Send netdisco-users mailing list submissions to
netdisco-users@lists.sourceforge.net
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.sourceforge.net/lists/listinfo/netdisco-users
or, via email, send a message with subject or body 'help' to
netdisco-users-requ...@lists.sourceforge.net
You can reach the person managing the list at
netdisco-users-ow...@lists.sourceforge.net
When replying, please edit your Subject line so it is more specific
than "Re: Contents of netdisco-users digest..."
Today's Topics:
1. Weird problem with arpnip / cli / PaloAlto (Steve Ballantyne)
--- Begin Message ---
Hey folks,
I am trying to get arpnip working with my PaloAlto. Seems to be stalling
out with trying to connect via SSH. So I kind of feel like maybe this is a
Perl dependency or something. But I will be darned if I can find the issue.
If I run a netdisco-do with massive debugging I can see that it's never
getting an SSH session to work, but the SNMP works just fine. Unfortunately
I have several VLAN's that are spearheaded by the Palo, so I desperately
need those MAC -> IP tables to work!!
Hoping someone can make sense of this?
First, a snippet from my ~/environment/deployment.xml file (verbatim minus
password scrubs) ...
device_auth:
- tag: 'kch-snmpv3-sha'
user: extreme
auth:
pass: 'muhpasword'
proto: SHA
priv:
pass: 'muhpasword'
proto: DES
- tag: 'kch-snmpv3-md5'
user: extreme-md5
auth:
pass: 'muhpasword'
proto: MD5
priv:
pass: 'muhpasword'
proto: DES
- tag: 'kch-snmpv1'
write: false
community: 'muhpasword'
write: false
community: 'muhpasword'
- tag: 'kch-snmpv1-public'
write: false
communtiy: public
- tag: 'paloalto'
community: 'muhpasword'
read: true
write: false
- tag: 'default_v2_readonly'
community: 'public'
read: true
write: false
- tag: 'sshpalo'
driver: cli
platform: PaloAlto
only: '10.0.44.1'
username: 'kchnetmon'
password: 'muhpasword'
ssh_master_opts:
- "-o"
- "StrictHostKeyChecking=no"
And now some debugging stuff from the cli ...
netdisco@kchnetmon:~$ netdisco-do arpnip -D -d 10.0.44.1
[22337] 2020-05-22 17:43:20 info App::Netdisco version 2.044004 loaded.
[22337] 2020-05-22 17:43:20 info arpnip: [10.0.44.1] started at Fri May 22
13:43:20 2020
[22337] 2020-05-22 17:43:20 debug arpnip: running with timeout 600s
[22337] 2020-05-22 17:43:20 debug => running workers for phase: check
[22337] 2020-05-22 17:43:20 debug -> run worker check/_base_/0
[22337] 2020-05-22 17:43:20 debug arpnip is able to run
[22337] 2020-05-22 17:43:20 debug => running workers for phase: main
[22337] 2020-05-22 17:43:20 debug -> run worker main/nodes/200
[22337] 2020-05-22 17:43:20 debug cli session cache warm: [10.0.44.1]
[22337] 2020-05-22 17:43:20 error [10.0.44.1] require only one matching
auth stanza
[22337] 2020-05-22 17:43:20 debug arpnip failed: could not SSH connect to
10.0.44.1
[22337] 2020-05-22 17:43:20 debug -> run worker main/nodes/100
[22337] 2020-05-22 17:43:20 debug snmp reader cache warm: [10.0.44.1]
[22337] 2020-05-22 17:43:20 debug [10.0.44.1:161] try_connect with ver: 2,
class: SNMP::Info::Layer3::PaloAlto, comm: <hidden>
[22337] 2020-05-22 17:43:21 debug resolving 0 ARP entries with max 50
outstanding requests
[22337] 2020-05-22 17:43:21 debug resolving 0 ARP entries with max 50
outstanding requests
[22337] 2020-05-22 17:43:21 debug -> run worker main/subnets/100
[22337] 2020-05-22 17:43:21 debug [10.0.44.1] arpnip - processed 0 Subnet
entries
[22337] 2020-05-22 17:43:21 debug => running workers for phase: store
[22337] 2020-05-22 17:43:21 debug -> run worker store/nodes/0
[22337] 2020-05-22 17:43:21 debug [10.0.44.1] arpnip - processed 0 ARP
Cache entries
[22337] 2020-05-22 17:43:21 debug [10.0.44.1] arpnip - processed 0 IPv6
Neighbor Cache entries
[22337] 2020-05-22 17:43:21 info arpnip: finished at Fri May 22 13:43:21
2020
[22337] 2020-05-22 17:43:21 info arpnip: status done: Gathered arp caches
from 10.0.44.1
netdisco@kchnetmon:~$ netdisco-do arpnip -D -II -d 10.0.44.1
[22341] 2020-05-22 17:43:38 info App::Netdisco version 2.044004 loaded.
