SNMP configuration on cisco ASA 5500 series

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
prashanthm88
Posts: 23
Joined: Wed Jul 24, 2013 2:49 pm

SNMP configuration on cisco ASA 5500 series

Post by prashanthm88 »

Hello,

We are trying to configure SNMP on one of our Cisco ASA 5505 appliance. We configured the ASA and NagiosXI both for SNMP.

When we run the setup on nagios, notthing is working except ping.

192.168.20.1 Cisco VPN Sessions Unknown 1h 29m 49s 5/5 2013-07-24 21:42:58 Usage:check_snmp -H <ip_address> -o <OID> [-w warn_range] [-c crit_range]
IBM RSA II Adapter Temperature Unknown 1h 28m 58s 5/5 2013-07-24 21:38:49 Usage:check_snmp -H <ip_address> -o <OID> [-w warn_range] [-c crit_range]
ifDescr.10 Unknown 55m 2s 5/5 2013-07-24 21:42:46 SNMP problem - No data received from host
ifDescr.14 Unknown 54m 12s 5/5 2013-07-24 21:43:39 SNMP problem - No data received from host
ifDescr.15 Unknown 53m 14s 5/5 2013-07-24 21:39:33 SNMP problem - No data received from host

I also attached a file which has the error file.

I'm very new Nagios.

Thanks
You do not have the required permissions to view the files attached to this post.
abrist
Red Shirt
Posts: 8334
Joined: Thu Nov 15, 2012 1:20 pm

Re: SNMP configuration on cisco ASA 5500 series

Post by abrist »

It looks like you are running an snmpget, not a trap. Have you tried walking the device to make sure snmp is enabled and your community string works?

Code: Select all

snmpwalk -v1 -c <community> <ip of device> 
snmpwalk -v2c -c <community> <ip of device> 
Former Nagios employee
"It is turtles. All. The. Way. Down. . . .and maybe an elephant or two."
VI VI VI - The editor of the Beast!
Come to the Dark Side.
prashanthm88
Posts: 23
Joined: Wed Jul 24, 2013 2:49 pm

Re: SNMP configuration on cisco ASA 5500 series

Post by prashanthm88 »

Thanks for the reply.

When I run SNMPwalk wizard, I cleared the data in ODI field and presses next button. which actually found all the information of our network appliace. But, when I hit next it showing me an error.

"SNMP problme- No data received from the HOST"

Do I have to provide any information in SNMP serveries, I left those fields blank
You do not have the required permissions to view the files attached to this post.
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: SNMP configuration on cisco ASA 5500 series

Post by scottwilkerson »

With the SNMP Walk wizard you can run into problems if you clear the starting OID because of default limit in php.

If you add the following to your /etc/php.ini and restart apache you should be able to re-run the wizard and likely get correct results

add to /etc/php.ini

Code: Select all

max_input_vars = 100000
then

Code: Select all

service httpd restart
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
prashanthm88
Posts: 23
Joined: Wed Jul 24, 2013 2:49 pm

Re: SNMP configuration on cisco ASA 5500 series

Post by prashanthm88 »

Thanks for you're quick responce.

I did added max_input_vars = 100000 line to /etc/php.ini, but i'm getting the same error."SNMP problme- No data received from the HOST".

When I clear the filed in ODI I can see everything like host name , no of ports, services running.. But when I hit finish button, it shows an error like this
You do not have the required permissions to view the files attached to this post.
prashanthm88
Posts: 23
Joined: Wed Jul 24, 2013 2:49 pm

Re: SNMP configuration on cisco ASA 5500 series

Post by prashanthm88 »

Even if I don't clear the filed, it actually shows all the sevices and asking me to select the ODI's. I've checked all the ODI check boxes. In the next screen it shows like in the screenshot down below.


Please tell me if I'm missing any steps.

Thanks
You do not have the required permissions to view the files attached to this post.
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: SNMP configuration on cisco ASA 5500 series

Post by scottwilkerson »

By any chance did you change the default check_snmp command in the CCM?

Can you go to one of these services in the CCM and run the "Test Command" link and show the output
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
prashanthm88
Posts: 23
Joined: Wed Jul 24, 2013 2:49 pm

Re: SNMP configuration on cisco ASA 5500 series

Post by prashanthm88 »

I ran this command inside /usr/local/nagios/libexec

./check_snmp -H 192.168.20.1 -o "1.3.6.1.4.1.9.1.745" -C Testcom -U testuser -A testpassword -x AES -X testpassword -L authPriv -P 3 -a MD5 -u W -w 1000 -c 1050

The output which I got "SNMP problem - No data received from host"

I logged in to nagios web portal, ran the same command inside CCM. Go the same error as output.

Please look at the screenshots.
You do not have the required permissions to view the files attached to this post.
prashanthm88
Posts: 23
Joined: Wed Jul 24, 2013 2:49 pm

Re: SNMP configuration on cisco ASA 5500 series

Post by prashanthm88 »

I ran the snmp wizard with SNMP V1, it did work. But when I ran with theSNMP V3 I'm getting an error "SNMP problem - No data received from host"

I'm I missing some thing here, BTW I gave the same credentials to Solarwinds. it worked perfectly fine with out any errors.
You do not have the required permissions to view the files attached to this post.
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: SNMP configuration on cisco ASA 5500 series

Post by scottwilkerson »

It just hit me that you may need to upgrade your Nagios plugins so you can set

Code: Select all

 -x, --privproto=[DES|AES]
Which wasn't present a few versions ago..

You can download the package here
http://sourceforge.net/projects/nagiosp ... ug/1.4.16/

Then on the XI server

Code: Select all

tar -xzf nagios-plugins-1.4.16.tar.gz
cd nagios-plugins-1.4.16
./configure
make clean
make
make install
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
Locked