Send netdisco-users mailing list submissions to
        [email protected]

To subscribe or unsubscribe via the World Wide Web, visit
        https://lists.sourceforge.net/lists/listinfo/netdisco-users
or, via email, send a message with subject or body 'help' to
        [email protected]

You can reach the person managing the list at
        [email protected]

When replying, please edit your Subject line so it is more specific
than "Re: Contents of netdisco-users digest..."
Today's Topics:

   1. Re: Detect device as Checkpoint (Michael Butash)
--- Begin Message ---
Interestingly enough, I was dealing with a checkpoint customer recently I
had to discover around it for some issues, but hadn't gotten to dig into
adapting ssh collector for a native topology input for it's funkiness.

Doing so with snmp was fruitless as each virtual vsx firewall == snmp v3
context switch per vsx instance, which netdisco didn't grok as two separate
devices when presented as such as different profiles to the same ip even if
diff snmpv3 context key.  Doing so via ssh would need to extend context
switch via expect on cli and check per vsx the arp/mac/routing tables, but
to the same management ip, so some problems with many to one determinations
with their methods in netdisco there too.

This becomes almost like the lwaps/wlc relations of the internal many
firewalls to a parent device to provide counters for both classes of
devices (controller and many ap's) per single host ip.

Vendor solutions can be so messy.

-mb



On Thu, Dec 14, 2017 at 3:24 PM, Oliver Gorwits <[email protected]> wrote:

