SNMP V3 PROBLEM

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
Locked
Bojan Lackanovic
Posts: 13
Joined: Wed Oct 31, 2012 9:28 am

SNMP V3 PROBLEM

Post by Bojan Lackanovic »

Hi everyone,

I have snmp V3 problem. I am trying to use chek_snmp for monitoring.

When i use snmpwalk -v 3 -u myuser -l noauth 10.24.24.1 sysUpTime.0
i recieved DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (787173500) 91 days, 2:35:35.00 and this step is OK.



but when i try ./check_snmp -H 10.24.24.1 -P 3 -o sysUpTime.0 i get more errors:

Keep in mind if i use snmp v2 ./check_snmp -H 10.24.24.1 -o sysUpTime.0
SNMP OK - Timeticks: (1873263200) 91 days, 2:49:33.00, it is OK.

External command error: Cannot find module (TOKEN-RING-RMON-MIB): At line 15 in /usr/share/snmp/mibs/RMON2-MIB.my
Did not find 'tokenRing' in module #-1 (/usr/share/snmp/mibs/RMON2-MIB.my)
Did not find 'tokenRingMLStatsEntry' in module #-1 (/usr/share/snmp/mibs/RMON2-MIB.my)
Did not find 'tokenRingPStatsEntry' in module #-1 (/usr/share/snmp/mibs/RMON2-MIB.my)
Did not find 'ringStationControlEntry' in module #-1 (/usr/share/snmp/mibs/RMON2-MIB.my)
Did not find 'sourceRoutingStatsEntry' in module #-1 (/usr/share/snmp/mibs/RMON2-MIB.my)
Unlinked OID in RMON2-MIB: sourceRoutingStats2Table ::= { tokenRing 8 }
Undefined identifier: tokenRing near line 5376 of /usr/share/snmp/mibs/RMON2-MIB.my
Unlinked OID in RMON2-MIB: ringStationControl2Table ::= { tokenRing 7 }
Undefined identifier: tokenRing near line 5321 of /usr/share/snmp/mibs/RMON2-MIB.my
Cannot find module (RFC1382-MIB): At line 38 in /usr/share/snmp/mibs/CISCO-ALPS-MIB.my
Bad month in timestamp (000926000000Z): At line 72 in /usr/share/snmp/mibs/DOCS-CABLE-DEVICE-TRAP-MIB.my
Bad day in timestamp (000926000000Z): At line 72 in /usr/share/snmp/mibs/DOCS-CABLE-DEVICE-TRAP-MIB.my
Group not found in module (ciscoGsp2Mtp3ErrorsGroup): At line 119 in /usr/share/snmp/mibs/CISCO-ITP-GSP2-CAPABILITY.my
Group not found in module (ciscoGsp2Mtp3ErrorsGroup): At line 165 in /usr/share/snmp/mibs/CISCO-ITP-GSP2-CAPABILITY.my
Group not found in module (ciscoGsp2OperationGroup): At line 166 in /usr/share/snmp/mibs/CISCO-ITP-GSP2-CAPABILITY.my
Unlinked OID in CISCO-IETF-FRR-CAPABILITY: ciscoIetfFrrCapability ::= { ciscoAgentCapability 310 }
Undefined identifier: ciscoAgentCapability near line 23 of /usr/share/snmp/mibs/CISCO-IETF-FRR-CAPABILITY.my
Cannot find module (DNS-SERVER-MIB): At line 36 in /usr/share/snmp/mibs/CISCO-DIST-DIRECTOR-MIB.my
Did not find 'DnsName' in module #-1 (/usr/share/snmp/mibs/CISCO-DIST-DIRECTOR-MIB.my)
Did not find 'DnsNameAsIndex' in module #-1 (/usr/share/snmp/mibs/CISCO-DIST-DIRECTOR-MIB.my)
Did not find 'DnsType' in module #-1 (/usr/share/snmp/mibs/CISCO-DIST-DIRECTOR-MIB.my)
Group not found in module (ciscoSlbEntriesGroup): At line 63 in /usr/share/snmp/mibs/CISCO-SLB-CAPABILITY.my
Object not found in module (slbVirtualReplicateProtocol): At line 225 in /usr/share/snmp/mibs/CISCO-SLB-CAPABILITY.my
Object not found in module (slbVirtualReplicateListenAddr): At line 229 in /usr/share/snmp/mibs/CISCO-SLB-CAPABILITY.my
Object not found in module (slbVirtualReplicateRemoteSlb): At line 233 in /usr/share/snmp/mibs/CISCO-SLB-CAPABILITY.my
Object not found in module (slbVirtualReplicatePort): At line 237 in /usr/share/snmp/mibs/CISCO-SLB-CAPABILITY.my
Object not found in module (slbVirtualReplicateInterval): At line 241 in /usr/share/snmp/mibs/CISCO-SLB-CAPABILITY.my
Object not found in module (slbVirtualReplicatePassword): At line 245 in /usr/share/snmp/mibs/CISCO-SLB-CAPABILITY.my
Object not found in module (slbVirtualReplicatePasswordTO): At line 249 in /usr/share/snmp/mibs/CISCO-SLB-CAPABILITY.my
