| 1 | <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> |
|---|
| 2 | <html xmlns="http://www.w3.org/1999/xhtml"> |
|---|
| 3 | <head> |
|---|
| 4 | <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> |
|---|
| 5 | <meta http-equiv="Content-Style-Type" content="text/css" /> |
|---|
| 6 | <meta name="generator" content="pandoc" /> |
|---|
| 7 | <title></title> |
|---|
| 8 | <style type="text/css">code{white-space: pre;}</style> |
|---|
| 9 | <link href="data:text/css;charset=utf-8,%0A%0A%0A%0Adiv%23header%2C%20header%0A%7B%0A%0Aborder%2Dbottom%3A%201px%20solid%20%23aaa%3B%0Amargin%2Dbottom%3A%200%2E5em%3B%0A%7D%0A%2Etitle%20%0A%7B%0Atext%2Dalign%3A%20center%3B%0A%7D%0A%2Eauthor%2C%20%2Edate%20%0A%7B%0Atext%2Dalign%3A%20center%3B%0A%7D%0A%0Adiv%23TOC%2C%20nav%23TOC%0A%7B%0A%0Aborder%2Dbottom%3A%201px%20solid%20%23aaa%3B%0Amargin%2Dbottom%3A%200%2E5em%3B%0A%7D%0A%40media%20print%0A%7B%0Adiv%23TOC%2C%20nav%23TOC%0A%7B%0A%0Adisplay%3A%20none%3B%0A%7D%0A%7D%0A%0Ah1%2C%20h2%2C%20h3%2C%20h4%2C%20h5%2C%20h6%0A%7B%0Afont%2Dfamily%3A%20%22Helvetica%20Neue%22%2C%20Helvetica%2C%20%22Liberation%20Sans%22%2C%20Calibri%2C%20Arial%2C%20sans%2Dserif%3B%20%0A%0Apage%2Dbreak%2Dafter%3A%20avoid%3B%20%0A%7D%0A%0Adiv%20div%2C%20section%20section%20%0A%7B%0Amargin%2Dleft%3A%202em%3B%20%0A%7D%0Ap%20%7B%7D%0Ablockquote%0A%7B%20font%2Dstyle%3A%20italic%3B%0A%7D%0Ali%20%0A%7B%0A%7D%0Ali%20%3E%20p%20%0A%7B%0Amargin%2Dtop%3A%201em%3B%20%0A%7D%0Aul%20%0A%7B%0A%7D%0Aul%20li%20%0A%7B%0A%7D%0Aol%20%0A%7B%0A%7D%0Aol%20li%20%0A%7B%0A%7D%0Ahr%20%7B%7D%0A%0Asub%20%0A%7B%0A%7D%0Asup%20%0A%7B%0A%7D%0Aem%20%0A%7B%0A%7D%0Aem%20%3E%20em%20%0A%7B%0Afont%2Dstyle%3A%20normal%3B%0A%7D%0Astrong%20%0A%7B%0A%7D%0A%0Aa%20%0A%7B%0A%0Atext%2Ddecoration%3A%20none%3B%0A%7D%0A%40media%20screen%0A%7B%0Aa%3Ahover%0A%7B%0A%0Atext%2Ddecoration%3A%20underline%3B%0A%7D%0A%7D%0A%40media%20print%0A%7B%0Aa%20%7B%0A%0Acolor%3A%20black%3B%0Abackground%3A%20transparent%3B%0A%7D%0Aa%5Bhref%5E%3D%22http%3A%2F%2F%22%5D%3Aafter%2C%20a%5Bhref%5E%3D%22https%3A%2F%2F%22%5D%3Aafter%0A%7B%0A%0Acontent%3A%20%22%20%28%22%20attr%28href%29%20%22%29%20%22%3B%0Afont%2Dsize%3A%2090%25%3B%0A%7D%0A%7D%0A%0Aimg%0A%7B%0A%0Avertical%2Dalign%3A%20middle%3B%0A%7D%0Adiv%2Efigure%20%0A%7B%0A%0Amargin%2Dleft%3A%20auto%3B%0Amargin%2Dright%3A%20auto%3B%0Atext%2Dalign%3A%20center%3B%0Afont%2Dstyle%3A%20italic%3B%0A%7D%0Ap%2Ecaption%20%0A%7B%0A%0A%7D%0A%0Apre%2C%20code%20%7B%0Abackground%2Dcolor%3A%20%23fdf7ee%3B%0A%0A%0A%0Awhite%2Dspace%3A%20pre%2Dwrap%3B%20%0Awhite%2Dspace%3A%20%2Dmoz%2Dpre%2Dwrap%20%21important%3B%20%0Awhite%2Dspace%3A%20%2Dpre%2Dwrap%3B%20%0Awhite%2Dspace%3A%20%2Do%2Dpre%2Dwrap%3B%20%0Aword%2Dwrap%3A%20break%2Dword%3B%20%0A%0A%7D%0Apre%20%0A%7B%0A%0Apadding%3A%200%2E5em%3B%20%0Aborder%2Dradius%3A%205px%3B%20%0A%0