Unable to SNMP to an AIX Server

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
bosecorp
Posts: 929
Joined: Thu Jun 26, 2014 1:00 pm

Re: Unable to SNMP to an AIX Server

Post by bosecorp »

# cat /etc/snmpd.conf

Code: Select all

# IBM_PROLOG_BEGIN_TAG
# This is an automatically generated prolog.
#
# tcpip610 src/tcpip/etc/snmpd.conf 1.14
#
# Licensed Materials - Property of IBM
#
# COPYRIGHT International Business Machines Corp. 1991,1994
# All Rights Reserved
#
# US Government Users Restricted Rights - Use, duplication or
# disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
#
# @(#)93 1.14 src/tcpip/etc/snmpd.conf, snmp, tcpip610 6/5/04 14:53:19
# IBM_PROLOG_END_TAG
#
# COMPONENT_NAME: (SNMP) Simple Network Management Protocol Daemon
#
# FUNCTIONS: none
#
# ORIGINS: 27 60
#
# (C) COPYRIGHT International Business Machines Corp. 1991, 1994
# All Rights Reserved
# US Government Users Restricted Rights - Use, duplication or
# disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
#
# Licensed Material - Property of IBM
#
# Contributed by NYSERNet Inc. This work was partially supported by the
# U.S. Defense Advanced Research Projects Agency and the Rome Air Development
# Center of the U.S. Air Force Systems Command under contract number
# F30602-88-C-0016.
#
# FILE: /etc/snmpd.conf
#
###############################################################################
#
#
###############################################################################
#
# snmpd configuration information
#
###############################################################################
#
#
###############################################################################
#
# How to configure this file for your system:
#
# 1. If you want to direct your logging from the configuration file,
# set the logging specifications as follows:
#
# logging </path/filename> enabled|disabled
# logging size=<limit> level=<debug level>
#
# where </path/filename> specifies the complete path and filename of the
# log file, enabled turns logging on, disabled turns logging off, <limit>
# specifies the maximum size in bytes of the specified logfile, and
# <debug level> specifies the logging level of 0, 1, 2, or 3. There is no
# default logging file. The enablement default is disabled. The size
# default is 100000, and the level default is 0. There can
# be no white spaces around the "=" in the size and level fields. There
# are no restrictions on the order in which the fields are entered in the
# logging entries. A logging entry can contain single or multiple fields.
#
# 2. Set the community names and access privileges for hosts that can make
# requests of this snmpd agent. Define these restrictions as follows:
#
# community <name> <address> <netmask> <permissions> <view name>
#
# where <name> is the community name, <address> is either a hostname or
# an IP address in dotted notation, and <permissions> is one of: none,
# readOnly, writeOnly, readWrite. The default permission is readOnly.
# <netmask> specifies the network mask. The default address and netmask
# are 0.0.0.0. If an address other than 0.0.0.0 is specified, the default
# netmask is 255.255.255.255. If a permission is specified, both the
# address and netmask must also be specified. <view name> defines a
# portion of the MIB tree to which this community name allows access.
# <view name> must be defined as a unique object identifier in dotted
# numeric notation. <view name> is further defined in the view
# configuration entry. If <view name> is not specified, the view for
# this community defaults to the entire MIB tree. Fields to the right
# of <name> are optional, with the limitation that no fields to the
# left of a specified field are omitted.
#
# 3. Set your MIB views as follows:
#
# view <view name> <MIB subtree>...
#
# where <view name> is a unique object identifier in dotted numeric
# notation and <MIB subtree> is a list of the MIB subtrees in text or
# dotted numeric notation that this view allows access. The <view name>
# is the same as that specified in the community configuration entry. If
# the MIB subtree list is not specified, the view defaults to the entire
# MIB tree.
#
# 4. If your site has a management station that listens for traps, fill-in
# the information for the trap destination as follows:
#
# trap <community> <a.b.c.d> <view name> <trap mask>
#
# where <community> is the community name that will be encoded in the
# trap packet and <a.b.c.d> is the hostname or IP address in dotted
# notation of the host where a trap monitor is listening on UDP port 162.
# The <view name> is a unique object identifier in dotted notation. View
# name is not implemented for traps. The snmpd agent only checks
# the view name format and duplication. The trap mask is in hexidecimal
# format. The bits from left to right stand for coldStart trap, warmStart
# trap, linkDown trap, linkUp trap, authenticationFailure trap,
# egpNeighborLoss trap, and enterpriseSpecific trap. The right most bit
# does not have any meaning. The value "1" will enable the corresponding
# trap to be sent. Otherwise, the trap is blocked.
