--- Begin Message ---
Hi,
I tried adding action: 'arpnip::nodes' (also tested action: arpnip) to the
ArubaCX CLI device_auth, but it actually breaks SSH ARP for ArubaCX - the
worker skips the CLI path entirely.
Debug shows the skip as soon as the action restriction is present:
[info] arpnip started…
[debug] … Arpnip::Nodes p200
[debug] (info) skip: driver or action not applicable
[debug] … SNMP path used instead
If I remove the action, SSH ARP works again.
Any opinions?
Regards,
Muris
From: Oliver Gorwits <[email protected]>
Date: Friday, 31 October 2025 at 22:00
To: "Mackie, Paul" <[email protected]>
Cc: Muris <[email protected]>, Jethro Binks <[email protected]>, Nick
Nauwelaerts <[email protected]>, "Cuttler, Brian R via netdisco-users
(HEALTH)" <[email protected]>
Subject: Re: [Netdisco] Trying to fetch arp entries from ArubaOSCX, again
Awesome! Glad to hear it's working and thanks for using Netdisco :)
Oliver.
On Fri, 31 Oct 2025 at 10:33, Mackie, Paul <[email protected]> wrote:
Many thanks Olly, yes that seems to have cracked it, both job types are working
and logs are now clean 😊
For reference if anyone finds this useful:
device_auth:
- tag: ssharubacx
driver: cli
platform: ArubaCX
only:
- 'os:arubaos-cx'
action:
- 'arpnip::nodes'
username: redacted
password: ‘redacted’
ssh_master_opts:
- "-o"
- "StrictHostKeyChecking=no"
Best regards,
Paul Mackie
GEA INTERNAL
From: Oliver Gorwits <[email protected]>
Sent: 29 October 2025 20:15
To: Mackie, Paul <[email protected]>
Cc: Muris <[email protected]>; Jethro Binks <[email protected]>; Nick
Nauwelaerts <[email protected]>; Cuttler, Brian R via netdisco-users
(HEALTH) <[email protected]>
Subject: Re: [Netdisco] Trying to fetch arp entries from ArubaOSCX, again
Hi again
I realised there might be a workaround. From the device_auth docs:
"The action key allows you to restrict credentials to certain actions or even
stages of actions on the remote device, such as ARP table gathering
(arpnip::nodes)."
So you should be able to add "action: arpnip" (or "action: 'arpnip::nodes'") to
the device_auth CLI stanza and restrict it to only arpnip. I guess! Maybe it
works.
There are actually three tickets which address this (all in the guts of
Netdisco, not specific to Aruba): 1391 1322 1294
regards
oliver.
On Wed, 29 Oct 2025 at 19:09, Oliver Gorwits <[email protected]> wrote:
That’s correct, at present you can have either but not both. However we have a
ticket for this feature so it should come along soon. Ish.
Oliver.
On Wed, 29 Oct 2025 at 18:33, Mackie, Paul <[email protected]> wrote:
Hi Jethro / all
I implemented the SSH collector for AOS-CX, and arpnip is now working for these
devices. Thanks for your work on this.
However, I see that this also causes macsuck to fail for the same devices,
because it is being attempted by SSH also.
Am I missing something in my configuration, or do I need to choose between
having arpnip or macsuck working for Aruba AOS-CX devices? It seems I can have
either but not both at present?
Best regards,
Paul Mackie
GEA INTERNAL
From: Muris <[email protected]>
Sent: 24 September 2025 10:08
To: Jethro Binks <[email protected]>; Nick Nauwelaerts
<[email protected]>; Oliver Gorwits <[email protected]>
Cc: Cuttler, Brian R via netdisco-users (HEALTH)
<[email protected]>
Subject: Re: [Netdisco] Trying to fetch arp entries from ArubaOSCX, again
Hi JR Binks, thanks for contributing this addon for ArubaOS-CX, there is 1
problem with it is that it doesnt work in environments with multiple vrfs
Can i make a suggestion to change this line -
$expect->send("show arp\n");
to
$expect->send("show arp all-vrfs\n");
This way it works accross all VRFs present on the switch.
I did test it modifying to this and it does work correctly in mutiple VRF's and
grabbing the arps.