Aborder%3A%201px%20solid%20%23aaa%3B%0A%0Amargin%2Dleft%3A%200%2E5em%3B%0Amargin%2Dright%3A%200%2E5em%3B%0A%7D%0A%40media%20screen%0A%7B%0Apre%0A%7B%0A%0Awhite%2Dspace%3A%20pre%3B%0Aoverflow%3A%20auto%3B%0A%0Aborder%3A%201px%20dotted%20%23777%3B%0A%7D%0A%7D%0Acode%20%0A%7B%0A%7D%0Ap%20%3E%20code%2C%20li%20%3E%20code%20%0A%7B%0A%0Apadding%2Dleft%3A%202px%3B%0Apadding%2Dright%3A%202px%3B%0A%7D%0Ali%20%3E%20p%20code%20%0A%7B%0A%0Apadding%3A%202px%3B%0A%7D%0A%0Aspan%2Emath%20%0A%7B%0A%0A%7D%0Adiv%2Emath%20%0A%7B%0A%7D%0Aspan%2ELaTeX%20%0A%7B%0A%7D%20eq%20%0A%7B%0A%7D%20%0A%0Atable%0A%7B%0Aborder%2Dcollapse%3A%20collapse%3B%0Aborder%2Dspacing%3A%200%3B%20%0Aborder%2Dbottom%3A%202pt%20solid%20%23000%3B%0Aborder%2Dtop%3A%202pt%20solid%20%23000%3B%20%0A%0Amargin%2Dleft%3A%20auto%3B%0Amargin%2Dright%3A%20auto%3B%0A%7D%0Athead%20%0A%7B%0Aborder%2Dbottom%3A%201pt%20solid%20%23000%3B%0Abackground%2Dcolor%3A%20%23eee%3B%20%0A%7D%0Atr%2Eheader%20%0A%7B%0A%7D%20tbody%20%0A%7B%0A%7D%0A%0Atr%20%7B%0A%7D%0Atr%2Eodd%3Ahover%2C%20tr%2Eeven%3Ahover%20%0A%7B%0Abackground%2Dcolor%3A%20%23eee%3B%0A%7D%0A%0Atr%2Eodd%20%7B%7D%0Atr%2Eeven%20%7B%7D%0Atd%2C%20th%20%0A%7B%20vertical%2Dalign%3A%20top%3B%20%0Avertical%2Dalign%3A%20baseline%3B%20%0Apadding%2Dleft%3A%200%2E5em%3B%0Apadding%2Dright%3A%200%2E5em%3B%0Apadding%2Dtop%3A%200%2E2em%3B%0Apadding%2Dbottom%3A%200%2E2em%3B%0A%7D%0A%0A%0Ath%20%0A%7B%0Afont%2Dweight%3A%20bold%3B%20%7D%0Atfoot%20%0A%7B%0A%7D%0Acaption%20%0A%7B%0Acaption%2Dside%3A%20top%3B%0Aborder%3A%20none%3B%0Afont%2Dsize%3A%200%2E9em%3B%0Afont%2Dstyle%3A%20italic%3B%0Atext%2Dalign%3A%20center%3B%0Amargin%2Dbottom%3A%200%2E3em%3B%20%0Apadding%2Dbottom%3A%200%2E2em%3B%0A%7D%0A%0Adl%20%0A%7B%0Aborder%2Dtop%3A%202pt%20solid%20black%3B%0Apadding%2Dtop%3A%200%2E5em%3B%0Aborder%2Dbottom%3A%202pt%20solid%20black%3B%0A%7D%0Adt%20%0A%7B%0Afont%2Dweight%3A%20bold%3B%0A%7D%0Add%2Bdt%20%0A%7B%0Aborder%2Dtop%3A%201pt%20solid%20black%3B%0Apadding%2Dtop%3A%200%2E5em%3B%0A%7D%0Add%20%0A%7B%0Amargin%2Dbottom%3A%200%2E5em%3B%0A%7D%0Add%2Bdd%20%0A%7B%0Aborder%2Dtop%3A%201px%20solid%20black%3B%20%0A%7D%0A%0Aa%2Efootnote%2C%20a%2EfootnoteRef%20%7B%20%0Afont%2Dsize%3A%20small%3B%20vertical%2Dalign%3A%20text%2Dtop%3B%0A%7D%0Aa%5Bhref%5E%3D%22%23fnref%22%5D%2C%20a%2Ereversefootnote%20%0A%7B%0A%7D%0A%40media%20print%0A%7B%0Aa%5Bhref%5E%3D%22%23fnref%22%5D%2C%20a%2Ereversefootnote%20%0A%7B%0A%0Adisplay%3A%20none%3B%0A%7D%0A%7D%0Adiv%2Efootnotes%20%0A%7B%0A%7D%0Adiv%2Efootnotes%20li%5Bid%5E%3D%22fn%22%5D%20%0A%7B%0A%7D%0A%0A%40media%20print%0A%7B%0A%2Enoprint%0A%7B%0Adisplay%3Anone%3B%0A%7D%0A%7D%0A" rel="stylesheet" type="text/css" /> |
|---|
| 10 | </head> |
|---|
| 11 | <body> |
|---|
| 12 | <div id="TOC"> |
|---|
| 13 | <ul> |
|---|