> Hi Cedric,
>
> On 2017-12-13 15:27, Delaunay Cedric wrote:
>
>> Hi all,
>>  I try to ensure netdisco detect our physical checkpoint firewalls but
>> I'm unable to make it run...
>>
>
> You probably want the "ssh collector" helper script, which can retrieve
> ARP entries from the firewall:
>
> https://metacpan.org/pod/distribution/App-Netdisco/bin/netdi
> sco-sshcollector
>
> together with the standard Discover, it should be enough.
>
> regards,
> oliver.
>
>  On first try, discover dectects it as layer2 device so I applyed this
>> patch :
>> http://netdisco-users.narkive.com/tTHHPnmv/checkpoint-firewa
>> ll-no-arp-cache-polling-since-upgrade-from-ipso-to-gaia-os#post3
>>
>>  This is better as it now detect interfaces but it stops on
>> SNMP::Info's mib and never use checkpint's mib.
>>  here is a delete/discover of the device.
>>
>>  does anybody as an idee to help me ?
>>  Thanks a lot
>>  Cedric
>>
>> [netdisco@server ~]$ /home/netdisco/bin/netdisco-do delete -d 10.0.1.2
>> -DI
>> [24983] 2017-12-13 15:25:39 info delete: started at Wed Dec 13
>> 16:25:39 2017
>> [24983] 2017-12-13 15:25:39 info delete: finished at Wed Dec 13
>> 16:25:39 2017
>> [24983] 2017-12-13 15:25:39 info delete: status done: Deleted device
>> 10.0.1.2.
>>
>> [netdisco@server ~]$ /home/netdisco/bin/netdisco-do discover -d
>> 10.0.1.2 -DI
>> [25868] 2017-12-13 15:25:42 info discover: started at Wed Dec 13
>> 16:25:42 2017
>> [25868] 2017-12-13 15:25:42 debug [10.0.1.2] try_connect with ver: 2,
>> class: SNMP::Info, comm:
>> SNMP::Info::_global uptime : DISMAN-EVENT-MIB::sysUpTimeInstance :
>> .1.3.6.1.2.1.1.3.0
>> SNMP::Info::_validate_autoload_method(CARP_TRACE) Unable to resolve
>> method.
>> SNMP::Info::_global(uptime) Timeout at
>> /home/netdisco/perl5/lib/perl5/App/Netdisco/Util/SNMP.pm line 176.
>> [25868] 2017-12-13 15:25:45 debug [10.0.1.2] try_connect with ver: 1,
>> class: SNMP::Info, comm:
>> SNMP::Info::_global uptime : DISMAN-EVENT-MIB::sysUpTimeInstance :
>> .1.3.6.1.2.1.1.3.0
>> SNMP::Info::_validate_autoload_method(CARP_TRACE) Unable to resolve
>> method.
>> SNMP::Info::_global(uptime) Timeout at
>> /home/netdisco/perl5/lib/perl5/App/Netdisco/Util/SNMP.pm line 176.
>> [25868] 2017-12-13 15:25:48 debug [10.0.1.2] try_connect with ver: 2,
>> class: SNMP::Info, comm:
>> SNMP::Info::_global uptime : DISMAN-EVENT-MIB::sysUpTimeInstance :
>> .1.3.6.1.2.1.1.3.0
>> SNMP::Info::_global layers : SNMPv2-MIB::sysServices.0 :
>> .1.3.6.1.2.1.1.7.0
>> SNMP::Info::_validate_autoload_method(CARP_TRACE) Unable to resolve
>> method.
>> SNMP::Info::_global(layers) NOSUCHINSTANCE at
>> /home/netdisco/perl5/lib/perl5/App/Netdisco/Util/SNMP.pm line 176.
>> SNMP::Info::_global description : SNMPv2-MIB::sysDescr.0 :
>> .1.3.6.1.2.1.1.1.0
>> SNMP::Info::_validate_autoload_method(CARP_TRACE) Unable to resolve
>> method.
>> Device doesn't implement sysServices but did return sysDescr. Might
>> give unexpected results.
>>  at /home/netdisco/perl5/lib/perl5/App/Netdisco/Util/SNMP.pm line 155.
>> SNMP::Info::_global id : SNMPv2-MIB::sysObjectID.0 :
>> .1.3.6.1.2.1.1.2.0
>> SNMP::Info 3.34
>> SNMP::Info::device_type() layers:00000000 id:2620 sysDescr:"Linux
>> ckp-iutsm1 2.6.18-92cpx86_64 #1 SMP Fri Apr 7 13:55:39 IDT 2017
>> x86_64"
>> SNMP::Info::_load_attr ip_index : IP-MIB::ipAdEntIfIndex :
>> .1.3.6.1.2.1.4.20.1.2
>> SNMP::Info::_load_attr interfaces : IF-MIB::ifIndex :
>> .1.3.6.1.2.1.2.2.1.1
>> SNMP::Info::_load_attr ip_netmask : IP-MIB::ipAdEntNetMask :
>> .1.3.6.1.2.1.4.20.1.3
>> [25868] 2017-12-13 15:25:48 debug [10.0.1.2] device - aliased as
>> XXXXXXXXXX
>> ...............
>> [25868] 2017-12-13 15:25:48 debug [10.0.1.2] device - aliased as
>> YYYYYYYYYY
>> [25868] 2017-12-13 15:25:48 debug resolving 23 aliases with max 50
>> outstanding requests
>> SNMP::Info::_validate_autoload_method(vtp_d_name) Unable to resolve
>> method.
>> SNMP::Info::_global contact : SNMPv2-MIB::sysContact.0 :
>> .1.3.6.1.2.1.1.4.0
>> SNMP::Info::_global name : SNMPv2-MIB::sysName.0 : .1.3.6.1.2.1.1.5.0
>> SNMP::Info::_global location : SNMPv2-MIB::sysLocation.0 :
>> .1.3.6.1.2.1.1.6.0
>> SNMP::Info::_global ports : IF-MIB::ifNumber.0 : .1.3.6.1.2.1.2.1.0
>> SNMP::Info::_validate_autoload_method(mac) Unable to resolve method.
>> SNMP::Info::_validate_autoload_method(ps1_type) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(ps2_type) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(ps1_status) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(ps2_status) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(fan) Unable to resolve method.
>> SNMP::Info::_validate_autoload_method(slots) Unable to resolve method.
>> SNMP::Info::_validate_autoload_method(vendor) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(os) Unable to resolve method.
