Page 1 of 2
check_snmp help
Posted: Wed Aug 19, 2015 4:58 pm
by Pikmin
Hi guys and girls,
I have Nagios Core installed and want to monitor the VLAN membership on Cisco switches, I also monitor the power used on the port and whether it's up or down in the same command, but VLAN is where my problem lies
This is the command I use (just the VLAN part) and works fine unless a port is a member of two VLANs in which case I only get the first VLAN- this is the first minor issue
Code: Select all
./check_snmp -H 192.168.130.152 -C public -o SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10101 -l "VLAN ="
SNMP OK - VLAN = 192 | 'VLAN ='=192
However, when I run this on a trunk port
Code: Select all
./check_snmp -H 192.168.130.152 -C public -o SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10123 -l "VLAN ="
External command error: Error in packet
Reason: (noSuchName) There is no such variable name in this MIB.
Failed object: SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10123
I'm using groups when checking VLANs so I have checks for ports 1-24 for every switch. On some of them ports 23-24 are trunked. I'd like to keep using groups otherwise I would need separate checks for every switch. I guess my question is, is there another command that I'm not aware of that I could use to check VLAN membership where I won't get an error when run on a trunked port? Any recommendations are highly appreciated
Re: check_snmp help
Posted: Wed Aug 19, 2015 7:26 pm
by Box293
Pikmin wrote:This is the command I use (just the VLAN part) and works fine unless a port is a member of two VLANs in which case I only get the first VLAN- this is the first minor issue
Code: Select all
./check_snmp -H 192.168.130.152 -C public -o SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10101 -l "VLAN ="
SNMP OK - VLAN = 192 | 'VLAN ='=192
Can you please run this with the verbose flag -v and post back the output:
Code: Select all
./check_snmp -H 192.168.130.152 -C public -o SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10101 -l "VLAN =" -v
Also, you'll notice the fist line it outputs is the snmpget command, it'll be something like:
Code: Select all
/usr/bin/snmpget -Le -t 3 -r 5 -m ALL -v 1 [authpriv] 192.168.130.152:161 SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10101
Can you also run this in debug mode (-D ALL) and post the output:
Code: Select all
/usr/bin/snmpget -Le -t 3 -r 5 -m ALL -v 1 [authpriv] 192.168.130.152:161 SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10101 -D ALL
Pikmin wrote:I'm using groups when checking VLANs so I have checks for ports 1-24 for every switch. On some of them ports 23-24 are trunked. I'd like to keep using groups otherwise I would need separate checks for every switch. I guess my question is, is there another command that I'm not aware of that I could use to check VLAN membership where I won't get an error when run on a trunked port? Any recommendations are highly appreciated
You might be able to exclude those specific switches in the switches using a ! to exclude them. You could put all these switches in a group and exclude the group:
https://assets.nagios.com/downloads/nag ... ricks.html
Excluding Hosts:
If you want to create identical services on numerous hosts or hostgroups, but would like to exclude some hosts from the definition, this can be accomplished by preceding the host or hostgroup with a ! symbol.
Code: Select all
define service{
host_name HOST1,HOST2,!HOST3,!HOST4,...,HOSTN
hostgroup_name HOSTGROUP1,HOSTGROUP2,!HOSTGROUP3,!HOSTGROUP4,...,HOSTGROUPN
service_description SOMESERVICE
other service directives ...
}
Re: check_snmp help
Posted: Fri Aug 21, 2015 6:31 pm
by Pikmin
Thank you! I had no idea about the exclude directive.
Code: Select all
[/./check_snmp -H 192.168.130.152 -C public -o SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10101 -l "VLAN =" -v /usr/bin/snmpget -Le -t 1 -r 5 -m ALL -v 1 [authpriv] 192.168.130.152:161 SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10101
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10101 = INTEGER: 192
SNMP OK - VLAN = 192 | 'VLAN ='=192
Re: check_snmp help
Posted: Sun Aug 23, 2015 8:55 pm
by Box293
Sorry I made a mistake with the snmpget command I got you to run, I left out the community argument.
Try:
Code: Select all
/usr/bin/snmpget -Le -t 3 -r 5 -m ALL -v 1 -c public 192.168.130.152:161 SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10101 -D ALL
Replace public with your community.
Re: check_snmp help
Posted: Sun Aug 23, 2015 11:28 pm
by Pikmin
Re: check_snmp help
Posted: Mon Aug 24, 2015 12:00 am
by Box293
Nothing is standing out in that output.