| 14 | <li><a href="#snmp-exercises"><span class="toc-section-number">1</span> SNMP exercises</a></li> |
|---|
| 15 | <li><a href="#introduction"><span class="toc-section-number">2</span> Introduction</a><ul> |
|---|
| 16 | <li><a href="#goals"><span class="toc-section-number">2.1</span> Goals</a></li> |
|---|
| 17 | <li><a href="#notes"><span class="toc-section-number">2.2</span> Notes</a></li> |
|---|
| 18 | </ul></li> |
|---|
| 19 | <li><a href="#installing-client-manager-tools"><span class="toc-section-number">3</span> Installing client (manager) tools</a></li> |
|---|
| 20 | <li><a href="#configure-snmp-on-your-router"><span class="toc-section-number">4</span> Configure SNMP on Your Router</a></li> |
|---|
| 21 | <li><a href="#testing-snmp"><span class="toc-section-number">5</span> Testing SNMP</a></li> |
|---|
| 22 | <li><a href="#snmp-walk-and-oids"><span class="toc-section-number">6</span> SNMP Walk and OIDs</a></li> |
|---|
| 23 | <li><a href="#configuration-of-snmpd-on-your-pc"><span class="toc-section-number">7</span> Configuration of snmpd on your PC</a><ul> |
|---|
| 24 | <li><a href="#check-that-snmpd-is-working"><span class="toc-section-number">7.1</span> Check that snmpd is working:</a></li> |
|---|
| 25 | <li><a href="#test-your-neighbors"><span class="toc-section-number">7.2</span> Test your neighbors</a></li> |
|---|
| 26 | </ul></li> |
|---|
| 27 | <li><a href="#adding-mibs"><span class="toc-section-number">8</span> Adding MIBs</a></li> |
|---|
| 28 | <li><a href="#snmpwalk---the-rest-of-mib-ii"><span class="toc-section-number">9</span> SNMPwalk - the rest of MIB-II</a></li> |
|---|
| 29 | <li><a href="#more-mib-oid-fun"><span class="toc-section-number">10</span> More MIB-OID fun</a></li> |
|---|
| 30 | </ul> |
|---|
| 31 | </div> |
|---|
| 32 | <h1 id="snmp-exercises"><span class="header-section-number">1</span> SNMP exercises</h1> |
|---|
| 33 | <h1 id="introduction"><span class="header-section-number">2</span> Introduction</h1> |
|---|
| 34 | <h2 id="goals"><span class="header-section-number">2.1</span> Goals</h2> |
|---|
| 35 | <ul> |
|---|
| 36 | <li>Install and learn to use the SNMP commands</li> |
|---|
| 37 | <li>Explore and identify standard vs enterprise parts of the MIB tree</li> |
|---|
| 38 | <li>Install vendor specific MIBs and use those with the SNMP commands</li> |
|---|
| 39 | </ul> |
|---|
| 40 | <h2 id="notes"><span class="header-section-number">2.2</span> Notes</h2> |
|---|
| 41 | <ul> |
|---|
| 42 | <li>Commands preceded with "$" imply that you should execute the command as a general user - not as root.</li> |
|---|
| 43 | <li>Commands preceded with "#" imply that you should be working as root.</li> |
|---|
| 44 | <li>Commands with more specific command lines (e.g. "rtrX>" or "mysql>") imply that you are executing commands on remote equipment, or within another program.</li> |
