Send netdisco-users mailing list submissions to
netdisco-users@lists.sourceforge.net
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.sourceforge.net/lists/listinfo/netdisco-users
or, via email, send a message with subject or body 'help' to
netdisco-users-requ...@lists.sourceforge.net
You can reach the person managing the list at
netdisco-users-ow...@lists.sourceforge.net
When replying, please edit your Subject line so it is more specific
than "Re: Contents of netdisco-users digest..."
Today's Topics:
1. Re: Multiple Neighbors to a Single Interface? (Oliver Gorwits)
2. Re: appropriate SNMPv3 view (Oliver Gorwits)
3. Re: appropriate SNMPv3 view (Eric W. Bates)
4. Re: appropriate SNMPv3 view (Oliver Gorwits)
5. Re: Switches with empty os_ver fields (Oliver Gorwits)
--- Begin Message ---
Hi Jason
On 2018-03-12 20:51, Jason Garrett wrote:
It
appears NetDisco only allows you have a device and a corresponding
interface 1 time as the Left Device and 1 time as the Right device. Is
that true?
Yes this is true.
The workaround we have is the creation of a "pseudo device" in Netdisco
which acts as your VPN cloud. This works well if your network is fairly
static, as after setting it up there's not a lot to do.
Go into Admin menu and select Pseudo Devices. Create one with enough
ports to cover all your sites. Connect site devices to the pseudo device
ports.
I hope this helps,
regards,
oliver.
Thanks!
Jason Garrett
Diocese of Lincoln Schools
Education Technology: (402) 473-0600
Email: jason-garr...@cdolinc.net
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list
netdisco-users@lists.sourceforge.net
https://sourceforge.net/p/netdisco/mailman/netdisco-users/
--- End Message ---
--- Begin Message ---
Hi Eric
On 2018-03-09 00:39, Eric W. Bates wrote:
We're trying to deploy a more secure SNMP and to that end we're
implementing SNMP v3.
Part of the standard definition for SNMP v3 is the use of a view.
My (somewhat feeble) understanding of SNMP views is that they act as an
internal ACL to the device but are not something the managing agent
(Netdisco) needs to know about. The view (ACL) says what MIBs are
available for a given username/credential set.
(in SNMPv3 there are also contexts, which are a different thing)
So you need to assign the view (VIEW_WHOI) to the group used by the
username used by Netdisco.
Many examples exist in Google, such as:
snmp-server ifindex persist
snmp-server view VIEW_WHOI iso included
snmp-server group v3group v3 priv read VIEW_WHOI
snmp-server user v3user v3group v3 auth sha pass123 priv des56 pass456
Hope this helps?
regards,
oliver.
However, I can't find a list of acceptable "views" nor their contents.
Specifically, the problem today is netdisco's failure to pull the lldp
oid's:
SNMP::Info::_global lldp_sys_cap : LLDP-MIB::lldpLocSysCapEnabled.0 :
.1.0.8802.1.1.2.1.3.6.0
SNMP::Info::_validate_autoload_method(CARP_TRACE) Unable to resolve
method.
SNMP::Info::_global(lldp_sys_cap) NOSUCHOBJECT at
/home/netdisco/perl5/lib/perl5/App/Netdisco/Core/Discov
er.pm line 676.
SNMP::Info::_load_attr lldp_rem_id : LLDP-MIB::lldpRemChassisId :
.1.0.8802.1.1.2.1.4.1.1.5
SNMP::Info::_global cdp_run : CISCO-CDP-MIB::cdpGlobalRun.0 :
.1.3.6.1.4.1.9.9.23.1.3.1.0
SNMP::Info::_validate_autoload_method(CARP_TRACE) Unable to resolve
method.
SNMP::Info::_global(cdp_run) NOSUCHOBJECT at
/home/netdisco/perl5/lib/perl5/App/Netdisco/Core/Discover.pm
line 676.
The view on the cisco I have is:
snmp-server view VIEW_WHOI internet included
snmp-server view VIEW_WHOI mib-2 included
snmp-server view VIEW_WHOI system included
snmp-server view VIEW_WHOI cisco included
But I'm really just guessing.
Is there a recommended view for netdisco?
Is there a list of view objects somewhere on line?
Is there a list of what MIB's these objects include?
Thanks.
--- End Message ---
--- Begin Message ---
On 03/17/2018 08:55 AM, Oliver Gorwits wrote:
Hi Eric
On 2018-03-09 00:39, Eric W. Bates wrote:
We're trying to deploy a more secure SNMP and to that end we're
implementing SNMP v3.
Part of the standard definition for SNMP v3 is the use of a view.
