Nagios XI 5 upgrade SNMP switch failures

[rkobliski]

Upgraded to version 5 and now all my switches (3) are failing the snmp check which were working prior to this upgrade...

[hsmith]

Can we get more information such a screenshot/copy of the error?

[rkobliski]

check_xi_service_ifoperstatus!ATNI!!10!-v 2


Port 11 Status

Warning 6h 28m 58s 5/5 2015-10-13 15:01:22 WARNING: SNMP error: No response from remote host '172.16.250.144'

Port 12 Status

Warning 6h 28m 15s 5/5 2015-10-13 15:01:56 WARNING: SNMP error: No response from remote host '172.16.250.144'

Port 15 Status

Warning 6h 28m 7s 5/5 2015-10-13 15:01:38 WARNING: SNMP error: No response from remote host '172.16.250.144'

Port 151 Status

Warning 6h 27m 59s 5/5 2015-10-13 15:01:36 WARNING: SNMP error: No response from remote host '172.16.250.144'

Port 152 Status



Warning 6h 27m 28s 5/5 2015-10-13 15:02:25 WARNING: SNMP error: No response from remote host '172.16.250.144'

Port 153 Status



Warning 6h 26m 35s 5/5 2015-10-13 14:58:34 WARNING: SNMP error: No response from remote host '172.16.250.144'

Port 156 Status



Warning 6h 27m 23s 5/5 2015-10-13 15:02:39 WARNING: SNMP error: No response from remote host '172.16.250.144'

Port 3 Status



Warning 6h 25m 46s 5/5 2015-10-13 14:59:28 WARNING: SNMP error: No response from remote host '172.16.250.144'

Port 4 Status



Warning 6h 26m 24s 5/5 2015-10-13 14:58:48 WARNING: SNMP error: No response from remote host '172.16.250.144'

[hsmith]

Do you have a firewall running on your XI machine?

How did you upgrade?

[rkobliski]

everything work fine before the upgrade, i did the upgrade via the web app, clicked on it..

[hsmith]

Can you show us the output of a service iptables status?

If you're on CentOS 7 the command would be systemctl status firewalld

I have a suspicion you may have had the firewall turned off and the upgrade script turned it back on. I could be wrong, but this would be a good place to start.

[rkobliski]

service iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num target prot opt source destination
1 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
2 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0
3 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
4 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
5 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:587
6 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:80
7 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:443
8 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:389
9 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:636
10 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited

Chain FORWARD (policy ACCEPT)
num target prot opt source destination
1 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited

Chain OUTPUT (policy ACCEPT)
num target prot opt source destination

[hsmith]

Can you issue a service iptables stop and see if this brings you back to where you were?

[rkobliski]

i am remote, if i turn of ip tables i may be in trouble..

[rkobliski]

shall i do a manual update from the cmd line...