|---|
| 45 | </ul> |
|---|
| 46 | <h1 id="installing-client-manager-tools"><span class="header-section-number">3</span> Installing client (manager) tools</h1> |
|---|
| 47 | <p>Start by installing the net-snmp tools:</p> |
|---|
| 48 | <pre><code>$ sudo apt-get install snmp |
|---|
| 49 | $ sudo apt-get install snmp-mibs-downloader</code></pre> |
|---|
| 50 | <p>The second of the two commands downloads the standard IETF and IANA SNMP MIBs which are not included by default.</p> |
|---|
| 51 | <p>Note: for this to work, you must enable the "multiverse" source in your APT configuration, If you are using Ubuntu 12.04 or 14.04. This has already been done for you in this workshop.</p> |
|---|
| 52 | <p>Now, edit the file <code>/etc/snmp/snmp.conf</code>:</p> |
|---|
| 53 | <pre><code>$ sudo editor /etc/snmp/snmp.conf</code></pre> |
|---|
| 54 | <p>Change this line:</p> |
|---|
| 55 | <pre><code>mibs :</code></pre> |
|---|
| 56 | <p>... so that it looks like:</p> |
|---|
| 57 | <pre><code># mibs :</code></pre> |
|---|
| 58 | <p>(You are "commenting out" the empty mibs statement, which was telling the snmp* tools <strong>not</strong> to automatically load the mibs in the <code>/usr/share/mibs/</code> directory)</p> |
|---|
| 59 | <p>Now, make your own copy of the file <code>/etc/snmp/snmp.conf</code>, make it readable only by you, and add your credentials to it:</p> |
|---|
| 60 | <pre><code>$ mkdir ```/.snmp |
|---|
| 61 | $ cp /etc/snmp/snmp.conf ```/.snmp/ |
|---|
| 62 | $ chmod 700 ```/.snmp/ |
|---|
| 63 | $ sudo editor ```/.snmp/snmp.conf</code></pre> |
|---|
| 64 | <p>Add the following lines to the bottom:</p> |
|---|
| 65 | <pre><code> |
|---|
| 66 | defVersion 3 |
|---|
| 67 | defCommunity NetManage |
|---|
| 68 | defSecurityName admin |
|---|
| 69 | defSecurityLevel authNoPriv |
|---|
| 70 | defAuthPassphrase NetManage |
|---|
| 71 | defAuthType SHA</code></pre> |
|---|
| 72 | <p>Adding this information means you won't have to enter your credentials everytime you use one of the SNMP utilities.</p> |
|---|
| 73 | <h1 id="configure-snmp-on-your-router"><span class="header-section-number">4</span> Configure SNMP on Your Router</h1> |
|---|
| 74 | <p>For this exercise you need to work in groups. Assign one person to type on the keyboard.</p> |
|---|
| 75 | <p>If you are unsure of what group you are in refer to the Network Diagram on the classroom wiki by going to http://noc.ws.nsrc.org/ and clicking on the Network Diagram link.</p> |
|---|
| 76 | <p>Now connect to your router:</p> |
|---|
| 77 | <pre><code>$ ssh cisco@rtrN.ws.nsrc.org (or "ssh cisco@10.10.N.254") |
|---|
| 78 | |
|---|
| 79 | username: cisco |
|---|
| 80 | password: <CLASS PASSWORD> |
|---|
| 81 | |
|---|
| 82 | rtrN> enable |
|---|
| 83 | Password: <CLASS PASSWORD> |
