Nagios XI trial version not receiving traps

[rohitbhide]

Hi Guys,

I am new to community and new to nagios. I am configured lab with few cisco devices and managed to configure some of those hosts into Nagios XI trial version.

I was trying to test EIGRP neighbor-ship state change alerts and high CPU utilization alerts but I cannot see them generated in Nagios.

Not sure what wrong I am doing, i just to have import CISCO MIB into Nagios right ? and I have configured SNMP on cisco devices.

Could someone please advise me ?

admin : I see other forums are locked so not sure where to post above query exactly.
Regards
Rohit Bhide

[lmiltchev]

I was trying to test EIGRP neighbor-ship state change alerts and high CPU utilization alerts but I cannot see them generated in Nagios.

Can you elaborate/be more specific? Describe is details what have you tried so far. Show us configs or/and screenshots if necessary.

[rohitbhide]

HI lmiltchev,

Thanks for checking my query. Sorry for not being specific earlier. My issue is i cannot receive any single alarm on Nagios.

Below is snmp configuration for switch


SWITCH_CORE#sh run | i snmp

snmp trap link-status permit duplicates
snmp-server community public RO
snmp-server community private RW
snmp-server location xxxxxxx
snmp-server contact xxxxxxx
snmp-server system-shutdown
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps eigrp
snmp-server enable traps entity
snmp-server enable traps cpu threshold
snmp-server enable traps power-ethernet police
snmp-server enable traps vlandelete
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps event-manager
snmp-server enable traps cef resource-failure peer-state-change peer-fib-state-change inconsistency
snmp-server enable traps config
snmp-server enable traps hsrp
snmp-server enable traps syslog
snmp-server host 188.92.80.197 public
snmp-server host 188.92.80.200 public
snmp ifmib ifindex persist

Below are MIB files.


[root@localhost mibs]# ls
AGENTX-MIB.txt HOST-RESOURCES-TYPES.txt IPV6-ICMP-MIB.txt NET-SNMP-EXAMPLES-MIB.txt RFC-1215.txt SNMP-USER-BASED-SM-MIB.txt TRANSPORT-ADDRESS-MIB.txt
BRIDGE-MIB.txt IANA-ADDRESS-FAMILY-NUMBERS-MIB.txt IPV6-MIB.txt NET-SNMP-EXTEND-MIB.txt RMON-MIB.txt SNMP-USM-AES-MIB.txt UCD-DEMO-MIB.txt
CISCO-EIGRP-MIB.my IANAifType-MIB.txt IPV6-TCP-MIB.txt NET-SNMP-MIB.txt SCTP-MIB.txt SNMP-USM-DH-OBJECTS-MIB.txt UCD-DISKIO-MIB.txt
CISCO_OLD_CPU.txt IANA-LANGUAGE-MIB.txt IPV6-TC.txt NET-SNMP-PASS-MIB.txt SMUX-MIB.txt SNMPv2-CONF.txt UCD-DLMOD-MIB.txt
DISMAN-EVENT-MIB.txt IANA-RTPROTO-MIB.txt IPV6-UDP-MIB.txt NET-SNMP-TC.txt SNMP-COMMUNITY-MIB.txt SNMPv2-MIB.txt UCD-IPFWACC-MIB.txt
DISMAN-SCHEDULE-MIB.txt IF-INVERTED-STACK-MIB.txt LM-SENSORS-MIB.txt NET-SNMP-VACM-MIB.txt SNMP-FRAMEWORK-MIB.txt SNMPv2-SMI.txt UCD-SNMP-MIB.txt
DISMAN-SCRIPT-MIB.txt IF-MIB.txt MTA-MIB.txt NETWORK-SERVICES-MIB.txt SNMP-MPD-MIB.txt SNMPv2-TC.txt UDP-MIB.txt
EtherLike-MIB.txt INET-ADDRESS-MIB.txt NAGIOS-NOTIFY-MIB.txt NOTIFICATION-LOG-MIB.txt SNMP-NOTIFICATION-MIB.txt SNMPv2-TM.txt
HCNUM-TC.txt IP-FORWARD-MIB.txt NAGIOS-ROOT-MIB.txt RFC1155-SMI.txt SNMP-PROXY-MIB.txt SNMP-VIEW-BASED-ACM-MIB.txt
HOST-RESOURCES-MIB.txt IP-MIB.txt NET-SNMP-AGENT-MIB.txt RFC1213-MIB.txt SNMP-TARGET-MIB.txt TCP-MIB.txt

Please Let me know what steps I need to check.

