7.2(3)12
|
3.6.3
|
S
|
Note Software versions marked with an asterisk (representing a wildcard) are supported by Cisco ANA Version 3.6.6. Specific software versions that have been tested and verified are listed individually and marked as V.
Cisco ASA 5550 Series—Supported Topologies
Table 4-2 Supported Topologies for Cisco ASA 5550 Series—Cisco ANA Version 3.6.6
Topology Type
|
Link Type
|
ANA Version
|
Ethernet
|
Ethernet
|
3.6.3
|
Cisco ASA 5550 Series—Supported Modules
Table 4-3 Supported Modules for Cisco ASA 5550 Series—Cisco ANA Version 3.6.6
Module Name
|
ANA Version
|
Module Description
|
|
SSM-4GE-INC
|
3.6.3
|
SSM-4GE Included with ASA 5550 System
|
S
|
Cisco ASA 5550 Series—Supported Technologies
The following technologies are supported by the Cisco ASA 5550 Series in Cisco ANA Version 3.6.6:
•IP
•Ethernet (IEEE 802.3)
•Physical Equipment
•Base Logical Components
•Common
Cisco ASA 5550 Series—Supported Service Events
Table 4-4 Supported Service Events for Cisco ASA 5550 Series—Cisco ANA Version 3.6.6
Event Name
|
ANA Version
|
|
Primary HSRP Interface Active/Inactive
|
3.6.0
|
Y
|
All IP Interfaces Down / Active IP Interfaces Found
|
3.6.3
|
Y
|
Interface Status Down/Up
|
3.6.3
|
Y
|
Card In/Out
|
3.6.3
|
Y
|
Link Down/Up
|
3.6.3
|
Y
|
Device Unreachable
|
3.6.3
|
Y
|
CPU Over Utilized
|
3.6.3
|
Y
|
Memory Over Utilized
|
3.6.3
|
Y
|
Device Unsupported
|
3.6.3
|
Y
|
Discard Packets
|
3.6.3
|
N
|
Dropped Packets
|
3.6.3
|
N
|
Module Unsupported
|
3.6.3
|
N
|
Port Down
|
3.6.3
|
Y
|
Card Up/Down
|
3.6.3
|
Y
|
Supported Technologies on Cisco Security Appliances
The following sections list the objects and attributes that are supported on Cisco security appliances in Cisco ANA Version 3.6.6 per technology:
•IP
•Ethernet (IEEE 802.3)
•Physical Equipment
•Base Logical Components
•Common
IP
Table 4-5 IP Attribute Support on Cisco Security Appliances—Cisco ANA Version 3.6.6
Attribute
|
|
IMO Name—IIPInterface
|
IP Address
|
Y
|
Subnetwork Mask
|
Y
|
IP Interface Addresses Array
|
Y
|
Interface Name
|
Y
|
Interface Description
|
Y
|
IP Interface State
|
Y
|
OSPF Interface Cost
|
|
Broadcast Address
|
|
MTU
|
|
Lookup Method
|
|
Address Resolution Type
|
|
ARP Timeout
|
|
Secured ARP
|
|
ICMP Mask Reply
|
|
IGMP Proxy
|
|
HSRP Groups
|
|
IP Multiplexing Table
|
|
IANA Type
|
|
Containing CTPs
|
|
Contained CTPs
|
|
IMO Name—IIPMuxEntry
|
Termination Point
|
|
Destination IP Subnet
|
|
IMO Name—IRoutingEntity
|
Routing Table
|
Y
|
ARP Entity
|
Y
|
Routing Table Changes
|
|
Name
|
Y
|
Logical Sons
|
Y
|
IMO Name—IRoutingEntry
|
Destination IP Subnet
|
Y
|
Next Hop IP Address
|
Y
|
Type
|
Y
|
Routing Protocol Type
|
Y
|
Outgoing Interface Name
|
Y
|
IMO Name—IARPEntity
|
ARP Table
|
Y
|
IMO Name—IARPEntry
|
IP Address