|---|
| 84 | rtrN# configure terminal (conf t)</code></pre> |
|---|
| 85 | <p>Now we need to add an Access Control List rule for SNMP access, turn on SNMP, assign a read-only SNMP community string as well as a SNMPv3 group and user and tell the router to maintain SNMP information across reboots. To do this we do:</p> |
|---|
| 86 | <pre><code>rtrN(config)# access-list 99 permit 10.10.0.0 0.0.255.255 |
|---|
| 87 | rtrN(config)# snmp-server community NetManage ro 99 |
|---|
| 88 | rtrN(config)# snmp-server group ReadGroup v3 auth access 99 |
|---|
| 89 | rtrN(config)# snmp-server user admin ReadGroup v3 auth sha NetManage |
|---|
| 90 | rtrN(config)# snmp-server ifindex persist</code></pre> |
|---|
| 91 | <p>Now let's exit and save this new configuration to the routers permanent config.</p> |
|---|
| 92 | <pre><code>rtrN(config)# exit |
|---|
| 93 | rtrN# write memory (wr mem) |
|---|
| 94 | rtrN# exit (until you return to your pc)</code></pre> |
|---|
| 95 | <p>Now to see if your changes are working.</p> |
|---|
| 96 | <h1 id="testing-snmp"><span class="header-section-number">5</span> Testing SNMP</h1> |
|---|
| 97 | <p>To check that your SNMP installation works, run the snmpstatus command on each of the following devices</p> |
|---|
| 98 | <pre><code>$ snmpstatus <IP_ADDRESS></code></pre> |
|---|
| 99 | <p>Where <IP_ADDRESS> is each of the following:</p> |
|---|
| 100 | <pre><code>* The NOC server: 10.10.0.250 |
|---|
| 101 | * Your group's router: 10.10.N.254 |
|---|
| 102 | * The backbone switch: 10.10.0.253 |
|---|
| 103 | * The backbone router: 10.10.0.254 |
|---|
| 104 | * The access points: 10.10.0.251, 10.10.0.252</code></pre> |
|---|
| 105 | <p>Note that you just used SNMPv3. Not all devices that implement SNMP support v3. Try again, adding "-v2c" as a parameter. Notice that the command automatically uses the community string in the snmp.conf file instead of the v3 user credentials. Try "-v1".</p> |
|---|
| 106 | <p>What happens if you try using the wrong community string (i.e. change <code>NetManage</code> to something else) using the options "-v2c -c NetWrong"?</p> |
|---|
| 107 | <h1 id="snmp-walk-and-oids"><span class="header-section-number">6</span> SNMP Walk and OIDs</h1> |
|---|
| 108 | <p>Now, you are going to use the <code>snmpwalk</code> command, part of the SNMP toolkit, to list the tables associated with the OIDs listed below, on each piece of equipment you tried above:</p> |
|---|
| 109 | <pre><code>.1.3.6.1.2.1.2.2.1.2 |
|---|
| 110 | .1.3.6.1.2.1.31.1.1.1.18 |
|---|
| 111 | .1.3.6.1.4.1.9.9.13.1 |
|---|
| 112 | .1.3.6.1.2.1.25.2.3.1 |
|---|
| 113 | .1.3.6.1.2.1.25.4.2.1</code></pre> |
|---|
| 114 | <p>You will try this with two forms of the <code>snmpwalk</code> command:</p> |
|---|