Object not found in module (slbEntriesInitialNumber): At line 253 in /usr/share/snmp/mibs/CISCO-SLB-CAPABILITY.my
Object not found in module (slbEntriesMaximumNumber): At line 257 in /usr/share/snmp/mibs/CISCO-SLB-CAPABILITY.my
Object not found in module (slbEntriesRowStatus): At line 261 in /usr/share/snmp/mibs/CISCO-SLB-CAPABILITY.my
STATUS should be current or obsolete (deprecated): At line 136 in /usr/share/snmp/mibs/CISCO-XGCP-CAPABILITY.my
Cannot find module (FDDI-SMT73-MIB): At line 20 in /usr/share/snmp/mibs/CISCO-STACK-MIB.my
Cannot find module (TOKEN-RING-RMON-MIB): At line 28 in /usr/share/snmp/mibs/CISCO-STACK-MIB.my
Did not find 'fddimibPORTSMTIndex' in module #-1 (/usr/share/snmp/mibs/CISCO-STACK-MIB.my)
Did not find 'fddimibPORTIndex' in module #-1 (/usr/share/snmp/mibs/CISCO-STACK-MIB.my)
Did not find 'ringStationMacAddress' in module #-1 (/usr/share/snmp/mibs/CISCO-STACK-MIB.my)
Group not found in module (cpwVcMplsNotificationGroup): At line 60 in /usr/share/snmp/mibs/CISCO-IETF-PW-MPLS-CAPABILITY.my
Cannot find module (SNMP-REPEATER-MIB): At line 24 in /usr/share/snmp/mibs/CISCO-SIBU-STACKABLE-DUAL-SPEED-HUB-MIB.my
Did not find 'rptrGroupIndex' in module #-1 (/usr/share/snmp/mibs/CISCO-SIBU-STACKABLE-DUAL-SPEED-HUB-MIB.my)
Did not find 'rptrPortGroupIndex' in module #-1 (/usr/share/snmp/mibs/CISCO-SIBU-STACKABLE-DUAL-SPEED-HUB-MIB.my)
Did not find 'rptrPortIndex' in module #-1 (/usr/share/snmp/mibs/CISCO-SIBU-STACKABLE-DUAL-SPEED-HUB-MIB.my)
Module not found (DISMAN-EXPRESSION-MIB): At line 51 in /usr/share/snmp/mibs/CISCO-DISMAN-EXPRESSION-CAPABILITY.my
Bad syntax (OBJECT): At line 79 in /usr/share/snmp/mibs/CISCO-ETHERLIKE-CAPABILITY.my
Expected DESCRIPTION (OBJECT): At line 79 in /usr/share/snmp/mibs/CISCO-ETHERLIKE-CAPABILITY.my
Group not found in module (ciscoMobileIpMrSystemGroupV3): At line 69 in /usr/share/snmp/mibs/CISCO-MOBILE-IP-CAPABILITY.my
Module not found (SNMP-USM-MIB): At line 53 in /usr/share/snmp/mibs/CISCO-SNMP-USM-CAPABILITY.my
Expected STATUS (SNMP-USM-MIB): At line 65 in /usr/share/snmp/mibs/CISCO-SNMP-USM-CAPABILITY.my
Expected "{" (EOF): At line 108 in /usr/share/snmp/mibs/CISCO-SNMP-USM-CAPABILITY.my
Bad object identifier: At line 108 in /usr/share/snmp/mibs/CISCO-SNMP-USM-CAPABILITY.my
Bad parse of AGENT-CAPABILITIES: At line 108 in /usr/share/snmp/mibs/CISCO-SNMP-USM-CAPABILITY.my
Module not found (MPLS-LDP-MIB): At line 62 in /usr/share/snmp/mibs/MPLS-LDP-CAPABILITY.my
Group not found in module (ccCopyGroupRev1): At line 187 in /usr/share/snmp/mibs/CISCO-CONFIG-COPY-CAPABILITY.my
Group not found in module (ccCopyGroupRev1): At line 283 in /usr/share/snmp/mibs/CISCO-CONFIG-COPY-CAPABILITY.my
Group not found in module (snmpStatsGroup): At line 77 in /usr/share/snmp/mibs/CISCO-SNMPv2-CAPABILITY.my
Group not found in module (snmpV1Group): At line 77 in /usr/share/snmp/mibs/CISCO-SNMPv2-CAPABILITY.my
Group not found in module (snmpORGroup): At line 77 in /usr/share/snmp/mibs/CISCO-SNMPv2-CAPABILITY.my
Group not found in module (snmpTrapGroup): At line 77 in /usr/share/snmp/mibs/CISCO-SNMPv2-CAPABILITY.my
Did not find 'ciscoAgentCapability' in module CISCOWAN-SMI (/usr/share/snmp/mibs/CISCO-WAN-MODULE-CAPABILITY.my)
Unlinked OID in CISCO-WAN-MODULE-CAPABILITY: ciscoWanModuleCapability ::= { ciscoAgentCapability 99999 }
Undefined identifier: ciscoAgentCapability near line 22 of /usr/share/snmp/mibs/CISCO-WAN-MODULE-CAPABILITY.my
Group not found in module (cvDsx1ConfGroupSup2): At line 50 in /usr/share/snmp/mibs/CISCO-VISM-DSX1-CAPABILITY.my
Object not found in module (dsx1LineMode): At line 250 in /usr/share/snmp/mibs/CISCO-DS1-CAPABILITY.my