Regards,
Muris
From: Jethro Binks <[email protected]>
Date: Monday, 25 August 2025 at 04:15
To: Nick Nauwelaerts <[email protected]>, Oliver Gorwits
<[email protected]>
Cc: "Cuttler, Brian R (HEALTH) via netdisco-users"
<[email protected]>
Subject: Re: [Netdisco] Trying to fetch arp entries from ArubaOSCX, again
Mmm yes indeed, the "arpnip::nodes" comes from the Configuration documentation
("The action key allows you to restrict credentials to certain actions or even
stages of actions on the remote device, such as ARP table gathering
(arpnip::nodes)", but I've tried with action: arpnip and no action at all and
the effect is the same.
In fact if I introduce a deliberate syntax error into ArubaCX.pm, or
alternatively set a nonsense platform: ArubaCXXX, it makes no difference
either, so it's like this is never properly trying. It does use SNMP to gather
Arpnip::Subnets (correctly).
I have to run an older version (2.076005) because of other issues just now, so
it's entirely possibly I'm hitting an issue already resolved, although I've
been through the notes and a code diff and can't spot anything too relevant.
Aha!
I moved my cli driver section from the bottom of the device_auth credentials to
the top, and it now hits the syntax error I introduced.
So now I have:
[54908] 2025-08-24 15:03:43 debug 130.159.1.52 54908 arpnip()
[54908] 2025-08-24 15:03:47 debug ⬅ (done) Gathered arp caches from 130.159.1.52
[54908] 2025-08-24 15:03:47 debug ⮕ worker Arpnip::Nodes p100
[54908] 2025-08-24 15:03:47 debug ⬅ (info) skip: namespace passed at higher
priority
[54908] 2025-08-24 15:03:47 debug ⮕ worker Arpnip::Subnets p100
Although it didn't actually get any:
[54908] 2025-08-24 15:03:48 debug resolving 0 ARP entries with max 50
outstanding requests
But that allowed me to finally check and fix the script which literally took 2
mins to fix the regexp, and now it all works.
I have added to the discussion:
https://github.com/netdisco/netdisco/discussions/869
And also made some references between the various other Aruba-related issues
that touch on naming problems in various respects.
Jethro.
. . . . . . . . . . . . . . . . . . . . . . . . .
Jethro R Binks, Network Manager,
Information Services Directorate, University Of Strathclyde, Glasgow, UK
The University of Strathclyde is a charitable body, registered in Scotland,
number SC015263.
From: Nick Nauwelaerts <[email protected]>
Sent: 24 August 2025 1:34 PM
To: Jethro Binks <[email protected]>; Oliver Gorwits <[email protected]>
Cc: Cuttler, Brian R (HEALTH) via netdisco-users
<[email protected]>
Subject: Re: [Netdisco] Trying to fetch arp entries from ArubaOSCX, again
all the examples i see just use arpnip instead of arpnip::nodes
perhaps change your config action to plain "arpnip" & make sure there's an
arpnip function in your ssh module
From: Jethro Binks <[email protected]>
Sent: Sunday, August 24, 2025 12:39
To: Oliver Gorwits <[email protected]>
Cc: Cuttler, Brian R (HEALTH) via netdisco-users
<[email protected]>
Subject: Re: [Netdisco] Trying to fetch arp entries from ArubaOSCX, again
Thanks Oliver.
Any thoughts on why I can't get the SSHCollector script to trigger though
("(info) skip: driver or action not applicable"), ND2_LOG_PLUGINS=1 providing
no further clues.
While I potentially have a workaround now using that -p option, that's still
going to need work and is still < SSHCollector ( < SNMP::Info
ipNetToPhysicalTable). It must be something simple but I can't see it.
Jethro.
. . . . . . . . . . . . . . . . . . . . . . . . .
Jethro R Binks, Network Manager,
Information Services Directorate, University Of Strathclyde, Glasgow, UK
The University of Strathclyde is a charitable body, registered in Scotland,
number SC015263.
