To query any SNMP attribute, the following details are needed:
IP Address of Administration Console
Community string name
OID of the attributeID
IP address of the device - Identity Server or Access Gateway
For example, you want to query the memory utilization of Identity Server with IP address 10.0.0.0. The query is issued to Administration Console whose IP address is 192.168.0.0. You can perform the query by using the OID or by using the namespace of the object.
snmpget -v2c -m /opt/volera/roma/conf/NAM.mib -c netiq 192.168.0.0 .iso.org.dod.internet.private.enterprises.netiq .mibdoc.namMIB.namStatistics.namComponents.namDevices.identityProvider.idpApplication.idpMemoryTable.idpMemoryEntry.idpMemory.10.0.0.0
IMPORTANT:You must provide the exact path of the Access Manager mib file.
snmpget -v2c -c netiq 192.168.0.0 .1.3.6.1.4.1.1691.2.100.1.1.1.1.1.1.1.1.10.0.0.0
Similarly, you can query values of various attributes supported by Identity Server and Access Gateway.
Using the same example, if you query idpHealthEntry parameter by using the Namespace, the command is:
snmpget -v2c -m /opt/volera/roma/conf/NAM.mib -c netiq 192.168.0.0 .iso.org.dod.internet.private.enterprises.netiq.mibdoc.namMIB.namStatistics.namComponents.namDevices.identityProvider.idpApplication.idpMemoryTable.idpMemoryEntry.idpMemory.10.0.0.0
The idpApplication parameter is substituted with the idpHealthEntry attribute in this example.
IMPORTANT:You must provide the exact path of the Access Manager mib file.
When an SNMP query is performed, it retrieves the last fetched data from Administration Console. If the device is down or not reachable, a negative value is retrieved.
For example, if you query for the idpHealthyEntry attribute, the value that is returned can be Red, Yellow, Green, or NoReport.
NOTE:The return value of NoReport indicates a server that is disconnected or unavailable.