|
Y
|
MAC Address
|
Y
|
Port
|
Y
|
Entry Type
|
Y
|
IMO Name—IIPPool
|
IP Address Pool Entries
|
|
Name
|
|
Index
|
|
IMO Name—IIPRangeBasedIPPoolEntry
|
Start IP Address
|
|
End IP Address
|
|
Unused Addresses
|
|
Used Addresses
|
|
Reserved Addresses
|
|
IMO Name—IIPSubnetBasedIPPoolEntry
|
IP Subnet
|
|
Unused Addresses
|
|
Used Addresses
|
|
Reserved Addresses
|
|
IMO Name—HSRPGroupEntry
|
Group Number
|
|
Port Description
|
|
Priority
|
|
Coupled Router
|
|
State
|
|
Tracking Interfaces
|
|
Virtual IP Address
|
|
Virtual MAC Address
|
|
IMO Name—ITunnelGRE
|
Name
|
|
Tunnel Destination and Source
|
|
IP Address
|
|
IP Interface State
|
|
IANA Type
|
|
Containing CTPs
|
|
Contained CTPs
|
|
Ethernet (IEEE 802.3)
Table 4-6 Ethernet (IEEE 802.3) Attribute Support on Cisco Security Appliances—Cisco ANA Version 3.6.6
Attribute
|
|
IMO Name—ILagPortEntry
|
Actor and Partner Admin Keys
|
|
Actor and Partner Oper Keys
|
|
Selected and Attached Aggregation Identification
|
|
Actor Port
|
|
Actor Port Priority
|
|
Partner Admin and Oper Port
|
|
Partner Admin and Oper Port Priority
|
|
Actor and Partner Admin States
|
|
Actor and Partner Oper States
|
|
IMO Name—IEthernet
|
MAC Address
|
Y
|
Duplex Mode
|
|
Output Flow Control
|
|
Input Flow Control
|
|
IANA Type
|
Y
|
Containing CTPs
|
|
Contained CTPs
|
|
IMO Name—IVlanInterface
|
Mode
|
|
Native VLAN Identification
|
|
Virtual LAN Table
|
|
IANA Type
|
|
Containing CTPs
|
|
Contained CTPs
|
|
IMO Name—IVlanEncapMux
|
IANA Type
|
|
Containing CTPs
|
|
Contained CTPs
|
|
IMO Name—IIEEE802
|
VLAN Identification
|
|
Binding Information
|
|
Binding Status
|
|
IANA Type
|
|
Containing CTPs
|
|
Contained CTPs
|
|
IMO Name—IStpService
|
Protocol Type
|
|
Current and Bridge Max Age
|
|
Current and Bridge Hello Time
|
|
Current and Bridge Forward Delay
|
|
Instance Information Table
|
|
Same as ISystemService
|
|
IMO Name—IMstService
|
Protocol Properties
|
|
Same as IStpService
|
|
IMO Name—IMstProperties
|
Force Version
|
|
Configuration Format, Region Name and Revision Level
|
|
External Root Cost
|
|
Maximum Instances
|
|
IMO Name—IStpInstanceInfo
|
Object Identification
|
|
Identification
|
|
Priority
|
|
Designated Parent and Root Bridges
|
|
Root Cost
|
|
Is Root
|
|
Root Port Identification
|
|
Port Information Table
|
|
STP Instance Id
|
|
Vlan Id
|
|
IMO Name—IMstInstanceInfo
|
Instance Identification
|
|
Same as IStpInstanceInfo
|
|
IMO Name—IPvstpInstanceInfo
|
Protocol Type
|
|
Current and Bridg Maximum Age
|
|
Current and Bridge Hello Time
|
|
Current and Bridge Forward Delay
|
|
Same as IStpInstanceInfo
|
|
IMO Name—IRstpInstanceInfo
|
Force Version
|
|
Same as IStpInstanceInfo
|
|
IMO Name—IStpPortInfo
|
Object Identification
|
|
Priority
|
|
State
|
|