From: Oliver Gorwits <[email protected]>
Sent: 22 August 2025 10:02 PM
To: Jethro Binks <[email protected]>
Cc: Cuttler, Brian R (HEALTH) via netdisco-users
<[email protected]>
Subject: Re: [Netdisco] Trying to fetch arp entries from ArubaOSCX, again
Hi Jethro,
Ah you're right the API wiki page has Perl syntax (not JSON) because the
mojolicious library will convert it. The netdisco-do man page is misleading.
It actually means to refer to the API spec itself which is here:
https://netdisco2-demo.herokuapp.com/swagger-ui/?url=/swagger.json#/Objects/put_api_v1_object_device__ip__arps
I'll see if we can make netdisco-do doc clearer.
By the way, glad to see -p option being used. In the next major version this is
changed to be "-e '@/path/to/file'" or you can pipe it in with "-e '@-'". Just
to make it a bit cleaner across different commands.
regards
oliver.
On Fri, 22 Aug 2025 at 13:32, Jethro Binks <[email protected]> wrote:
Hey,
I've tried it with and without the action:.
Adding env ND2_LOG_PLUGINS=1 provided no additional output here:
[35351] 2025-08-22 10:42:36 debug ⬅ (done) arpnip is able to run
[35351] 2025-08-22 10:42:36 debug //// EARLY \\\\ phase
[35351] 2025-08-22 10:42:36 debug ⮕ worker Arpnip::Nodes p0 "prepare common
data"
[35351] 2025-08-22 10:42:36 debug //// MAIN \\\\ phase
[35351] 2025-08-22 10:42:36 debug ⮕ worker Arpnip::Nodes p1000000
[35351] 2025-08-22 10:42:36 debug ⬅ (info) skip: arp table data supplied by
other source
[35351] 2025-08-22 10:42:36 debug ⮕ worker Arpnip::Nodes p200
[35351] 2025-08-22 10:42:36 debug ⬅ (info) skip: driver or action not applicable
[35351] 2025-08-22 10:42:36 debug ⮕ worker Arpnip::Nodes p100
[35351] 2025-08-22 10:42:36 debug snmp reader cache warm: [ipaddress]
But I didn't know about that, so I will remember it in future thanks.
Failing progress here, I took a look at doing it out-of-band, and then using:
Submit arpnip results directly to Netdisco by putting the JSON data in a
file and using the "-p" option (see API web docs for data format
example):
~/bin/netdisco-do arpnip -d 192.0.2.1 -p /tmp/arp-table.json
Which also seems a more recent addition I'd not noticed before. But while the
API docs suggest the format for the JSON should be:
[
{ mac => "aa:bb:cc:dd:ee:ff", ip => "A.B.C.D" }
]
I had to write it such:
[
{ mac: "aa:bb:cc:dd:ee:ff", ip: "A.B.C.D" }
]
But it did work! So that's another interim workaround perhaps. Still icky.
J.
. . . . . . . . . . . . . . . . . . . . . . . . .
Jethro R Binks, Network Manager,
Information Services Directorate, University Of Strathclyde, Glasgow, UK
The University of Strathclyde is a charitable body, registered in Scotland,
number SC015263.
From: Christian Ramseyer <[email protected]>
Sent: 22 August 2025 12:54 AM
To: Jethro Binks <[email protected]>; Cuttler, Brian R (HEALTH) via
netdisco-users <[email protected]>
Subject: Re: [Netdisco] Trying to fetch arp entries from ArubaOSCX, again
Hi!
On 21.08.2025 21:31, Jethro Binks wrote:
> action: arpnip::nodes
Your config looks fine at a first glance except for I have never seen
action: used in device_auth... just as a wild guess maybe try without it?
You can also try ND2_LOG_PLUGINS=1 as env var to get some more output
from plugin and worker selection, maybe that helps.
Cheers
Christian
_______________________________________________
Netdisco mailing list
[email protected]
https://sourceforge.net/p/netdisco/mailman/netdisco-users/
Volg Aquafin op LinkedIn | Facebook | Instagram | YouTube
In het kader van de uitoefening van onze taken verzamelen we bij Aquafin
persoonsgegevens. Hoe we omgaan met deze gegevens en wat de rechten van de
betrokkenen zijn, kan je nalezen in onze privacy policy.
P Denk aan het milieu. Druk deze mail niet onnodig af.
--- End Message ---