Object not found in module (dsx1LineBuildOut): At line 258 in /usr/share/snmp/mibs/CISCO-DS1-CAPABILITY.my
Object not found in module (dsx1LineMode): At line 408 in /usr/share/snmp/mibs/CISCO-DS1-CAPABILITY.my
Object not found in module (dsx1LineBuildOut): At line 416 in /usr/share/snmp/mibs/CISCO-DS1-CAPABILITY.my
Expected "::=" (LAST-UPDATED): At line 38 in /usr/share/snmp/mibs/MPLS-LSR-MIB-CAPABILITY.my
Bad syntax (OBJECT): At line 64 in /usr/share/snmp/mibs/CISCO-SNMP-TARGET-CAPABILITY.my
Expected DESCRIPTION (OBJECT): At line 64 in /usr/share/snmp/mibs/CISCO-SNMP-TARGET-CAPABILITY.my
Bad operator (/): At line 88 in /usr/share/snmp/mibs/CISCO-OSPF-TRAP-CAPABILITY.my
Group not found in module (systemGroup): At line 59 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (interfacesGroup): At line 59 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (atGroup): At line 59 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (ipGroup): At line 59 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (icmpGroup): At line 59 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (tcpGroup): At line 60 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (udpGroup): At line 60 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (egpGroup): At line 60 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (snmpGroup): At line 60 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (systemGroup): At line 99 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (interfacesGroup): At line 99 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (atGroup): At line 99 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (ipGroup): At line 99 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (icmpGroup): At line 100 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (tcpGroup): At line 100 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (udpGroup): At line 100 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (egpGroup): At line 100 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (snmpGroup): At line 100 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (systemGroup): At line 150 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (interfacesGroup): At line 150 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (atGroup): At line 150 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (ipGroup): At line 150 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (icmpGroup): At line 151 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (tcpGroup): At line 151 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (udpGroup): At line 151 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (egpGroup): At line 151 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (snmpGroup): At line 151 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (systemGroup): At line 201 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (interfacesGroup): At line 201 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (atGroup): At line 201 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (ipGroup): At line 201 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (icmpGroup): At line 202 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (tcpGroup): At line 202 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (udpGroup): At line 202 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (egpGroup): At line 202 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (snmpGroup): At line 202 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (systemGroup): At line 252 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (interfacesGroup): At line 252 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (atGroup): At line 252 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (ipGroup): At line 253 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (icmpGroup): At line 253 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (tcpGroup): At line 253 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (udpGroup): At line 253 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (snmpGroup): At line 254 in /usr/share/snmp/mibs/CISCO-RFC1213-CAPABILITY.my