[22341] 2020-05-22 17:43:38 info arpnip: [10.0.44.1] started at Fri May 22
13:43:38 2020
[22341] 2020-05-22 17:43:39 debug arpnip: running with timeout 600s
[22341] 2020-05-22 17:43:39 debug => running workers for phase: check
[22341] 2020-05-22 17:43:39 debug -> run worker check/_base_/0
[22341] 2020-05-22 17:43:39 debug arpnip is able to run
[22341] 2020-05-22 17:43:39 debug => running workers for phase: main
[22341] 2020-05-22 17:43:39 debug -> run worker main/nodes/200
[22341] 2020-05-22 17:43:39 debug cli session cache warm: [10.0.44.1]
[22341] 2020-05-22 17:43:39 error [10.0.44.1] require only one matching
auth stanza
[22341] 2020-05-22 17:43:39 debug arpnip failed: could not SSH connect to
10.0.44.1
[22341] 2020-05-22 17:43:39 debug -> run worker main/nodes/100
[22341] 2020-05-22 17:43:39 debug snmp reader cache warm: [10.0.44.1]
[22341] 2020-05-22 17:43:39 debug [10.0.44.1:161] try_connect with ver: 2,
class: SNMP::Info::Layer3::PaloAlto, comm: <hidden>
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/3com
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/adtran
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/aerohive
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/alcatel
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/allied
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/apc
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/arista
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/aruba
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/asante
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/avaya
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/bluecoat
SNMP::Info::init() - Adding new
mibdir:/home/netdisco/netdisco-mibs/bluesocket
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/brother
SNMP::Info::init() - Adding new
mibdir:/home/netdisco/netdisco-mibs/cabletron
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/ceragon
SNMP::Info::init() - Adding new
mibdir:/home/netdisco/netdisco-mibs/checkpoint
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/ciena
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/cisco
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/ciscosb
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/citrix
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/colubris
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/cyclades
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/d-link
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/dell
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/eaton
SNMP::Info::init() - Adding new
mibdir:/home/netdisco/netdisco-mibs/enterasys
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/etherwan
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/exinda
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/EXTRAS
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/extreme
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/extricom
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/f5
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/force10
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/fortinet
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/foundry
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/gigamon
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/h3c
SNMP::Info::init() - Adding new
mibdir:/home/netdisco/netdisco-mibs/hirschmann
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/hp
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/hpe
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/huawei
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/ibm
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/juniper
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/lancom
SNMP::Info::init() - Adding new
mibdir:/home/netdisco/netdisco-mibs/lantronix
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/lenovo
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/liebert
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/mediant
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/meraki
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/meru
SNMP::Info::init() - Adding new
mibdir:/home/netdisco/netdisco-mibs/microsens
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/mikrotik
SNMP::Info::init() - Adding new
mibdir:/home/netdisco/netdisco-mibs/moser-baer
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/motorola
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/nateks
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/net-snmp
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/netapp
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/netgear
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/netonix
SNMP::Info::init() - Adding new
mibdir:/home/netdisco/netdisco-mibs/netscreen