Also which directory shows exact snmp configuration file and how to read it.

And CISCO MIB shows .my extension, do i need to simply copy it and make it as .txt format and upload it here or how ?

Please guide.

[gormank]

I'd first verify snmptrapd and then snmptt are receiving the traps. snmptrapd logs in /var/log/messages by default and the other in /var/log/snmptt. You should also see both services running.

[tgriep]

If you want the Nagios XI server to receive SNMP Traps, you will have to follow these instructions to set up the server.
https://assets.nagios.com/downloads/nag ... ios_XI.pdf
After doing that, you should upload the MIB files to the XI server so they will get added to the SNMPTT configuration files.
The document shows how to do that.

[rohitbhide]

Not sure exactly what is happening ?

1. For example, If I simply add EIGRP MIB and that is successfully processed then is is that enough for nagios xi to receive alarm or i do have to do something else ?
2. Is it mandatory to add plugins ? Cant Nagios xi receive traps/alarms without adding plugins ?

[tgriep]

The Xi server does not receive SNMP Traps by default, if you want it to receive traps, you will have to go through the guide to enable it.
If you did enable the server to receive traps and uploaded the MIB file (a MIB file with the TRAP OIDS defined in them) and checked the Process Trap button and uploaded the MIB file, then the system should be ready to receive SNMP Traps.
The first time a trap is received, is will show up in the Admin > Unconfigured Object menu. In there you will have to configure it foe Notifications, groups, etc and then after that the XI server will receive them automatically.

Here is a link to a SNMP Trap tutorial that describes the process.
https://support.nagios.com/kb/article.php?id=77

[rohitbhide]

I configured everything, MIB import was successful. Still while restarting daemon, it gives me error that cannot adopt OID.

I have attached part of error messages in text file. Please check it and let me know how to correct this error.

[tgriep]

Those errors could mean that you are missing a required MIB file that still needs to be loaded on the system.
Some MIB files include other files so if you do not install all of them, you will get the errors you are seeing.
Open one of them up and at the top you will see FROM and the name of a MIB file. Make sure that all of those are installed on the XI server in this folder.

Code: Select all

/usr/share/snmp/mibs

After they are uploaded, see if the system starts to receive the SNMP Traps.

[rohitbhide]

Those errors could mean that you are missing a required MIB file that still needs to be loaded on the system.
Some MIB files include other files so if you do not install all of them, you will get the errors you are seeing.
Open one of them up and at the top you will see FROM and the name of a MIB file. Make sure that all of those are installed on the XI server in this folder.

Code: Select all

/usr/share/snmp/mibs

After they are uploaded, see if the system starts to receive the SNMP Traps.

MIB issue has been resolved after adding necessary MIB to directory. Thanks TGRIEP for your direction.


What should I do about below log :

snmpttuknown.log >

Mon Sep 26 12:10:25 2016: Unknown trap (.1.3.6.1.4.1.9.9.43.2.0.1) received from firewal001 at:
Value 0: firewall
Value 1: 188.x.x.x
Value 2: 7:3:38:30.46
Value 3: .1.3.6.1.4.1.9.9.43.2.0.1
Value 4: 192.168.171.11
Value 5: public
Value 6: .1.3.6.1.4.1.9.9.43.2
Value 7:
Value 8:
Value 9:
Value 10:
Ent Value 0: .1.3.6.1.4.1.9.9.43.1.1.6.1.3.41=1
Ent Value 1: .1.3.6.1.4.1.9.9.43.1.1.6.1.4.41=2
Ent Value 2: .1.3.6.1.4.1.9.9.43.1.1.6.1.5.41=3

I am networking guy but almost new to linux so strugling a lot when it comes to nagios configuration.

1. What is processed MIB concept ? When I upload MIB through GUI and click on process trap, why I cant see them under processed MIB directory or I have to manually run command for every MIB ?
2. Now I am strugling with plugin, especially EIGRP. Is plugin essential by the way ? without Plugin, cant we receive traps ?