Page 1 of 2

router / switch wizard SNMPv3

Posted: Wed May 14, 2014 1:41 pm
by b2m
Hi,

the problem I mentioned in 2014 beta version still exists in final version.

I try to query a switch with SNMPv3, privacy: AES-128, authentication: SHA.

The bandwidth is working fine but there is a little bug in checking the interface state.

The following command is generated by your wizard:

Code: Select all

check_xi_service_ifoperstatusnag!10124!-v3 -u manager -A df3Uvo0QfaA1bP3n -X 1qv6hJ3C9Q1PvzR8 -a SHA -l authPriv
This would use DES as privacy encryption method as it's the default. As I mentioned, we are using AES, so it has to look like this:

Code: Select all

check_xi_service_ifoperstatusnag!10124!-v3 -u manager -x AES -A df3Uvo0QfaA1bP3n -X 1qv6hJ3C9Q1PvzR8 -a SHA -l authPriv
This should be really easy to fix.

When I change the command it works, XI says:

Code: Select all

OK - Interface 10124 is up.
Here you see the next small problem. In an old version of your script something like the following output is shown:

Code: Select all

OK - Gig0/24 is up.
I wish to work again. It really should show the 'real' ifindex and not the SNMP ifindex. You can do that with another very simple SNMP query like in pseudocode:

Code: Select all

ifname = snmpget IF-MIB::ifDescr.ifindex
print OK - ifname is up.
As I mentioned, you already got that in 2012 version. So bring it back, please.

Thanks.

Re: router / switch wizard SNMPv3

Posted: Thu May 15, 2014 1:05 pm
by slansing
Were you using "ifoperstatusnag" in your 2012 version or "ifoperstatus"?

I don't think it was ever out intention to show the interface name as it's value, this is likely a bi-product of another change down the line. I'm looking into the two plugins as well as how the commands may have differed between 2012 r2.9 and 2014 r1.0.

Re: router / switch wizard SNMPv3

Posted: Thu May 15, 2014 1:33 pm
by b2m
slansing wrote:Were you using "ifoperstatusnag" in your 2012 version or "ifoperstatus"?
I don't know. I used the plugin which the wizard chose. I can look it up tomorrow if it matters.

Re: router / switch wizard SNMPv3

Posted: Thu May 15, 2014 4:28 pm
by jomann
It looks like this is actually a bug in the wizard. I've updated it and attached the new v2.0.2 switch wizard.

Re: router / switch wizard SNMPv3

Posted: Fri May 16, 2014 8:35 am
by dfmco
No luck on the fix. I still get the same error as above running SNMP V2c against a Cisco 2851 router using IOS 12.4T. No interfaces are found.

Re: router / switch wizard SNMPv3

Posted: Fri May 16, 2014 9:13 am
by slansing
Back linking to Costanza's thread for information purposes:

http://support.nagios.com/forum/viewtop ... 444#p98444

I'll let Jomann know about this.

Re: router / switch wizard SNMPv3

Posted: Fri May 16, 2014 9:25 am
by jomann
I should clarify with the fix made in 2.0.2 was the ability to select your auth priv protocol, which before was not setting the proper -x when you would select it.

The other issue is still being worked on.

Re: router / switch wizard SNMPv3

Posted: Fri May 16, 2014 9:28 am
by b2m
Would you bring the interface description back to the script :)?

Re: router / switch wizard SNMPv3

Posted: Fri May 16, 2014 9:49 am
by slansing
@b2m, I believe that is what Jomann was talking about in his last post.

Re: router / switch wizard SNMPv3

Posted: Fri May 16, 2014 10:04 am
by jomann
I believe the port name is actually still available. By default it is set to use "Port Number". If you change the select box that says "Monitor Using" in the Monitoring Options section of the wizard you can change it to Port Name and should produce the results that you require.

I've also updated this to a v2.0.4 which includes some fixes that should allow configmkr to work properly with v2c and v3.