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/nexans
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/nortel
SNMP::Info::init() - Adding new
mibdir:/home/netdisco/netdisco-mibs/northerndesign
SNMP::Info::init() - Adding new
mibdir:/home/netdisco/netdisco-mibs/oneaccess
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/opengear
SNMP::Info::init() - Adding new
mibdir:/home/netdisco/netdisco-mibs/packetfront
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/paloalto
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/pica8
SNMP::Info::init() - Adding new
mibdir:/home/netdisco/netdisco-mibs/pulsesecure-gateway
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/rad
SNMP::Info::init() - Adding new
mibdir:/home/netdisco/netdisco-mibs/redlionram
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/rfc
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/rittal
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/riverbed
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/ruckus
SNMP::Info::init() - Adding new
mibdir:/home/netdisco/netdisco-mibs/schleifenbauer
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/sentry
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/siemens
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/sixnet
SNMP::Info::init() - Adding new
mibdir:/home/netdisco/netdisco-mibs/sonicwall
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/teleste
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/tplink
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/trapeze
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/vmware
SNMP::Info::init() - Adding new mibdir:/home/netdisco/netdisco-mibs/xirrus
SNMP::Info::Layer3::PaloAlto has resolution order:
SNMP::Info::Layer3::PaloAlto
SNMP::Info::Layer3
SNMP::Info::PowerEthernet
SNMP::Info
Exporter
SNMP::Info::IPv6
SNMP::Info::Entity
SNMP::Info::EtherLike
SNMP::Info::Bridge
SNMP::Info::AdslLine
SNMP::Info::LLDP
SNMP::Info::DocsisHE
SNMP::Info::_global uptime : DISMAN-EVENT-MIB::sysUpTimeInstance :
.1.3.6.1.2.1.1.3.0
SNMP::Info::_global description : SNMPv2-MIB::sysDescr.0 :
.1.3.6.1.2.1.1.1.0
SNMP::Info::_global id : SNMPv2-MIB::sysObjectID.0 : .1.3.6.1.2.1.1.2.0
SNMP::Info 3.70
SNMP::Info::device_type() layers:01001100 id:25461 sysDescr:"Palo Alto
Networks PA-3200 series firewall"
SNMP::Info::_load_attr orig_at_paddr : IP-MIB::ipNetToMediaPhysAddress :
.1.3.6.1.2.1.4.22.1.2
SNMP::Info::_load_attr old_at_paddr : RFC1213-MIB::atPhysAddress :
.1.3.6.1.2.1.3.1.1.2
SNMP::Info::_load_attr orig_at_netaddr : IP-MIB::ipNetToMediaNetAddress :
.1.3.6.1.2.1.4.22.1.3
SNMP::Info::_load_attr old_at_netaddr : RFC1213-MIB::atNetAddress :
.1.3.6.1.2.1.3.1.1.3
[22341] 2020-05-22 17:43:39 debug resolving 0 ARP entries with max 50
outstanding requests
SNMP::Info::_load_attr ip_n2p_phys_addr :
IP-MIB::ipNetToPhysicalPhysAddress : .1.3.6.1.2.1.4.35.1.4
SNMP::Info::_load_attr c_inet_phys_addr :
CISCO-IETF-IP-MIB::cInetNetToMediaPhysAddress :
.1.3.6.1.4.1.9.10.86.1.1.3.1.3
SNMP::Info::_load_attr i6_n2p_phys_addr :
IPV6-MIB::ipv6NetToMediaPhysAddress : .1.3.6.1.2.1.55.1.12.1.2
SNMP::Info::IPv6::ipv6_n2p_mac: data comes from none of the MIBs.
SNMP::Info::_load_attr ip_n2p_phys_addr :
IP-MIB::ipNetToPhysicalPhysAddress : .1.3.6.1.2.1.4.35.1.4
SNMP::Info::_load_attr c_inet_phys_addr :
CISCO-IETF-IP-MIB::cInetNetToMediaPhysAddress :
.1.3.6.1.4.1.9.10.86.1.1.3.1.3
SNMP::Info::_load_attr i6_n2p_phys_addr :
IPV6-MIB::ipv6NetToMediaPhysAddress : .1.3.6.1.2.1.55.1.12.1.2
SNMP::Info::IPv6::ipv6_n2p_addr: data comes from none of the MIBs.
[22341] 2020-05-22 17:43:39 debug resolving 0 ARP entries with max 50
outstanding requests
[22341] 2020-05-22 17:43:39 debug -> run worker main/subnets/100
SNMP::Info::_load_attr old_ip_netmask : IP-MIB::ipAdEntNetMask :
.1.3.6.1.2.1.4.20.1.3
SNMP::Info::_load_attr new_ip_prefix : IP-MIB::ipAddressPrefix :
.1.3.6.1.2.1.4.34.1.5
SNMP::Info::_load_attr new_ip_type : IP-MIB::ipAddressType :
.1.3.6.1.2.1.4.34.1.4
[22341] 2020-05-22 17:43:39 debug [10.0.44.1] arpnip - processed 0 Subnet
entries
[22341] 2020-05-22 17:43:39 debug => running workers for phase: store
[22341] 2020-05-22 17:43:39 debug -> run worker store/nodes/0
[22341] 2020-05-22 17:43:39 debug [10.0.44.1] arpnip - processed 0 ARP
Cache entries
[22341] 2020-05-22 17:43:39 debug [10.0.44.1] arpnip - processed 0 IPv6
Neighbor Cache entries
[22341] 2020-05-22 17:43:39 info arpnip: finished at Fri May 22 13:43:39
2020
[22341] 2020-05-22 17:43:39 info arpnip: status done: Gathered arp caches
from 10.0.44.1
netdisco@kchnetmon:~$
Thanks in advance for any advice!
Steve Ballantyne
--- End Message ---
_______________________________________________
Netdisco mailing list - Digest Mode
netdisco-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/netdisco-users
