Forum Discussion
NimbostratusAPM for ad auth on LTM is consuming CCU?
Hi all,
A question where I cannot find any explanation for, I have enabled the APM module on an LTM vip but only for the authentication part. so a logon page with an AD auth and an ad query, nothing more. I would assume that this is not consuming any CCU? According to: https://support.f5.com/kb/en-us/solutions/public/13000/200/sol13267 But for some reason I see that our LTM is using CCU, does anybody knows where this should come from?
7 Replies
- Walter_Kacynski
Cirrostratus
How do you know that a CCU is being consumed? 
Andrew_HuskingCirrus
What version are you running?
jefp_185700running version 11.5.3 and we are having our monitoring system graph following MIB on both APM (dedictated) and LTM (where this specific APM config is used): snmpwalk -v 2c -c public localhost F5-BIGIP-APM-MIB::apmAccessStatCurrentActiveSessions
arpydaysThat MIB will show sessions not CCU, I don't believe you can monitor CCU via SNMP. See SOL15032.
See below for info as to how I got round the SNMP monitoring of CCU limitation.
https://devcentral.f5.com/questions/apm-ccu-license-count-via-snmp
amolariThis object returns the current active Access Sessions. That is not the same as the CCU. One CCU will equal to one Access Session but the opposite is not always true.
A connection to a VS with associated Access Policy will generate an Access Session.
To check CCU I think the object is apmGlobalConnectivityStatCurConns (but there is an open issue with that object in various version, please check AskF5).
- Walter_Kacynski
The MIB for monitoring CCUs is F5-BIGIP-APM-MIB::apmGlobalConnectivityStatCurConns
Please check the apm operations guide for detailed SNMP monitoring.
- Andrew_HuskingI believe that will only show you how many people are connected, not how many CCU are used. In 11.5 (possibly earlier) they changed it so that only SSL VPN/App Tunnels things like that would use the CCU not just logon pages to sites and things that didn't establish a VPN/Tunnel.
