39
There seems to be a little confusion... you are asking about ARP tables, and you're using OID .1.3.6.1.2.1.17.4.3.1.2; however, that OID actually is for the mac-address table in the switch.
I am assuming you know how to login to your Ubuntu server, and that NET-SNMP is installed... please let me know if you need pointers for doing this (see this question for ...
16
Poll ifHCInUcastPkts, ifHCOutUcastPkts, ifHCInOctets and ifHCOutOctets on Vlan100, Vlan101, and Vlan102. You can find the ifIndex of these SVIs by walking ifName
This get me another question : Why this difference in the same interface (VLAN-100 and Vl100) ??
VLAN-100 is a virtual interface for the actual layer2 vlan; there is no IP address associated ...
15
SNMPv2u is a user-based security model, as specified in RFC 1909 and RFC 1910.
SNMPv2c is a common community-based security model.
SNMP 2u offers per-user authentication, similar to SNMPv3. SNMPv2u never really took off in the wild; anyone who wants per-user authentication uses SNMPv3. For more details (and there are a lot), consider this article in the ...
12
Yes, this data is populated in the Firewall MIB
.1.3.6.1.4.1.2636.3.5.2.1.5 contains your counters
.1.3.6.1.4.1.2636.3.5.2.1.6 contains your filter names
.1.3.6.1.4.1.2636.3.5.2.1.7 contains your counter names
show firewall filter RE-FILTER | match mgmt_ntp
mgmt_ntp 199728 2628
% snmpbulkwalk jnpr .1.3.6.1.4.1.2636.3.5.2.1.7|grep ...
12
I think that you have another switch or hub connected to port 24 of your 2960, and there are 4 hosts connected to that switch/hub.
10
Try adding the counter command under the SVI (see here for more information, specifically the "Understanding L3 interface counters" section).
For instance:
Cisco#config t
Cisco(config)#interface vlan 100
Cisco(config-if)#counter ?
ipv4 Enable IPv4 statistic counters
ipv6 Enable IPv6 statistic counters
<cr>
Cisco(config-if)#counter
...
10
Private MIBs are usually vendor specific. They contain additional information for their specific equiment which cannot be provided through RFC-defined MIBs. This way the vendor can provide more information.
To answer your second question: sometimes vendors provide both: the RFC-defined MIB contains all that can be contained there (so most software using ...
9
As far as I know data you want is not available on SNMP.
3750#sh mls qos interface FastEthernet0/1 statistics
...
output queues dropped:
queue: threshold1 threshold2 threshold3
-----------------------------------------
queue 0: 0 0 0
queue 1: 100989 0 0
queue 2: 0 0 ...
9
Have you tried walking the MIB/OIDs in question from a management station? After having spent a lot of time w/firmware QA, I've noticed things like show commands are likely to not display correct info, even when the OIDs are poll-able. I recommend using and knowing Net-SNMP tools and utils as debug before trying to poll the information in cacti, observium, ...
9
I think your issue is coming from a simple misconception of how SNMP data (OIDs) is structured, and how snmpwalk, snmpget, and snmpgetnext interact with it.
SNMP organizes the OIDs into related nested trees (or tables), the MIBs define those trees and the OIDs in them.
It's important to understand how snmpget and snmpgetnext works before getting into ...
9
The MIB is the entire catalog of OIDs (for a particular device).
An OID is a specific reference to an individual item within the MIB.
An analogy: The MIB is like the phone book for my city. The OID is like my name in the phone book.
8
my own solution comes out in the form of
iso.3.6.1.2.1.17.4.3.1.2.0.20.42.49.139.235 25
... do the other numbers represent a MAC address and if so, why are they different from the give solution?
First, I apologize for not including this dependency...
The MIB tables you're polling are indexed by a value. In this case, you're polling ...
8
You're partially right in that Syslog and SNMP Traping do serve similar functions, however there are some fundamental differences. (Based on your commands/tags on the quesiton, I assume you're asking specifically about their function on a Cisco Router/Switch.)
SNMP serves three main functions as you mentioned:
Gathering of information with snmpget, ...
8
Why can't I see MAC addresses of the attached PCs on polling the OID for the above switch?
When you poll 1.3.6.1.2.1.4.22.1.2, you're polling ipNetToMediaPhysAddress, which is the ARP table of the switch. Pure Layer2 switches do not have a large ARP table because they are merely switching instead of routing. Switching does not require an ARP table.
...
8
I don't believe there is a way to directly poll the results of the OR via SNMP, but you can certainly poll for the IP SLA results and calculate it yourself.