# ex. fe block no traps (1111 1110)
# 7e block coldStart trap (0111 1110)
# be block warmStart trap (1011 1110)
# 3e block coldStart trap and warmStart trap (0011 1110)
#
# 5. Set your snmpd specific configuration parameters as follows:
#
# snmpd <variable>=<value>
#
# where <variable> is one of maxpacket, querytimeout or smuxtimeout.
# If <variable> is maxpacket, <value> is the maximum packet size, in
# bytes, that the snmpd agent will transmit. The minimum value to
# which maxpacket can be set is 300 bytes. If there is no snmpd entry
# for maxpacket, the system socket default limits will be used. If
# <variable> is querytimeout, <value> is the time interval, in seconds,
# at which the snmpd agent will query the interfaces to check for
# interface status changes. The minimum value to which querytimeout
# can be set is 30 seconds. If 0 (zero) is specified, snmpd will not
# query the interfaces for status changes. If no snmpd entry for
# querytimeout is specified, the default value of 60 seconds is used.
# If <variable> is smuxtimeout, <value> is the time interval, in
# seconds, at which snmpd will timeout on a request to a smux peer.
# If 0 (zero) is specified, snmpd will not timeout on smux requests.
# If no snmpd entry for smuxtimeout is specified, the default value
# of 15 seconds is used. If <variable> is ethernettimeout,
# tokenringtimeout, or fdditimeout, <value> is the maximum time, in
# seconds, between flushings of the internal cache for variables associated
# with the respective device. If <variable> is smuxtrapaddr, <value> is
# defined for either 0 or 1. If <value> is 0, the trap address on a SMUX
# generated trap will be the local host's address if the trap originated
# from a SMUX peer on the local host. If <value> is 0 and the trap was
# generated by a remote SMUX peer, the address of the remote machine will be
# used in the trap. If <value> is 1, the address of the local machine
# (i.e., the machine on which snmpd is running) will be used for all SMUX
# generated traps. The "=" is absolutely required, and no white
# spaces are allowed around the "=". There are no restrictions on
# the order in which the fields are entered in the snmpd entry. An
# snmpd entry can contain single or multiple fields.
#
# 6. Set the smux peer configuration parameters as follows:
#
# smux <client OIdentifier> <password> <address> <netmask>
#
# where <client OIdentifier> is the unique object identifer in dotted
# decimal notation of the SMUX peer client. <password> specifies the
# password that snmpd requires from the SMUX peer client to authenticate
# the SMUX association. <address> is either the hostname or IP address
# in dotted notation of the host on which the SMUX peer client is
# executing. <netmask> specifies the network mask. If no password is
# specified, there is no authentication for the SMUX association. The
# default address and netmask are 127.0.0.1 and 255.255.255.255. If
# neither the address nor netmask are specified, the SMUX association
# is limited to the local host. Fields to the right of
# <client OIdentifier> are optional, with the limitation that no fields
# to the left of a specified field are omitted.
#
# 7. Set the system contact and system location by:
#
# syscontact "System Adminstrator"
# syslocation "Here, City, State, Country, Planet, Universe"
#
# These variables will be used to define the MIB variables sysContact and
# sysLocation respectively. The values must be within quotes and less
# than 256 bytes in length. When one of these MIB variables is set, this
# file will be appended with the new information. The system adminstrator
# should be aware that if there are many settings of these variables, the
# file will grow and need to be cleaned up. The rationale for not deleting
# entries is to allow the system adminstrator a history of variable values.
# If the values are not set in these files, the snmpd daemon will return a
# null string.
#
# NOTE: Comments are indicated by # and continue to the end of the line.
# There are no restrictions on the order in which the configuration
# entries are specified in this file.
#
###############################################################################
#
#logging                file=/usr/tmp/snmpd.log         enabled
#logging                size=100000                     level=0
#
#community      public
#community private 127.0.0.1 255.255.255.255 readWrite
#community system 127.0.0.1 255.255.255.255 readWrite 1.17.2
#
#view            1.17.2          system enterprises view
#
#trap           public          127.0.0.1       1.2.3   fe      # loopback
#
#snmpd maxpacket=1024 querytimeout=120 smuxtimeout=60
#
#smux           1.3.6.1.4.1.2.3.1.2.1.2         gated_password  # gated
#smux           1.3.6.1.4.1.2.3.1.2.2.1.1.2     dpid_password   #dpid
#