Group not found in module (ciscoCdpMIBGroupV12R03): At line 212 in /usr/share/snmp/mibs/CISCO-CDP-CAPABILITY.my
Group not found in module (cpeExtPortPolicingActionGroup): At line 232 in /usr/share/snmp/mibs/CISCO-POWER-ETHERNET-EXT-CAPABILITY.my
Group not found in module (cpeExtPortPwrManAllocGroup): At line 233 in /usr/share/snmp/mibs/CISCO-POWER-ETHERNET-EXT-CAPABILITY.my
Group not found in module (cpeExtPolicingNotifEnableGroup): At line 234 in /usr/share/snmp/mibs/CISCO-POWER-ETHERNET-EXT-CAPABILITY.my
Group not found in module (cpeExtPolicingNotifGroup): At line 235 in /usr/share/snmp/mibs/CISCO-POWER-ETHERNET-EXT-CAPABILITY.my
Object not found in module (cpeExtPsePortPolicingAction): At line 289 in /usr/share/snmp/mibs/CISCO-POWER-ETHERNET-EXT-CAPABILITY.my
Object not found in module (cpeExtPsePortPwrManAlloc): At line 302 in /usr/share/snmp/mibs/CISCO-POWER-ETHERNET-EXT-CAPABILITY.my
Object not found in module (cpeExtPolicingNotifEnable): At line 307 in /usr/share/snmp/mibs/CISCO-POWER-ETHERNET-EXT-CAPABILITY.my
Cannot find module (SNMP-REPEATER-MIB): At line 29 in /usr/share/snmp/mibs/CISCO-REPEATER-MIB.my
Did not find 'rptrPortEntry' in module #-1 (/usr/share/snmp/mibs/CISCO-REPEATER-MIB.my)
STATUS should be current or obsolete (deprecated): At line 60 in /usr/share/snmp/mibs/CISCO-ITP-GACT-CAPABILITY.my
Group not found in module (ciscoGactGttGroupRev1): At line 80 in /usr/share/snmp/mibs/CISCO-ITP-GACT-CAPABILITY.my
Group not found in module (ciscoGactGttGroupRev1): At line 93 in /usr/share/snmp/mibs/CISCO-ITP-GACT-CAPABILITY.my
Group not found in module (ciscoGactGttGroupRev1): At line 106 in /usr/share/snmp/mibs/CISCO-ITP-GACT-CAPABILITY.my
Bad operator (/): At line 244 in /usr/share/snmp/mibs/CISCO-OSPF-CAPABILITY.my
Cannot find module (AWCVX-MIB): At line 33 in /usr/share/snmp/mibs/AWC-VLAN-CFG-MIB.my
Did not find 'awcVx' in module #-1 (/usr/share/snmp/mibs/AWC-VLAN-CFG-MIB.my)
Did not find 'AwcVlanId' in module #-1 (/usr/share/snmp/mibs/AWC-VLAN-CFG-MIB.my)
Did not find 'AwcPolId' in module #-1 (/usr/share/snmp/mibs/AWC-VLAN-CFG-MIB.my)
Did not find 'WEPKeytype128' in module #-1 (/usr/share/snmp/mibs/AWC-VLAN-CFG-MIB.my)
Did not find 'AwcDot11MicAlgorithm' in module #-1 (/usr/share/snmp/mibs/AWC-VLAN-CFG-MIB.my)
Did not find 'AwcDot11WEPKeyPermuteAlgorithm' in module #-1 (/usr/share/snmp/mibs/AWC-VLAN-CFG-MIB.my)
Did not find 'AwcPfPriority' in module #-1 (/usr/share/snmp/mibs/AWC-VLAN-CFG-MIB.my)
Unlinked OID in AWC-VLAN-CFG-MIB: awcVlanCfgMIB ::= { awcVx 21 }
Undefined identifier: awcVx near line 36 of /usr/share/snmp/mibs/AWC-VLAN-CFG-MIB.my
Module not found (SNMP-VACM-MIB): At line 53 in /usr/share/snmp/mibs/CISCO-SNMP-VACM-CAPABILITY.my
Module not found (SNMP-VACM-MIB): At line 99 in /usr/share/snmp/mibs/CISCO-SNMP-VACM-CAPABILITY.my
Group not found in module (snmpCommunityTableGroup): At line 61 in /usr/share/snmp/mibs/CISCO-SNMP-COMMUNITY-CAPABILITY.my
Group not found in module (snmpCommunityTableGroup): At line 95 in /usr/share/snmp/mibs/CISCO-SNMP-COMMUNITY-CAPABILITY.my
Module not found (RFC1406-MIB): At line 57 in /usr/share/snmp/mibs/CISCO-RFC1406-CAPABILITY.my