My (somewhat feeble) understanding of SNMP views is that they act as an
internal ACL to the device but are not something the managing agent
(Netdisco) needs to know about. The view (ACL) says what MIBs are
available for a given username/credential set.
(in SNMPv3 there are also contexts, which are a different thing)
So you need to assign the view (VIEW_WHOI) to the group used by the
username used by Netdisco.
Many examples exist in Google, such as:
snmp-server ifindex persist
snmp-server view VIEW_WHOI iso included
snmp-server group v3group v3 priv read VIEW_WHOI
snmp-server user v3user v3group v3 auth sha pass123 priv des56 pass456
Yah. We've gotten that far. The basic problem is that the LLDP oids
which netdisco wants to read to find neighbors is not encompassed by the
pre-defined cisco views named: "internet" "mib-2" "system" or "cisco"
So I need help either composing my own view (every attempt on the ciscos
has been rejected -- so this is really a cisco question); or identifying
a pre-defined view which already includes the LLDP oids.
I had hoped that another netdisco user had already worked this out.
Hope this helps?
regards,
oliver.
However, I can't find a list of acceptable "views" nor their contents.
Specifically, the problem today is netdisco's failure to pull the lldp
oid's:
SNMP::Info::_global lldp_sys_cap : LLDP-MIB::lldpLocSysCapEnabled.0 :
.1.0.8802.1.1.2.1.3.6.0
SNMP::Info::_validate_autoload_method(CARP_TRACE) Unable to resolve
method.
SNMP::Info::_global(lldp_sys_cap) NOSUCHOBJECT at
/home/netdisco/perl5/lib/perl5/App/Netdisco/Core/Discov
er.pm line 676.
SNMP::Info::_load_attr lldp_rem_id : LLDP-MIB::lldpRemChassisId :
.1.0.8802.1.1.2.1.4.1.1.5
SNMP::Info::_global cdp_run : CISCO-CDP-MIB::cdpGlobalRun.0 :
.1.3.6.1.4.1.9.9.23.1.3.1.0
SNMP::Info::_validate_autoload_method(CARP_TRACE) Unable to resolve
method.
SNMP::Info::_global(cdp_run) NOSUCHOBJECT at
/home/netdisco/perl5/lib/perl5/App/Netdisco/Core/Discover.pm
line 676.
The view on the cisco I have is:
snmp-server view VIEW_WHOI internet included
snmp-server view VIEW_WHOI mib-2 included
snmp-server view VIEW_WHOI system included
snmp-server view VIEW_WHOI cisco included
But I'm really just guessing.
Is there a recommended view for netdisco?
Is there a list of view objects somewhere on line?
Is there a list of what MIB's these objects include?
Thanks.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list
netdisco-users@lists.sourceforge.net
https://sourceforge.net/p/netdisco/mailman/netdisco-users/
--- End Message ---
--- Begin Message ---
Hi Eric
Oh I see. I think you can use a numeric OID in the view command, such
as:
snmp-server view VIEW_WHOI 1.0.8802.1.1.2 included
or even
snmp-server view VIEW_WHOI 1 included
(not sure if there needs to be a leading dot on the ID).
regards,
oliver.
On 2018-03-17 14:18, Eric W. Bates wrote:
On 03/17/2018 08:55 AM, Oliver Gorwits wrote:
Hi Eric
On 2018-03-09 00:39, Eric W. Bates wrote:
We're trying to deploy a more secure SNMP and to that end we're
implementing SNMP v3.
Part of the standard definition for SNMP v3 is the use of a view.
My (somewhat feeble) understanding of SNMP views is that they act as
an internal ACL to the device but are not something the managing agent
(Netdisco) needs to know about. The view (ACL) says what MIBs are
available for a given username/credential set.
(in SNMPv3 there are also contexts, which are a different thing)
So you need to assign the view (VIEW_WHOI) to the group used by the
username used by Netdisco.
Many examples exist in Google, such as:
snmp-server ifindex persist
snmp-server view VIEW_WHOI iso included
snmp-server group v3group v3 priv read VIEW_WHOI
snmp-server user v3user v3group v3 auth sha pass123 priv des56 pass456
Yah. We've gotten that far. The basic problem is that the LLDP oids
which netdisco wants to read to find neighbors is not encompassed by
the pre-defined cisco views named: "internet" "mib-2" "system" or
"cisco"
So I need help either composing my own view (every attempt on the
ciscos has been rejected -- so this is really a cisco question); or
identifying a pre-defined view which already includes the LLDP oids.
I had hoped that another netdisco user had already worked this out.
Hope this helps?
regards,
oliver.
However, I can't find a list of acceptable "views" nor their
contents.