logging         file=/usr/tmp/snmpd.log         enabled 
logging         size=100000                     level=0


# ADD community 'XXXXXXXX' - EKG - 09-29-2016_1206
# CHANGE community from 'XXXXXXXX' to 'XXXXXXXX' - EKG - 09-30-2016_1143
# community  XXXXXXXX

#community  XXXXXXXX
community XXXXXXXX 0.0.0.0 0.0.0.0 readOnly 1.17.2


view            1.17.2          system enterprises view
view            1.3.6.1.4.1.2.6.191 

# CHANGE community from 'public' to 'XXXXXXXX' - EKG - 09-29-2016_1206
# trap          public          127.0.0.1       1.2.3   fe      # loopback
# CHANGE community from 'XXXXXXXX' to 'XXXXXXXX' - EKG - 09-30-2016_1143
# trap          XXXXXXXX         127.0.0.1       1.2.3   fe      # loopback
trap            XXXXXXXX         127.0.0.1       1.2.3   fe      # loopback


smux            1.3.6.1.4.1.2.3.1.2.1.2         gated_password  # gated
smux            1.3.6.1.4.1.2.3.1.2.2.1.1.2     dpid_password   #dpid

                              
snmpd smuxtimeout=200 #muxatmd
smux 1.3.6.1.4.1.2.3.1.2.3.1.1 muxatmd_password #muxatmd
smux            1.3.6.1.4.1.2.3.1.2.1.3         xmtopas_pw      # xmtopas
Last edited by tgriep on Mon Nov 07, 2016 2:20 pm, edited 1 time in total.
Reason: Added Code Wraps around large output.
User avatar
tgriep
Madmin
Posts: 9190
Joined: Thu Oct 30, 2014 9:02 am

Re: Unable to SNMP to an AIX Server

Post by tgriep »

Run this command from the Nagios server
snmpwalk -v1 -c community X.X.X.X 1.3.6.1.2.1.25.2.3.1
Then login to the AIX server and go the following folder

Code: Select all

/var/tmp/
and see if any of the files have error messages we can use to trouble shoot this.

Code: Select all

aixmibd.log
hostmibd.log
snmpdv3.log
snmpmibd.log
Be sure to check out our Knowledgebase for helpful articles and solutions!
bosecorp
Posts: 929
Joined: Thu Jun 26, 2014 1:00 pm

Re: Unable to SNMP to an AIX Server

Post by bosecorp »

# tail -f /var/tmp/aixmibd.log
../../../../../../src/tcpip/usr/sbin/aixmibd/aix_main.C (1031) rc=-2 from DPIconnect_to_agent_TCP()
../../../../../../src/tcpip/usr/sbin/aixmibd/aix_main.C (1032) hostname=loopback, community=nc-BOSE
../../../../../../src/tcpip/usr/sbin/aixmibd/aix_main.C (1040) rc=-9 from DPIconnect_to_agent_SHM()
Mon Nov 7 10:22:44 EST 2016 Connect to SNMP agent on the host loopback failed,
will keep trying
stopsrc issued
Mon Nov 7 10:23:01 EST 2016 Connect to SNMP agent on the host loopback failed,
will keep trying
No connection,established, and the trap can not be generated
Mon Nov 7 10:23:09 EST 2016 DPI sub-agent (AIX Enterprise MIB Support subagent): connected, ready to receive requests...