Module not found (RFC1406-MIB): At line 237 in /usr/share/snmp/mibs/CISCO-RFC1406-CAPABILITY.my
Module not found (RFC1406-MIB): At line 412 in /usr/share/snmp/mibs/CISCO-RFC1406-CAPABILITY.my
Cannot adopt OID in RMON2-MIB: sourceRoutingStats2Entry ::= { sourceRoutingStats2Table 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanAllowUnencryptedVlanId ::= { awcVlanCfgObjects 8 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanNUcastKeyTable ::= { awcVlanCfgObjects 7 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgTable ::= { awcVlanCfgObjects 6 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanAnyEnabled ::= { awcVlanCfgObjects 5 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanAllowEncrypted ::= { awcVlanCfgObjects 4 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcNativeVlanId ::= { awcVlanCfgObjects 3 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanEncapMode ::= { awcVlanCfgObjects 2 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcMaxVlanIds ::= { awcVlanCfgObjects 1 }
Cannot adopt OID in RMON2-MIB: ringStationControlCreateTime ::= { ringStationControl2Entry 2 }
Cannot adopt OID in RMON2-MIB: ringStationControlDroppedFrames ::= { ringStationControl2Entry 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgEntry ::= { awcVlanCfgTable 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgGroups ::= { awcVlanCfgConformance 2 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgCompliances ::= { awcVlanCfgConformance 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgMIB ::= { awcVx 21 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgCompliance ::= { awcVlanCfgCompliances 1 }
Cannot adopt OID in RMON2-MIB: sourceRoutingStatsCreateTime ::= { sourceRoutingStats2Entry 2 }
Cannot adopt OID in RMON2-MIB: sourceRoutingStatsDroppedFrames ::= { sourceRoutingStats2Entry 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgObjectsGroup ::= { awcVlanCfgGroups 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanNUcastKeyEntry ::= { awcVlanNUcastKeyTable 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanAlert ::= { awcVlanCfgEntry 10 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanDefaultUserPriority ::= { awcVlanCfgEntry 9 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanName ::= { awcVlanCfgEntry 8 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanWEPKeyPermuteAlgorithm ::= { awcVlanCfgEntry 7 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanMicAlgorithm ::= { awcVlanCfgEntry 6 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanRowStatus ::= { awcVlanCfgEntry 5 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanNUcastKeyRotationInterval ::= { awcVlanCfgEntry 4 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanEnabled ::= { awcVlanCfgEntry 3 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanPolId ::= { awcVlanCfgEntry 2 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanIndex ::= { awcVlanCfgEntry 1 }
Cannot adopt OID in RMON2-MIB: ringStationControl2Table ::= { tokenRing 7 }
Cannot adopt OID in RMON2-MIB: sourceRoutingStats2Table ::= { tokenRing 8 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgConformance ::= { awcVlanCfgMIB 3 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgNotifications ::= { awcVlanCfgMIB 2 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgObjects ::= { awcVlanCfgMIB 1 }
Cannot adopt OID in RMON2-MIB: ringStationControl2Entry ::= { ringStationControl2Table 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanNUcastKeyValue ::= { awcVlanNUcastKeyEntry 3 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanNUcastKeyLen ::= { awcVlanNUcastKeyEntry 2 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanNUcastKeyIndex ::= { awcVlanNUcastKeyEntry 1 }