Specifically, the problem today is netdisco's failure to pull the
lldp
oid's:
SNMP::Info::_global lldp_sys_cap : LLDP-MIB::lldpLocSysCapEnabled.0 :
.1.0.8802.1.1.2.1.3.6.0
SNMP::Info::_validate_autoload_method(CARP_TRACE) Unable to resolve
method.
SNMP::Info::_global(lldp_sys_cap) NOSUCHOBJECT at
/home/netdisco/perl5/lib/perl5/App/Netdisco/Core/Discov
er.pm line 676.
SNMP::Info::_load_attr lldp_rem_id : LLDP-MIB::lldpRemChassisId :
.1.0.8802.1.1.2.1.4.1.1.5
SNMP::Info::_global cdp_run : CISCO-CDP-MIB::cdpGlobalRun.0 :
.1.3.6.1.4.1.9.9.23.1.3.1.0
SNMP::Info::_validate_autoload_method(CARP_TRACE) Unable to resolve
method.
SNMP::Info::_global(cdp_run) NOSUCHOBJECT at
/home/netdisco/perl5/lib/perl5/App/Netdisco/Core/Discover.pm
line 676.
The view on the cisco I have is:
snmp-server view VIEW_WHOI internet included
snmp-server view VIEW_WHOI mib-2 included
snmp-server view VIEW_WHOI system included
snmp-server view VIEW_WHOI cisco included
But I'm really just guessing.
Is there a recommended view for netdisco?
Is there a list of view objects somewhere on line?
Is there a list of what MIB's these objects include?
Thanks.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list
netdisco-users@lists.sourceforge.net
https://sourceforge.net/p/netdisco/mailman/netdisco-users/
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list
netdisco-users@lists.sourceforge.net
https://sourceforge.net/p/netdisco/mailman/netdisco-users/
--- End Message ---
--- Begin Message ---
Hi Andy
The output of this command will allow me to simulate the device and work
out the os/os_ver fields to use:
snmpwalk -v 2c -c {community} -ObentU {device} .1
thanks,
oliver.
On 2017-08-14 16:43, Andy Ruhl wrote:
I updated Netdisco, did netdisco-deploy, and restarted.
No change unfortunately.
The class for the G8264 is still this:
SNMP::Info::Layer3::IBMGbTor
I can get whatever info you need.
Thanks.
Andy
On Mon, Aug 14, 2017 at 8:17 AM, Oliver Gorwits <oli...@cpan.org>
wrote:
Hi Andy
I believe we have just updated Netdisco's MIB bundle for the G8264.
Please run netdisco-deploy and try a discover on the devices, and let
us
know how it goes.
regards,
oliver.
On 2017-07-12 16:24, Andy Ruhl wrote:
Ok. All are this class:
SNMP::Info::Layer3::IBMGbTor
I'm not 100% sure if that's correct, the non working 2 have MIBs that
have specific names:
GbTOR-G8264.mib
GbTOR-G8052.mib
These come with the firmware download for the switches.
Here's some data:
(G8124, good)
$ netdisco-do show -d x.x.x.19 -DI -e Layer3::IBMGbTor::os_ver
[3259] 2017-07-12 14:47:15 info show: started at Wed Jul 12 14:47:15
2017
[3259] 2017-07-12 14:47:15 debug [x.x.x.19] try_connect with ver: 2,
class: SNMP::Info::Layer3::IBMGbTor, comm: <hidden>
SNMP::Info::_global uptime : DISMAN-EVENT-MIB::sysUpTimeInstance :
.1.3.6.1.2.1.1.3.0
SNMP::Info::_global layers : SNMPv2-MIB::sysServices.0 :
.1.3.6.1.2.1.1.7.0
SNMP::Info::_global agSoftwareVersion :
IBM-GbTOR-10G-L2L3-MIB::agSoftwareVersion.0 :
.1.3.6.1.4.1.26543.2.7.4.1.1.1.10.0
"7.11.10" <------------- BINGO
[3259] 2017-07-12 14:47:16 info show: finished at Wed Jul 12
14:47:16
2017
[3259] 2017-07-12 14:47:16 info show: status done: Showed os_ver
response from x.x.x.19.
(G8264, bad)
$ netdisco-do show -d x.x.x.18 -DI -e Layer3::IBMGbTor::os_ver
[3441] 2017-07-12 14:47:26 info show: started at Wed Jul 12 14:47:26
2017
[3441] 2017-07-12 14:47:26 debug [x.x.x.18] try_connect with ver: 2,
class: SNMP::Info::Layer3::IBMGbTor, comm: <hidden>
SNMP::Info::_global uptime : DISMAN-EVENT-MIB::sysUpTimeInstance :
.1.3.6.1.2.1.1.3.0
SNMP::Info::_global layers : SNMPv2-MIB::sysServices.0 :
.1.3.6.1.2.1.1.7.0
SNMP::Info::_global agSoftwareVersion :
IBM-GbTOR-10G-L2L3-MIB::agSoftwareVersion.0 :
.1.3.6.1.4.1.26543.2.7.4.1.1.1.10.0
SNMP::Info::_validate_autoload_method(CARP_TRACE) Unable to resolve
method.
