Nagios XI 5 upgrade SNMP switch failures

[hsmith]

All right. In that case, I would add rules to allow UDP 161/162, and test.

[rkobliski]

done, enabled ports, still down...

[hsmith]

Did you schedule an immediate check? Sometimes it takes a bit before Nagios checks again. Can you try to run the check from the command line?

[rkobliski]

This command it runs from the web "check_xi_service_ifoperstatus" should i not be able to find it on the server?????

[hsmith]

/usr/local/nagios/libexec/check_ifoperstatus is what you're looking for.

[rkobliski]

./check_ifoperstatus -k 10 -v2 -H 172.25.10.1 -C ATNI
WARNING: SNMP error: No response from remote host '172.25.10.1'

no change, what is the difference between 5 and 2014r2.7 for this command????

[rkobliski]

Can i back out of this upgrade???

[hsmith]

XI5:

Code: Select all

[root@hxi libexec]# md5sum check_ifoperstatus
a0801bf522fbcea7ad44bffbc3a4c0d0  check_ifoperstatus
[root@hxi libexec]#

2014r2.7:

Code: Select all

[root@localhost libexec]# md5sum check_ifoperstatus
a0801bf522fbcea7ad44bffbc3a4c0d0  check_ifoperstatus
[root@localhost libexec]#

What does your 'service iptables status' look like right now?

You may want to do a tcpdump to see what is happening.

[rkobliski]

service iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num target prot opt source destination
1 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
2 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0
3 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
4 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
5 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:587
6 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:80
7 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:443
8 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:161
9 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 state NEW udp dpt:162
10 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:389
11 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:636
12 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited

Chain FORWARD (policy ACCEPT)
num target prot opt source destination
1 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited

Chain OUTPUT (policy ACCEPT)
num target prot opt source destination

[hsmith]

Can i back out of this upgrade???

Did you make any backups, or do you have a snapshot if you're using a VM?