Cannot adopt OID in RMON2-MIB: sourceRoutingStats2Entry ::= { sourceRoutingStats2Table 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcMaxVlanIds ::= { awcVlanCfgObjects 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanEncapMode ::= { awcVlanCfgObjects 2 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcNativeVlanId ::= { awcVlanCfgObjects 3 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanAllowEncrypted ::= { awcVlanCfgObjects 4 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanAnyEnabled ::= { awcVlanCfgObjects 5 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgTable ::= { awcVlanCfgObjects 6 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanNUcastKeyTable ::= { awcVlanCfgObjects 7 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanAllowUnencryptedVlanId ::= { awcVlanCfgObjects 8 }
Cannot adopt OID in RMON2-MIB: ringStationControlDroppedFrames ::= { ringStationControl2Entry 1 }
Cannot adopt OID in RMON2-MIB: ringStationControlCreateTime ::= { ringStationControl2Entry 2 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgEntry ::= { awcVlanCfgTable 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgCompliances ::= { awcVlanCfgConformance 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgGroups ::= { awcVlanCfgConformance 2 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgMIB ::= { awcVx 21 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgCompliance ::= { awcVlanCfgCompliances 1 }
Cannot adopt OID in RMON2-MIB: sourceRoutingStatsDroppedFrames ::= { sourceRoutingStats2Entry 1 }
Cannot adopt OID in RMON2-MIB: sourceRoutingStatsCreateTime ::= { sourceRoutingStats2Entry 2 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgObjectsGroup ::= { awcVlanCfgGroups 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanNUcastKeyEntry ::= { awcVlanNUcastKeyTable 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanIndex ::= { awcVlanCfgEntry 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanPolId ::= { awcVlanCfgEntry 2 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanEnabled ::= { awcVlanCfgEntry 3 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanNUcastKeyRotationInterval ::= { awcVlanCfgEntry 4 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanRowStatus ::= { awcVlanCfgEntry 5 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanMicAlgorithm ::= { awcVlanCfgEntry 6 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanWEPKeyPermuteAlgorithm ::= { awcVlanCfgEntry 7 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanName ::= { awcVlanCfgEntry 8 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanDefaultUserPriority ::= { awcVlanCfgEntry 9 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanAlert ::= { awcVlanCfgEntry 10 }
Cannot adopt OID in RMON2-MIB: sourceRoutingStats2Table ::= { tokenRing 8 }
Cannot adopt OID in RMON2-MIB: ringStationControl2Table ::= { tokenRing 7 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgObjects ::= { awcVlanCfgMIB 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgNotifications ::= { awcVlanCfgMIB 2 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanCfgConformance ::= { awcVlanCfgMIB 3 }
Cannot adopt OID in RMON2-MIB: ringStationControl2Entry ::= { ringStationControl2Table 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanNUcastKeyIndex ::= { awcVlanNUcastKeyEntry 1 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanNUcastKeyLen ::= { awcVlanNUcastKeyEntry 2 }
Cannot adopt OID in AWC-VLAN-CFG-MIB: awcVlanNUcastKeyValue ::= { awcVlanNUcastKeyEntry 3 }
snmpget: No securityName specified (Sub-id not found: (top) -> sysUpTime)