Path Cost
|
|
Is Edge
|
|
Is Point to Point
|
|
Role
|
|
IMO Name—IMstPortInfo
|
Hello Time
|
|
Same as IStpPortInfo
|
|
IMO Name—IEthernetChannel
|
Group Number
|
|
Bandwidth
|
|
Aggregation Protocol
|
|
IANA Type
|
|
Containing CTPs
|
|
Contained CTPs
|
|
Physical Equipment
Table 4-7 Physical Equipment Attribute Support on Cisco Security Appliances—Cisco ANA Version 3.6.6
Attribute
|
|
IMO Name—IChassis
|
Description
|
|
Equipment Holder Type
|
Y
|
Contained Equipment Holders
|
|
Contained Equipments
|
|
Serial Number
|
|
IMO Name—IShelf
|
Description
|
|
Status
|
|
Equipment Holder Type
|
|
Contained Equipment Holders
|
|
Contained Equipments
|
|
Serial Number
|
|
IMO Name—IModule
|
Module Name
|
Y
|
Module Description
|
Y
|
Software Version
|
Y
|
Operational Status
|
Y
|
Hardware Type + Version
|
Y
|
Managed IP Address
|
|
Redundant Equipment
|
|
Configured Redundancy
|
|
Redundancy Status
|
|
Operational Status Last Changed
|
|
Supported Physical Termination Points
|
|
Serial Number (soft property)
|
Y
|
Base Logical Components
Table 4-8 Base Logical Components Attribute Support on Cisco Security Appliances—Cisco ANA Version 3.6.6
Attribute
|
|
IMO Name—IManagedElement
|
IP Address
|
Y
|
Communication State
|
Y
|
Investigation State
|
Y
|
Element Category
|
Y
|
Element Type and Key
|
Y
|
Device Name
|
Y
|
System Name
|
Y
|
System Description
|
Y
|
Up Time
|
Y
|
Software Version
|
Y
|
Vendor Identity
|
Y
|
Memory and CPU Usage
|
Y
|
DRAM Free
|
|
DRAM Used
|
|
Flash Device Size
|
Y
|
NVRAM Size
|
Y
|
Processor DRAM
|
|
Sys Contact
|
Y
|
Sys Location
|
Y
|
Serial Number
|
Y
|
IMO Name—IContext
|
Name
|
|
Bounded Connections
|
|
IP Address Pools
|
|
Forwarding Components List
|
|
Traffic Descriptors List
|
|
Tunnel Containers List
|
|
Data Link Aggregation Containers List
|
|
IMO Name—ISystemService
|
Type
|
|
Status
|
|
Up Time
|
Y
|
Common
Table 4-9 Common Attribute Support on Cisco Security Appliances—Cisco ANA Version 3.6.6
Attribute
|
|
IMO Name—IPhysicalLayer
|
Media Type
|
Y
|
Clocking Source
|
|
Maximum Speed
|
Y
|
Is Internal Port
|
Y
|
Discarded Bandwidth
|
|
Dropped Bandwidth
|
|
Input Bandwidth
|
|
Output Bandwidth
|
|
Discarded and Received Input Data Counters
|
|
Dropped and Forward Output Data Counters
|
|
Administrative Status
|
Y
|
Operational Status
|
Y
|
Last Changed
|
|
IANA Type
|
Y
|
Containing CTPs
|
|
Contained CTPs
|
|
Port Alias
|
Y
|
Location
|
Y
|
Sending Alarms
|
Y
|
Connector Description
|
Y
|
Part ID
|
Y
|
Connectort Serial Num
|
Y
|
IMO Name—IBridge
|
Bridge Table
|
|
Type
|
|
MAC Address
|
|
IP Interface
|
|
Name
|
|
Logical Sons
|
|
IMO Name—IBridgeEntry
|
Destination MAC
|
|
Outgoing Interface
|
|
IMO Name—IVcSwitchingEntity
|
Cross Connect Table
|
|
Logical Sons
|
|
Feedback