I've noticed your original command does not define an SNMP version so it is defaulting to v1. I'm interested to see what happens when you run it with v2c, try this command:
Code: Select all
./check_snmp -H 192.168.130.152 -C public -P 2c -o SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10101 -l "VLAN ="
Also, can you do a walk:
Code: Select all
snmpwalk -c public -v 2c 192.168.130.152 SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2
Re: check_snmp help
Posted: Mon Aug 24, 2015 6:17 pm
by Pikmin
Code: Select all
[root@ndnagios libexec]# ./check_snmp -H 192.168.130.152 -C public -P 2c -o SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10120 -l "VLAN ="
SNMP OK - VLAN = 152 | 'VLAN ='=152
[root@ndnagios libexec]# ./check_snmp -H 192.168.130.152 -C public -P 2c -o SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10121 -l "VLAN ="
SNMP OK - VLAN = 182 | 'VLAN ='=182
[root@ndnagios libexec]# ./check_snmp -H 192.168.130.152 -C public -P 2c -o SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10122 -l "VLAN ="
SNMP OK - VLAN = Such Instance currently exists at this OID |
[root@ndnagios libexec]# ./check_snmp -H 192.168.130.152 -C public -P 2c -o SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10123 -l "VLAN ="
SNMP OK - VLAN = Such Instance currently exists at this OID |
Code: Select all
[root@ndnagios libexec]# snmpwalk -c public -v 2c 192.168.130.152 SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10101 = INTEGER: 192
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10102 = INTEGER: 192
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10103 = INTEGER: 192
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10104 = INTEGER: 192
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10105 = INTEGER: 152
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10106 = INTEGER: 152
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10107 = INTEGER: 152
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10108 = INTEGER: 152
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10109 = INTEGER: 152
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10110 = INTEGER: 152
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10111 = INTEGER: 182
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10112 = INTEGER: 152
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10113 = INTEGER: 152
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10114 = INTEGER: 192
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10115 = INTEGER: 152
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10116 = INTEGER: 152
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10117 = INTEGER: 182
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10118 = INTEGER: 152
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10119 = INTEGER: 152
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10120 = INTEGER: 152
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10121 = INTEGER: 182
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10201 = INTEGER: 1
SNMPv2-SMI::enterprises.9.9.68.1.2.2.1.2.10202 = INTEGER: 1
Looks like even with version 2 it doesn't actually find the trunk ports (22-24) only goes up to 21 in the above walk
show interfaces status
truncated
Gi0/20 IP PHONE connected 152 a-full a-10 10/100/1000BaseTX
Gi0/21 connected 182 a-half a-10 10/100/1000BaseTX
Gi0/22 Link to Access Swi connected trunk a-full a-1000 10/100/1000BaseTX
Gi0/23 Link to Access Swi connected trunk a-full a-1000 10/100/1000BaseTX
Gi0/24 Link to Access Swi connected trunk a-full a-1000 10/100/1000BaseTX
Re: check_snmp help
Posted: Mon Aug 24, 2015 9:42 pm
by Box293
I think you are going to need to use the exclude directive for those switches with trunk ports.
I'm not sure how to proceed with the issue where multiple VLAN's are only reporting the first VLAN. Does anyone else out there have any ideas?
Re: check_snmp help
Posted: Tue Aug 25, 2015 4:53 pm
by Pikmin
Thanks for all your help, aprreciate it.
For now I've decided to keep them all monitored but will keep in mind I have the exclude directive option
Ports that are not trunked output:
SNMP OK - VLAN = 34 Power = 0 Port Status = up(1)
SNMP OK - VLAN = 34 Power = 0 Port Status = up(1)
SNMP OK - VLAN = 34 Power = 0 Port Status = up(1)
Ports 21-24 only check for Power and Port Status, so I don't have to worry about VLAN error messages
Gi0/23 Description
SNMP OK - Power = 0 Port Status = up(1)
Gi0/24 Description
SNMP OK - Power = 0 Port Status = up(1)
Re: check_snmp help
Posted: Wed Aug 26, 2015 9:04 am
by hsmith
Pikmin wrote:Thanks for all your help, aprreciate it.
For now I've decided to keep them all monitored but will keep in mind I have the exclude directive option
Ports that are not trunked output:
SNMP OK - VLAN = 34 Power = 0 Port Status = up(1)
SNMP OK - VLAN = 34 Power = 0 Port Status = up(1)
SNMP OK - VLAN = 34 Power = 0 Port Status = up(1)
Ports 21-24 only check for Power and Port Status, so I don't have to worry about VLAN error messages
Gi0/23 Description
SNMP OK - Power = 0 Port Status = up(1)
Gi0/24 Description
SNMP OK - Power = 0 Port Status = up(1)
Is there anything else we can do for you, or are you all right one this one for now?