[user@nagios plugins]# ./check_snmp -V
check_snmp v1.4.16 (nagios-plugins 1.4.16)
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: SNMP V3 PROBLEM

Post by scottwilkerson »

check_snmp for version 3 will also require these values to be set
-L, --seclevel=[noAuthNoPriv|authNoPriv|authPriv]
SNMPv3 securityLevel
-a, --authproto=[MD5|SHA]
SNMPv3 auth proto
-U, --secname=USERNAME
SNMPv3 username
-A, --authpassword=PASSWORD
SNMPv3 authentication password
-X, --privpasswd=PASSWORD
SNMPv3 privacy password
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
Bojan Lackanovic
Posts: 13
Joined: Wed Oct 31, 2012 9:28 am

Re: SNMP V3 PROBLEM

Post by Bojan Lackanovic »

How can i do it?

Thank you very much.
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: SNMP V3 PROBLEM

Post by scottwilkerson »

you would add these to the command, but you need to know what you need for each (depending on your SNMPv3 setup), like

Code: Select all

./check_snmp -H 10.24.24.1 -P 3 --seclevel=authPriv -a SHA --secname=USERNAME --authpassword=PASSWORD --privpasswd=PRIVPASSWORD-o sysUpTime.0
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
Bojan Lackanovic
Posts: 13
Joined: Wed Oct 31, 2012 9:28 am

Re: SNMP V3 PROBLEM

Post by Bojan Lackanovic »

Just solved. How i can hide security settings from services.cfg file? authpassword and privpasswrd are in clear text.

./check_snmp -H 10.24.24.1 -P 3 --seclevel=authPriv -a SHA --secname=USERNAME --authpassword=PASSWORD --privpasswd=PRIVPASSWORD-o sysUpTime.0
agriffin
Posts: 876
Joined: Mon May 09, 2011 9:36 am

Re: SNMP V3 PROBLEM

Post by agriffin »

You can't hide the security information. What threats are you worried about? In order to automatically perform the check, the information needs to be stored somewhere, either in the clear or obfuscated (which would not be secure either). If you're worried about access to the file, you could move the configuration for those services into a separate file with tighter permissions than your other config files.
Bojan Lackanovic
Posts: 13
Joined: Wed Oct 31, 2012 9:28 am

Re: SNMP V3 PROBLEM

Post by Bojan Lackanovic »

OK.


This command is working:
./check_snmp -H 10.24.24.1 -P 3 --seclevel=authPriv -a SHA --secname=USERNAME --authpassword=PASSWORD --privpasswd=PRIVPASSWORD-o sysUpTime.0

But there are two issues:

1) Problem with AES 256. It is working with AES 128, but didn't working with AES 256
2) There is problem if using special characters for authpassword and privpassword. I am using quotation but, didn't working. For exampe '%36!52*@1' for both password.
slansing
Posts: 7698
Joined: Mon Apr 23, 2012 4:28 pm
Location: Travelling through time and space...

Re: SNMP V3 PROBLEM

Post by slansing »

Have you made sure that you have SNMP enabled and traffic ports open for that device? Also I do not believe quotations will work for the password, is it a requirement for you?
Bojan Lackanovic
Posts: 13
Joined: Wed Oct 31, 2012 9:28 am

Re: SNMP V3 PROBLEM

Post by Bojan Lackanovic »

Port is open. It is working with AES 128, but didn't working with AES 256. Probably i need to specify in command for 256.

Also, as i saw it's working with password, but problem is when i using special characters in password.

Kind regard
Locked