| 115 | <pre><code>$ snmpwalk <IP_ADDRESS> <OID></code></pre> |
|---|
| 116 | <p>and</p> |
|---|
| 117 | <pre><code>$ snmpwalk -On <IP_ADDRESS> <OID></code></pre> |
|---|
| 118 | <p>... where <code>OID</code> is one of the OIDs listed above: .1.3.6...</p> |
|---|
| 119 | <p>...where <code>IP_ADDRESS</code> can be your group's router...</p> |
|---|
| 120 | <p><strong>Note</strong>: the <code>-On</code> option turns on numerical output, i.e.: no translation of the OID <-> MIB object takes place.</p> |
|---|
| 121 | <p>For these OIDs:</p> |
|---|
| 122 | <ol style="list-style-type: lower-alpha"> |
|---|
| 123 | <li>Do all the devices answer ?</li> |
|---|
| 124 | <li>Do you notice anything important about the OID on the output ?</li> |
|---|
| 125 | </ol> |
|---|
| 126 | <h1 id="configuration-of-snmpd-on-your-pc"><span class="header-section-number">7</span> Configuration of snmpd on your PC</h1> |
|---|
| 127 | <p>For this exercise your group needs to verify that the snmpd service is running and responding to queries for all machines in your group. First enable snmpd on your machine, then test if your machine is responding, then check each machine of your other group members.</p> |
|---|
| 128 | <ul> |
|---|
| 129 | <li>Install the SNMP agent (daemon)</li> |
|---|
| 130 | </ul> |
|---|
| 131 | <pre><code>$ sudo apt-get install snmpd |
|---|
| 132 | $ sudo apt-get install libsnmp-dev</code></pre> |
|---|
| 133 | <p>Because of an Ubuntu bug (https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/1322431), the command to create SNMPv3 users is missing, so, until this is fixed, do the following:</p> |
|---|
| 134 | <pre><code>$ cd /tmp/ |
|---|
| 135 | $ wget https://gist.githubusercontent.com/rarylson/72d1414d6907a4548427/raw/d97aed8debf0a291a0457ec634a3be370bd16546/net-snmp-create-v3-user |
|---|
| 136 | $ chmod +x net-snmp-create-v3-user |
|---|
| 137 | $ sudo mv net-snmp-create-v3-user /usr/local/bin</code></pre> |
|---|
| 138 | <ul> |
|---|
| 139 | <li>Configuration.</li> |
|---|
| 140 | </ul> |
|---|
| 141 | <p>We will make a backup of the distributed config, and then we will create our own:</p> |
|---|
| 142 | <pre><code>$ cd /etc/snmp |
|---|
| 143 | $ sudo mv snmpd.conf snmpd.conf.dist |
|---|
| 144 | $ sudo editor snmpd.conf</code></pre> |
|---|
| 145 | <p>Then, copy/paste the following:</p> |
|---|
| 146 | <pre><code># Listen for connections on all interfaces (both IPv4 *and* IPv6) |
|---|
| 147 | agentAddress udp:161,udp6:[::1]:161 |
|---|
| 148 | |
|---|
| 149 | # Configure Read-Only community and restrict who can connect |
|---|
| 150 | rocommunity NetManage 10.10.0.0/16 |
|---|
| 151 | rocommunity NetManage 127.0.0.1 |
|---|
| 152 | |
|---|
| 153 | # Information about this host |
|---|
| 154 | sysLocation NSRC Network Management Workshop |
|---|