# tail -f /var/tmp/hostmibd.log
11/07/16 10:20:23 AM - ../../../../../../src/tcpip/usr/sbin/hostmibd/hr_main.C (1115) Now registering 1.3.6.1.2.1.25.6.
11/07/16 10:20:23 AM - ../../../../../../src/tcpip/usr/sbin/hostmibd/hr_main.C (594) DPI sub-agent (Host Resources DPI sub-agent Version 1): connected, ready to receive requests...
11/07/16 10:22:26 AM - ../../../../../../src/tcpip/usr/sbin/hostmibd/hr_main.C (776) rc=-5 from DPIawait_packet_from_agent()
11/07/16 10:22:26 AM - ../../../../../../src/tcpip/usr/sbin/hostmibd/hr_main.C (777) Error occured, try to re-establish connection.
11/07/16 10:22:44 AM - ../../../../../../src/tcpip/usr/sbin/hostmibd/hr_main.C (971) rc=-2 from DPIconnect_to_agent_TCP()
11/07/16 10:22:44 AM - ../../../../../../src/tcpip/usr/sbin/hostmibd/hr_main.C (972) hostname=loopback, community=nc-BOSE
11/07/16 10:22:44 AM - ../../../../../../src/tcpip/usr/sbin/hostmibd/hr_main.C (980) rc=-9 from DPIconnect_to_agent_SHM()
11/07/16 10:22:44 AM - ../../../../../../src/tcpip/usr/sbin/hostmibd/hr_main.C (586) Connect to SNMP agent failed, will keep trying
11/07/16 10:22:44 AM - hr_src.c (354) stopsrc issued 11/07/16 10:23:00 AM - ../../../../../../src/tcpip/usr/sbin/hostmibd/hr_main.C (586) Connect to SNMP agent failed, will keep trying
11/07/16 10:24:00 AM - ../../../../../../src/tcpip/usr/sbin/hostmibd/hr_main.C (594) DPI sub-agent (Host Resources DPI sub-agent Version 1): connected, ready to receive requests...



# tail -f /var/tmp/snmpd.log
11/07/16 10:27:21 EXCEPTIONS: decode_SNMP_Message: pr_seq:missing mandatory parameter: module SNMP OCTETSTRING/class=UNIV/id=4 got UNIV/16 (::ffff:10.100.30.111)
11/07/16 10:27:22 EXCEPTIONS: decode_SNMP_Message: pr_seq:missing mandatory parameter: module SNMP OCTETSTRING/class=UNIV/id=4 got UNIV/16 (::ffff:10.100.30.111)
11/07/16 10:27:23 EXCEPTIONS: decode_SNMP_Message: pr_seq:missing mandatory parameter: module SNMP OCTETSTRING/class=UNIV/id=4 got UNIV/16 (::ffff:10.100.30.111)
11/07/16 10:27:24 EXCEPTIONS: decode_SNMP_Message: pr_seq:missing mandatory parameter: module SNMP OCTETSTRING/class=UNIV/id=4 got UNIV/16 (::ffff:10.100.30.111)
11/07/16 11:30:56 NOTICE: SMUX packet from (::1+53015+1)
11/07/16 11:30:56 NOTICE: SMUX trap: (6 1) (::1+53015+1)
11/07/16 12:02:50 NOTICE: SMUX packet from (::1+53015+1)
11/07/16 12:02:53 NOTICE: SMUX trap: (6 1) (::1+53015+1)
11/07/16 14:04:35 NOTICE: SMUX packet from (::1+53015+1)
11/07/16 14:04:35 NOTICE: SMUX trap: (6 1) (::1+53015+1)

