-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Bart
I don't know about your specific device, but in general I would suggest you to use SNMPv2. I don't think you can limit the MIBs to be scannable, but you can make sure the community is read-only and that it's allowed only from your IP-address using access-list 9 permit host 123.234.123.234 snmp-server community bluesuede ro 9 or with a named access-list ip access-list standard kyrilograph permit host 123.234.123.234 snmp-server community bluesuede ro kyrilograph Next thing I wonder about is the notion 'v4only' - does the interface in question use IPv6? Best regards Jan Ferré On 2011-03-21 09:30, bart sikkes wrote: > hello, > > made some progress by just skipping the vmVlan walking / reading for > certain types of cisco routers. only it still doesn't quite work, im > wondering if there is a list of MIBs to allow on a cisco device (if > you don't grant full access) to have basic mrtg working (so just to > create a working config by cfgmaker)? > > thanks, > bart > > On Tue, Feb 15, 2011 at 9:53 AM, bart sikkes <[email protected]> wrote: >> hello, >> >> I have been using mrtg without problems for a long time but recently >> encountered some problems with routers from a new WAN provider. during >> cfgmaker it fails on the vmVlan walking >> >> --base: Walking vmVlan >> SNMP Error: >> Received SNMP response with error code >> error status: noSuchName >> index 1 (OID: 1.3.6.1.4.1.9.9.68.1.2.2.1.2) >> SNMPv1_Session (remote host: "154.169.0.89" [154.169.0.89].161) >> community: "test" >> request ID: -591419100 >> PDU bufsize: 8000 bytes >> timeout: 2s >> retries: 5 >> backoff: 1) >> at /usr/bin/../lib/mrtg2/SNMP_util.pm line 627 >> SNMPWALK Problem for 1.3.6.1.4.1.9.9.68.1.2.2.1.2 on >> [email protected]::::::v4only >> at /usr/bin/cfgmaker line 150 >> >> this happens for the FastEthernet0/0 interface and because of the >> error it is commented out in the final config. the interface is up and >> traffic flows through it. >> >> I tried snmpwalking the device myself and that seems to work fine, so >> community string is ok and device does allow some polling. >> >> this is a Cisco 1841 router, IOS version Version 12.4(25d), exact SNMP >> settings are unknown, as it is a provider managed device. >> >> any clue where to look for the issue? mrtg setting, device setting? >> >> thanks in advance, >> bart >> > > _______________________________________________ > mrtg mailing list > [email protected] > https://lists.oetiker.ch/cgi-bin/listinfo/mrtg - -- Jan Ferré - UNI-C Netdrift - DTU Bygning 304, DK-2800 Lyngby tlf. +45 3587 8235, cell. +45 2160 8012, fax. +45 3587 8990 EAN-no.: 5798000555198 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJNhy8kAAoJEOtHm5Lk+Fn/40sH/Av8swKuxurxB4BQCKTMJw2L qcCAWgrOHME92W0WolQX233pBPAFOuNJssOEypY/6LUk6fe+cJ6d05hedmxalIQb vJSEUiFPl8bTiSb/oX9vwZoJAtLXX3/OaRhmkkt2rrX9fkLFSVlKSZEoXFpqAllD D1cDMCHW7h//krUup7C3oPb3BNnornT0o9eNKeCVlmPsEv+JRUg6i8Z0Q76n17kn rq5lWSZzZUPholagh32UvnbeTxY4LO+KN4WDvxWxTjtZPWg5mNC7V9PlSxSFSHdC 1sElOXqEppyJx34227foku8ixvAfKuhGYqw7e04o2EPAQJ7UQQWSAT4BvwOZxC0= =j3uD -----END PGP SIGNATURE----- _______________________________________________ mrtg mailing list [email protected] https://lists.oetiker.ch/cgi-bin/listinfo/mrtg