| 155 | sysContact sysadm@pcX.ws.nsrc.org |
|---|
| 156 | |
|---|
| 157 | # Which OSI layers are active in this host |
|---|
| 158 | # (Application + End-to-End layers) |
|---|
| 159 | sysServices 72 |
|---|
| 160 | |
|---|
| 161 | # Include proprietary dskTable MIB (in addition to hrStorageTable) |
|---|
| 162 | includeAllDisks 10%</code></pre> |
|---|
| 163 | <p>Now save and exit from the editor.</p> |
|---|
| 164 | <p>Now we will add the same SNMPv3 user to your PC. We need to stop snmpd before adding the user, and restart it to read the above changes as well as the new user:</p> |
|---|
| 165 | <pre><code>$ sudo service snmpd stop |
|---|
| 166 | $ sudo net-snmp-create-v3-user -a SHA -A NetManage admin |
|---|
| 167 | $ sudo service snmpd start</code></pre> |
|---|
| 168 | <h2 id="check-that-snmpd-is-working"><span class="header-section-number">7.1</span> Check that snmpd is working:</h2> |
|---|
| 169 | <pre><code>$ snmpstatus localhost</code></pre> |
|---|
| 170 | <p>What do you observe ?</p> |
|---|
| 171 | <h2 id="test-your-neighbors"><span class="header-section-number">7.2</span> Test your neighbors</h2> |
|---|
| 172 | <p>Check now that you can run snmpstatus against your other group members servers:</p> |
|---|
| 173 | <pre><code>$ snmpstatus pcN.ws.nsrc.org</code></pre> |
|---|
| 174 | <p>For instance, in group 5, you should verify against:</p> |
|---|
| 175 | <pre><code>* pc17.ws.nsrc.org |
|---|
| 176 | * pc18.ws.nsrc.org |
|---|
| 177 | * pc19.ws.nsrc.org |
|---|
| 178 | * pc20.ws.nsrc.org</code></pre> |
|---|
| 179 | <h1 id="adding-mibs"><span class="header-section-number">8</span> Adding MIBs</h1> |
|---|
| 180 | <p>Remember when you ran:</p> |
|---|
| 181 | <pre><code>$ snmpwalk 10.10.X.254 .1.3.6.1.4.1.9.9.13.1</code></pre> |
|---|
| 182 | <p>If you noticed, the SNMP client (snmpwalk) couldn't interpret all the OIDs coming back from the Agent:</p> |
|---|
| 183 | <pre><code>SNMPv2-SMI::enterprises.9.9.13.1.3.1.2.1 = STRING: "chassis" |
|---|
| 184 | SNMPv2-SMI::enterprises.9.9.13.1.3.1.6.1 = INTEGER: 1</code></pre> |
|---|
| 185 | <p>What is <code>9.9.13.1.3.1</code> ?</p> |
|---|
| 186 | <p>To be able to interpret this information, we need to download extra MIBs:</p> |
|---|
| 187 | <p>We will use the following MIBs (Don't download them yet!):</p> |
|---|
| 188 | <p><strong>CISCO MIBS</strong></p> |
|---|
| 189 | <pre><code>ftp://ftp.cisco.com/pub/mibs/v2/CISCO-SMI.my |
|---|
| 190 | ftp://ftp.cisco.com/pub/mibs/v2/CISCO-ENVMON-MIB.my</code></pre> |
|---|
| 191 | <p>To make it easier, we have a local mirror on <code>http://noc.ws.nsrc.org/mibs/</code></p> |
|---|
| 192 | <p>Download them now as follows:</p> |
|---|
| 193 | <pre><code>$ cd /usr/share/mibs |
|---|
| 194 | $ sudo mkdir cisco |
|---|
| 195 | $ cd cisco |
|---|
| 196 | |
|---|