SNMP::Info::_global(agSoftwareVersion) NOSUCHOBJECT at
/home/netdisco/bin/netdisco-do line 142.
[3441] 2017-07-12 14:47:27 info show: finished at Wed Jul 12
14:47:27
2017
[3441] 2017-07-12 14:47:27 info show: status error: error running
job: When calling p() without prototypes, please pass arguments as
references at /home/netdisco/bin/netdisco-do line 142.
(G8052, bad)
$ netdisco-do show -d x.x.x.17 -DI -e Layer3::IBMGbTor::os_ver
[4825] 2017-07-12 15:18:45 info show: started at Wed Jul 12 15:18:45
2017
[4825] 2017-07-12 15:18:45 debug [x.x.x.17] try_connect with ver: 2,
class: SNMP::Info::Layer3::IBMGbTor, comm: <hidden>
SNMP::Info::_global uptime : DISMAN-EVENT-MIB::sysUpTimeInstance :
.1.3.6.1.2.1.1.3.0
SNMP::Info::_global layers : SNMPv2-MIB::sysServices.0 :
.1.3.6.1.2.1.1.7.0
SNMP::Info::_global agSoftwareVersion :
IBM-GbTOR-10G-L2L3-MIB::agSoftwareVersion.0 :
.1.3.6.1.4.1.26543.2.7.4.1.1.1.10.0
SNMP::Info::_validate_autoload_method(CARP_TRACE) Unable to resolve
method.
SNMP::Info::_global(agSoftwareVersion) NOSUCHOBJECT at
/home/netdisco/bin/netdisco-do line 142.
[4825] 2017-07-12 15:18:45 info show: finished at Wed Jul 12
15:18:45
2017
[4825] 2017-07-12 15:18:45 info show: status error: error running
job: When calling p() without prototypes, please pass arguments as
references at /home/netdisco/bin/netdisco-do line 142.
I can keep working on this as long as I can figure it out.
Andy
On Wed, Jul 12, 2017 at 7:34 AM, Oliver Gorwits <oli...@cpan.org>
wrote:
Hi Andy,
On 2017-07-12 15:09, Andy Ruhl wrote:
Thanks for your help yesterday Oliver.
:-)
I have 2 switches that have always had blank os_ver fields.
Based on yesterday's troubleshooting, I tried the same stuff but
I'm
not getting anywhere.
I would start with the one which is working, and find the Device
Class
which
SNMP::Info is using: either from the device table in the database or
the
Device Class field shown in Device -> Details tab in the web.
Find the source file for that online somewhere here:
https://metacpan.org/release/SNMP-Info
Look for an os_ver() subroutine, and see what it's doing. Perhaps it
pulls
agSoftwareVersion which works for that model.
The other thing to do is check which Device Class the *not working*
devices
are being assigned. Hopefully the same as the working device.
If not, then it may be a case of updating the rules in SNMP/Info.pm
which
assign the Device Classes. You can force a device class for testing
(we
strip SNMP::Info from the front of the classname):
~netdisco/bin/netdisco-do show -d 1.2.3.4 -e Layer3::HP::os_ver
If the device class is correct for the not-working devices, then
it'll
probably be related to which SNMP leaf to get. As in the JUNOS
software
version example you had before, sometimes we need to fetch a couple
of
leaves and try them in turn.
regards,
oliver.
Here is some psql info:
model | vendor | os_ver
--------------+---------+---------------
G8052 | ibm |
G8264, Stack | ibm |
G8124-E | ibm | 7.11.10
The G8124-E is the only switch that has ever had a populated os_ver
field, it never worked for the others.
So I did discover with -DISQ and I don't see a version string
anywhere
in the output that looks like "7.11.10".
I did notice this for 8052 and 8264 devices:
SNMP::Info::_global(agSoftwareVersion) NOSUCHOBJECT at
/home/netdisco/perl5/lib/perl5/App/Netdisco/Core/Discover.pm line
186.
Any hints on how to continue for this one?
Thanks.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list
netdisco-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/netdisco-users
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list
netdisco-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/netdisco-users
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list
netdisco-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/netdisco-users
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list
netdisco-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/netdisco-users
--- End Message ---
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Netdisco mailing list - Digest Mode
netdisco-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/netdisco-users