Logging Out of a VPN 3000 Concentrator Using SNMP Commands and MIBs

Document ID: 20628

Introduction
Prerequisites
      Requirements
      Components Used
      Conventions
How to Log Out of the VPN 3000 Concentrator
Related Information

Introduction

This document explains how to log out of a VPN 3000 Concentrator with Simple Network Management Protocol (SNMP) commands and VPN 3000 Concentrator Management Information Bases (MIBs). An administrator can use the information in this document to log out a remote connection that is left on.

Prerequisites

Requirements

Readers of this document should be knowledgeable of the following:

How to use your network management software (for example, CiscoWorks or HP OpenView)
How to load VPN 3000 Concentrator MIB files on your workstation
The correct the order in which to load the MIB files

Components Used

The information in this document is based on the software and hardware versions below.

VPN 3000 Concentrator Series Software Release 3.1 and later
VPN 3000 Concentrator Series (all models)

The information presented in this document was created from devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If you are working in a live network, ensure that you understand the potential impact of any command before using it.

Conventions

For more information on document conventions, see the Cisco Technical Tips Conventions.

How to Log Out of the VPN 3000 Concentrator

To log a user out of the VPN 3000 Concentrator, use this procedure:

Note: This feature is disabled by default as of Release 4.0.4. For more information, refer to bug ID CSCec51632 (registered customers only) .

Display a list of all active sessions by user name. To do that, enter this SNMP command from your network management application:
```
alActiveSessionUserName (OID: 1.3.6.1.4.1.3076.2.1.2.17. 2.1.3 )
```
You see a list like this output:
```
alActiveSessionUserName.1=admin
alActiveSessionUserName.2=gwendal
```
Review the list of users to identify the session ID for the user you want to log out. In this example, locate the user named "gwendal," which is active session ID 2.
Check to see if the session for the user is still active by entering the this command (which displays all active sessions):
```
alActiveSessionRowStatus (OID: 1.3.6.1.4.1.3076.2.1.2.17.2.1.1).
```
You will see a list like this:
```
alActiveSessionRowStatus.1=active(1)
alActiveSessionRowStatus.2=active(1)
```
As you can see, the connection for gwendal (number 2) is active.
To log the user out of the the VPN 3000 Concentrator and terminate the session, enter the this command:
```
1.3.6.1.4.1.3076.2.1.2.17.2.1.1.2 6
```
The syntax of this MIB entry is:
- 1.3.6.1.4.1.3076.2.1.2.17.2.1.1. - Object identifier for Row Status
- 2 - Identifies the row number
- 6 - The action to perform (in this case to terminate)

Since version 4.0.4, you can edit the config file, from to the [snmp_community #] entry named readonly. To enable each community string for readwrite, enter the number 2.

Example:
    [snmp_community 2]
    name=0x3C.0xB6.0xCD.0xC4.0x27.0x5A.0x8A.0xCD
    readonly=2
    [snmp_community 3]
    name=0x3C.0xB1.0xC6.0xDE.0x2F.0x4D.0xEF
    readonly=1

Related Information

Updated: Jan 14, 2008

Document ID: 20628

Hierarchical Navigation

Cisco VPN 3000 Series Concentrators