# tail -f /var/tmp/snmpmibd.log
10/28/16 04:01:28 PM - dpi_main.c (652) DPI Subagent (AIX SNMP MIB SubAgent): re-connected ,ready to receive requests...
11/04/16 02:13:01 PM - dpi_main.c (856) snmpmibd: 1473-666 Error occured, try to re-establish connection.
11/04/16 02:13:19 PM - dpi_main.c (639) snmpmibd: 1473-665 Connect to SNMP agent failed, will keep trying.
11/04/16 02:14:19 PM - dpi_main.c (652) DPI Subagent (AIX SNMP MIB SubAgent): re-connected ,ready to receive requests...
11/07/16 10:18:46 AM - dpi_main.c (856) snmpmibd: 1473-666 Error occured, try to re-establish connection.
11/07/16 10:19:04 AM - dpi_main.c (639) snmpmibd: 1473-665 Connect to SNMP agent failed, will keep trying.
11/07/16 10:20:04 AM - dpi_main.c (652) DPI Subagent (AIX SNMP MIB SubAgent): re-connected ,ready to receive requests...
11/07/16 10:22:26 AM - dpi_main.c (856) snmpmibd: 1473-666 Error occured, try to re-establish connection.
11/07/16 10:22:44 AM - dpi_main.c (639) snmpmibd: 1473-665 Connect to SNMP agent failed, will keep trying.
11/07/16 10:23:44 AM - dpi_main.c (652) DPI Subagent (AIX SNMP MIB SubAgent): re-connected ,ready to receive requests...
User avatar
tgriep
Madmin
Posts: 9190
Joined: Thu Oct 30, 2014 9:02 am

Re: Unable to SNMP to an AIX Server

Post by tgriep »

I found a different article at this link
https://www.logicmonitor.com/support/mo ... ation/aix/

That talks about adding the following lines

Code: Select all

VACM_VIEW defaultView 1.3.6.1.2.1.25.2.3.1 - included - 
VACM_VIEW defaultView 1.3.6.1.2.1.25.2.3.1.3 - included - 
VACM_VIEW defaultView 1.3.6.1.2.1 - included -
To the /etc/snmpdv3.conf file which should enable SNMP Drive monitoring on the AIX server.
Take a look at it and see if it fixes the issue.
Be sure to check out our Knowledgebase for helpful articles and solutions!
bosecorp
Posts: 929
Joined: Thu Jun 26, 2014 1:00 pm

Re: Unable to SNMP to an AIX Server

Post by bosecorp »

same result
avandemore
Posts: 1597
Joined: Tue Sep 27, 2016 4:57 pm

Re: Unable to SNMP to an AIX Server

Post by avandemore »

Can you query those OID's from another system? Until the SNMP query works, Nagios isn't going to work. Have contacted AIX support on how to enable and configure SNMP for this?
Previous Nagios employee
User avatar
tgriep
Madmin
Posts: 9190
Joined: Thu Oct 30, 2014 9:02 am

Re: Unable to SNMP to an AIX Server

Post by tgriep »

If we had access to an AIX server, we could help more but if the SNMP daemon on that server can't respond with the information, then there isn't much else we can do.
You could try and upgrade the SNMP Daemon on that server.
Switch over to the Net-SNMP Daemon and see if that works better.
Compile and install the NRPE Agent / Plugins on the server and monitor it that way.
Be sure to check out our Knowledgebase for helpful articles and solutions!
bosecorp
Posts: 929
Joined: Thu Jun 26, 2014 1:00 pm

Re: Unable to SNMP to an AIX Server

Post by bosecorp »

how do I switch to Net-SNMP
User avatar
tgriep
Madmin
Posts: 9190
Joined: Thu Oct 30, 2014 9:02 am

Re: Unable to SNMP to an AIX Server

Post by tgriep »

Here is where you can download the NET-SNMP packages for AIX.
http://www.perzl.org/aix/index.php?n=Main.Net-snmp
You should be able to find instructions for installing those packages from their main page.
http://www.perzl.org/aix/
Be sure to check out our Knowledgebase for helpful articles and solutions!
Locked