| 197 | $ sudo wget http://noc.ws.nsrc.org/downloads/mibs/CISCO-SMI.my |
|---|
| 198 | $ sudo wget http://noc.ws.nsrc.org/downloads/mibs/CISCO-ENVMON-MIB.my</code></pre> |
|---|
| 199 | <p>Now we need to tell the snmp tools that we have the cisco MIBS it should load. So edit the file <code>/etc/snmp/snmp.conf</code>, and add the following two lines:</p> |
|---|
| 200 | <pre><code>mibdirs +/usr/share/mibs/cisco |
|---|
| 201 | mibs +CISCO-ENVMON-MIB:CISCO-SMI</code></pre> |
|---|
| 202 | <p>Save the file, quit.</p> |
|---|
| 203 | <p>Now, try again:</p> |
|---|
| 204 | <pre><code>$ snmpwalk 10.10.X.254 .1.3.6.1.4.1.9.9.13.1</code></pre> |
|---|
| 205 | <p>What do you notice ?</p> |
|---|
| 206 | <h1 id="snmpwalk---the-rest-of-mib-ii"><span class="header-section-number">9</span> SNMPwalk - the rest of MIB-II</h1> |
|---|
| 207 | <p>Try and run snmpwalk on any hosts (routers, switches, machines) you have not tried yet, in the 10.10.0.X network</p> |
|---|
| 208 | <p>Note the kind of information you can obtain.</p> |
|---|
| 209 | <pre><code>$ snmpwalk 10.10.0.X ifDescr |
|---|
| 210 | $ snmpwalk 10.10.0.X ifAlias |
|---|
| 211 | $ snmpwalk 10.10.0.X ifTable | less |
|---|
| 212 | $ snmpwalk 10.10.0.X ifXTable | less |
|---|
| 213 | $ snmpwalk 10.10.0.X ifOperStatus |
|---|
| 214 | $ snmpwalk 10.10.0.X ifAdminStatus |
|---|
| 215 | $ snmpwalk 10.10.0.X if</code></pre> |
|---|
| 216 | <p>(Remember that with <code>less</code> you press space for next page, <code>b</code> to go back to previous page, and <code>q</code> to quit)</p> |
|---|
| 217 | <p>Can you see what's different between <code>ifTable</code> and <code>ifXTable</code>?</p> |
|---|
| 218 | <p>What do you think might be the difference between <code>ifOperStatus</code> and <code>ifAdminStatus</code>? Can you imagine a scenario where this could be useful ?</p> |
|---|
| 219 | <h1 id="more-mib-oid-fun"><span class="header-section-number">10</span> More MIB-OID fun</h1> |
|---|
| 220 | <ul> |
|---|
| 221 | <li>Use SNMP to examine:</li> |
|---|
| 222 | </ul> |
|---|
| 223 | <ol style="list-style-type: lower-alpha"> |
|---|
| 224 | <li>the running processes on your neighbor's server (hrSWRun)</li> |
|---|
| 225 | <li>the amount of free diskspace on your neighbor's server (hrStorage)</li> |
|---|
| 226 | <li>the interfaces on your neighbor's server (ifIndex, ifDescr)</li> |
|---|
| 227 | </ol> |
|---|
| 228 | <p>Can you use short names to walk these OID tables ?</p> |
|---|
| 229 | <ul> |
|---|
| 230 | <li>Experiment with the "snmptranslate" command, example:</li> |
|---|
| 231 | </ul> |
|---|
| 232 | <pre><code>$ snmptranslate .1.3.6.1.4.1.9.9.13.1</code></pre> |
|---|
| 233 | <ul> |
|---|
| 234 | <li>Try with various OIDs</li> |
|---|
| 235 | </ul> |
|---|
| 236 | </body> |
|---|
| 237 | </html> |
|---|
