Send netdisco-users mailing list submissions to
netdisco-users@lists.sourceforge.net
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.sourceforge.net/lists/listinfo/netdisco-users
or, via email, send a message with subject or body 'help' to
netdisco-users-requ...@lists.sourceforge.net
You can reach the person managing the list at
netdisco-users-ow...@lists.sourceforge.net
When replying, please edit your Subject line so it is more specific
than "Re: Contents of netdisco-users digest..."
Today's Topics:
1. SNMPv3 issue in Netdisco1 (Muris)
2. Re: SNMPv3 issue in Netdisco1 (Jeroen van Ingen)
3. Re: Cisco N5k Trunk VLANs not found for ports on FEX
(Jeroen van Ingen)
--- Begin Message ---
Hi,
I am running Netdisco 1 on an older install, and trying to use SNMPv3 to
get data from a device, and even forced it to grab data using SNMPv3..
however even its forced on snmpv3, for some reason the SNMPv2 MIB spits out
an error, any ideas? Why isnt it going to the SNMPv3 MIB?
In netdisco v2.0 it works fine, but 1.0 cant get it working, comes up with
authorisation error on v1.
netdisco -D -d 10.x.x.x
n e t d i s c o
--------------------------------------------------
Using Config File : /usr/share/netdisco/netdisco.conf
Loading topology information from /usr/share/netdisco/netdisco-topology.txt
3 entries loaded
[10.x.x.x] Discover starting
get_device(10.x.x.x)
! [10.x.x.x] Forcing SNMPv3 by config file.
! [10.x.x.x] Forcing SNMPv3 by config file.
create_device(10.x.x.x,s,3*,AutoSpecify,bw:default)
SNMP::Info::_global layers : SNMPv2-MIB::sysServices.0 : .1.3.6.1.2.1.1.7.0
SNMP::Info::_global(layers) authorizationError (access denied to that
object) at /usr/sbin/netdisco line 1359
SNMP::Info::_global description : SNMPv2-MIB::sysDescr.0 :
.1.3.6.1.2.1.1.1.0
SNMP::Info::_global(description) authorizationError (access denied to that
object) at /usr/sbin/netdisco line 1359
SNMP::Info::specify() - Could not get info from device at
/usr/sbin/netdisco line 1359
Can't connect to 10.x.x.x
! Device Not Supported or I can't connect to it via SNMP.
--- End Message ---
--- Begin Message ---
Hi Muris,
I'm not sure how I can explain this best, but I'll give it a try:
SNMPv3 defines mechanisms for secure interaction between an SNMP agent
and an SNMP manager, and the SNMP objects that are added for SNMPv3 are
only the ones that are needed to configure those mechanisms, and to
collect statistics about those mechanisms.
SNMPv3 doesn't affect existing SNMP objects, it's only about the way to
retrieve them in a secure way. For example: IF-MIB::ifTable has the same
OID, doesn't matter if it's pulled via SNMPv2 or SNMPv3.
Similar to IF-MIB, SNMPv2-MIB also defines commonly used objects; from
the top of my head, SNMPv2-MIB is the successor to RFC1213-MIB, and both
contain the "system" group with objects like sysDescr, sysContact,
sysServices, etcetera. These are objects that Netdisco needs to retrieve
first; doesn't matter if the transport is SNMPv1, SNMPv2 or SNMPv3 (and
yes, the objects in SNMPv2-MIB are accessible over SNMPv1 transport as
well).
Looking at the output you've given, Netdisco actually did try connecting
to the device using SNMPv3: there's a '3' in the create_device() line
signifying that SNMPv3 is used, and the error that you get
(authorizationError) is only seen with SNMPv3.
Can't tell you what the root cause for this issue is; might be that the
SNMPv3 config on your device doesn't match what you've configured in
Netdisco, or could be something else; we've had a few small bugs wrt
SNMPv3 support in Netdisco or in SNMP::Info iirc.
Netdisco 1 isn't maintained anymore; I strongly suggest that you upgrade
to Netdisco 2. No known SNMPv3 bugs there, and more people that may be
willing to help you troubleshoot.
Regards,
Jeroen van Ingen
ICT Service Centre
University of Twente, P.O.Box 217, 7500 AE Enschede, The Netherlands
On 06/22/2017 05:04 AM, Muris wrote:
Hi,
I am running Netdisco 1 on an older install, and trying to use SNMPv3 to
get data from a device, and even forced it to grab data using SNMPv3..
however even its forced on snmpv3, for some reason the SNMPv2 MIB spits
out an error, any ideas? Why isnt it going to the SNMPv3 MIB?
In netdisco v2.0 it works fine, but 1.0 cant get it working, comes up
with authorisation error on v1.
netdisco -D -d 10.x.x.x
n e t d i s c o
--------------------------------------------------
Using Config File : /usr/share/netdisco/netdisco.conf
Loading topology information from /usr/share/netdisco/netdisco-topology.txt
3 entries loaded
[10.x.x.x] Discover starting
get_device(10.x.x.x)
! [10.x.x.x] Forcing SNMPv3 by config file.
! [10.x.x.x] Forcing SNMPv3 by config file.
create_device(10.x.x.x,s,3*,AutoSpecify,bw:default)
SNMP::Info::_global layers : SNMPv2-MIB::sysServices.0 : .1.3.6.1.2.1.1.7.0
SNMP::Info::_global(layers) authorizationError (access denied to that
object) at /usr/sbin/netdisco line 1359
SNMP::Info::_global description : SNMPv2-MIB::sysDescr.0 :
.1.3.6.1.2.1.1.1.0
SNMP::Info::_global(description) authorizationError (access denied to
that object) at /usr/sbin/netdisco line 1359
SNMP::Info::specify() - Could not get info from device at
/usr/sbin/netdisco line 1359
Can't connect to 10.x.x.x
! Device Not Supported or I can't connect to it via SNMP.
--- End Message ---
--- Begin Message ---
Hi Christian,
Hmm, maybe it's a limitation or bug in the older NX-OS versions. It's
been ages since we ran a 5.x release so I don't remember if we ever had
this issue.
We currently run 6.0(2)N2(1) on the 5596's in one data center and
7.1(3)N1(2) on the 5596's in our other DC; both report VLAN membership
on trunks just fine.
Regards,
Jeroen van Ingen
ICT Service Centre
University of Twente, P.O.Box 217, 7500 AE Enschede, The Netherlands
On 06/20/2017 12:09 PM, Christian Ramseyer wrote:
Hi guys
Given this setup:
204 Po204(SU) Eth LACP Eth106/1/7(P) Eth107/1/7(P)
*** # show fex 106 detail | include 1/7
Eth106/1/7 Up Po106
*** # show fex 107 detail | include 1/7
Eth107/1/7 Up Po107
interface port-channel204
description ***
switchport mode trunk
switchport trunk allowed vlan 461,475-476
Netdisco does not show anything in the VLAN Membership. The problem is
AFAICT Cisco-based, as the FEX ports are not included in VTP-MIB, e.g.
for vlanTrunkPortDynamicStatus:
interface: 369098955 port-channel204
.1.3.6.1.4.1.9.9.46.1.6.1.1.14.369098955 = No Such Instance currently
exists at this OID
Has anybody already noticed this or maybe even found a workaround? Our
N5k here still run 5.2(1)N1(9), but from the resolved issues in
5.2(1)N1(9a) and 5.2(1)N1(9b) it doesn't look like they would be any help.
Christian
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list
netdisco-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/netdisco-users
--- End Message ---
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list - Digest Mode
netdisco-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/netdisco-users