>> SNMP::Info::_validate_autoload_method(os_ver) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(model) Unable to resolve method.
>> SNMP::Info::_validate_autoload_method(serial) Unable to resolve
>> method.
>> [25868] 2017-12-13 15:25:48 debug [10.0.1.2] device - removed 0
>> aliases
>> [25868] 2017-12-13 15:25:48 debug [10.0.1.2] device - added 23 new
>> aliases
>> SNMP::Info::_load_attr i_type : IF-MIB::ifType : .1.3.6.1.2.1.2.2.1.3
>> SNMP::Info::_validate_autoload_method(i_ignore) Unable to resolve
>> method.
>> SNMP::Info::_load_attr i_description : IF-MIB::ifDescr :
>> .1.3.6.1.2.1.2.2.1.2
>> SNMP::Info::_load_attr i_mtu : IF-MIB::ifMtu : .1.3.6.1.2.1.2.2.1.4
>> SNMP::Info::_load_attr orig_i_speed : IF-MIB::ifSpeed :
>> .1.3.6.1.2.1.2.2.1.5
>> SNMP::Info::_load_attr i_mac : IF-MIB::ifPhysAddress :
>> .1.3.6.1.2.1.2.2.1.6
>> SNMP::Info::_load_attr i_up : IF-MIB::ifOperStatus :
>> .1.3.6.1.2.1.2.2.1.8
>> SNMP::Info::_load_attr i_up_admin : IF-MIB::ifAdminStatus :
>> .1.3.6.1.2.1.2.2.1.7
>> SNMP::Info::_load_attr i_name : IF-MIB::ifName :
>> .1.3.6.1.2.1.31.1.1.1.1
>> SNMP::Info::_validate_autoload_method(i_duplex) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(i_duplex_admin) Unable to
>> resolve method.
>> SNMP::Info::_validate_autoload_method(i_stp_state) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(i_vlan) Unable to resolve
>> method.
>> SNMP::Info::_load_attr i_lastchange : IF-MIB::ifLastChange :
>> .1.3.6.1.2.1.2.2.1.9
>> SNMP::Info::_validate_autoload_method(agg_ports) Unable to resolve
>> method.
>> SNMP::Info::_global load_uptime : DISMAN-EVENT-MIB::sysUpTimeInstance
>> : .1.3.6.1.2.1.1.3.0
>> SNMP::Info::_global snmpEngineTime :
>> SNMP-FRAMEWORK-MIB::snmpEngineTime.0 : .1.3.6.1.6.3.10.2.1.3.0
>> [25868] 2017-12-13 15:25:48 debug [10.0.1.2] interfaces - removed 0
>> interfaces
>> [25868] 2017-12-13 15:25:48 debug [10.0.1.2] interfaces - added 14 new
>> interfaces
>> SNMP::Info::_validate_autoload_method(i_ssidlist) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(v_name) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(v_index) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(i_vlan) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(i_vlan_membership) Unable to
>> resolve method.
>> SNMP::Info::_validate_autoload_method(i_vlan_type) Unable to resolve
>> method.
>> [25868] 2017-12-13 15:25:49 debug [10.0.1.2] vlans - removed 0 device
>> VLANs
>> [25868] 2017-12-13 15:25:49 debug [10.0.1.2] vlans - added 0 new
>> device VLANs
>> [25868] 2017-12-13 15:25:49 debug [10.0.1.2] vlans - removed 0 port
>> VLANs
>> [25868] 2017-12-13 15:25:49 debug [10.0.1.2] vlans - added 0 new port
>> VLANs
>> SNMP::Info::_validate_autoload_method(peth_power_watts) Unable to
>> resolve method.
>> SNMP::Info::_validate_autoload_method(peth_power_status) Unable to
>> resolve method.
>> [25868] 2017-12-13 15:25:49 debug [10.0.1.2] power - 0 power modules
>> SNMP::Info::_validate_autoload_method(e_index) Unable to resolve
>> method.
>> [25868] 2017-12-13 15:25:49 debug [10.0.1.2] modules - removed 0
>> chassis modules
>> [25868] 2017-12-13 15:25:49 debug [10.0.1.2] modules - 0 chassis
>> components (added one pseudo for chassis)
>> [25868] 2017-12-13 15:25:49 debug [10.0.1.2] neigh - setting manual
>> topology links
>> SNMP::Info::_validate_autoload_method(hasLLDP) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(hasCDP) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(hasSONMP) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(hasFDP) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(hasEDP) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(hasAMAP) Unable to resolve
>> method.
>> SNMP::Info::_validate_autoload_method(hasCDP) Unable to resolve
>> method.
>> [25868] 2017-12-13 15:25:49 debug [10.0.1.2] neigh - CDP/LLDP not
>> enabled!
>> [25868] 2017-12-13 15:25:49 info discover: finished at Wed Dec 13
>> 16:25:49 2017
>> [25868] 2017-12-13 15:25:49 info discover: status done: Ended discover
>> for 10.0.1.2
>> [netdisco@berger2 ~]$
>>
>> Delaunay Cedric - [email protected]
>> ------------------------------------------------------------
>> ------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>
>> _______________________________________________
>> Netdisco mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/netdisco-users
>>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> Netdisco mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/netdisco-users
>

--- End Message ---
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list - Digest Mode
[email protected]
https://lists.sourceforge.net/lists/listinfo/netdisco-users

Reply via email to