Using the CISCO-RTTMON-MIB (1.3.6.1.4.1.9.9.42), you can check the timeout value of your reachability checks, take the true/false value it returns and do the OR in whatever scripting language you're ...
8
Interfaces/IP Addressing:
If you're looking to poll a device's IP address, subnet mask and corresponding interface you can use the following OIDs from the IP-MIB and IF-MIB MIBs:
.1.3.6.1.2.1.4.20.1.1 - The IP address can be found at this OID
~]$ snmptranslate .1.3.6.1.2.1.4.20.1.1
IP-MIB::ipAdEntAddr
~]$ snmpwalk -v2c -c cisco 10.30.46.1 .1.3.6.1.2.1.4....
7
Cisco IOS padded the last 8-bits because you apparently left a digit off to make it a legitimate value... 31 characters isn't a valid hex number
[mpenning@some_machine ~]$ python
Python 2.6.6 (r266:84292, Feb 22 2013, 00:00:18)
[GCC 4.4.7 20120313 (Red Hat 4.4.7-3)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>>...
7
I would take a look at this support document from Cisco.
In part it recommends to run the following command to see which OID's were recently polled:
show snmp stats oid
This gives a readout for which OID's you are polling. It will allow you to see, by judging the time stamps, which OID is taking a long time to poll. This is usually where your problem ...
7
Have you taken a look at the ipRouteTable OID in the RFC1213-MIB? (OID number 1.3.6.1.2.1.4.21)
I utilize this to pull the routing table out of several devices.
It is referenced by RFC 1213 which, on page 33, gives the following information:
-- The IP routing table contains an entry for each route
-- presently known to this entity.
...
7
Could someone please tell me the community string indexing for switches other than Cisco?
Edit:
This is how to poll Q-BRIDGE-MIB for mac-addresses from the only non-Cisco I have, a DLink DGS-3200. I'm not using [community@vlan] for non-Cisco switches. You're correct that this indexing only applies to Ciscos. I expect any non-Cisco switch, which supports ...
7
Private MIBs refer to MIBs associated with a specific Private Enterprise Number which starts at the following prefix: iso.org.dod.internet.private.enterprise (1.3.6.1.4.1)
These numbers are assigned by IANA and are a namespace for an organization to store their custom OIDs/MIBs. You can see the full list of PENs here. For example, all of Cicso's proprietary ...
6
I just tried this on my CPE:
[ytti@lintukoto ~]% cat moi2.sh
#!/bin/sh
snmp="snmpset -v2c -cfoo bu.ip.fi"
$snmp 1.3.6.1.4.1.9.9.96.1.1.1.1.2.9 i 4 \
1.3.6.1.4.1.9.9.96.1.1.1.1.3.9 i 4 \
1.3.6.1.4.1.9.9.96.1.1.1.1.4.9 i 1 \
1.3.6.1.4.1.9.9.96.1.1.1.1.5.9 a 91.198.120.2 \
1.3.6.1.4.1.9.9.96.1.1.1.1.6.9 s filename \
1.3.6.1.4.1....
6
They keep moving things into the web interface but the reports are in a separate app called "Report Writer" on the server desktop so you'll have to RDP or physically connect to the server to get to it. There's also a "Report Scheduler" where you'll need add the reports once you've created them.
I've never found their reporting very useful but you may have ...
6
Is a broadcast ping to the subnet from the SVI on the switch (which is low-bandwidth), and using show mac address-table dynamic out of the question?
some-switch#show mac address-table dynamic
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
1 ...
6
Please ping the DHCP machine before polling. After the ping, tables will be populated. If you can't ping the DHCP laptop, then you know why you can't see it in the ARP table.
6
You probably want to be polling the CAM/MAC tables, that would have the MAC address of any devices send any traffic through the switch. ARP is L3 CAM/ARP is L2
6
First, do 'Octets' in ifInOctets and ifOutOctets actually refer to packets? Can someone explain in detail?
ifInOctets and ifOutOctets refer to bytes received and transmitted (respectively) by the interfaces indexed to ifIndex / ifName; ifInOctets and ifOutOctets use 32 bit wide values.
Unless you're polling interfaces at 100Mbps or lower, I'd strongly ...
6
This issue is a result of the engine-id changing. If you run into this syslog message, that is the exact definition of the problem.
Nov 6 09:44:35 MHN00416AN01 snmpd[1260]: SNMPD_ENGINE_ID_CHANGED: Warning: Local
engine ID has changed. Passwords for all the users under [edit snmp v3 usm local-engine]
need to be reconfigured.
Unfortunately, I have ...
6
Is this native to the 1900 series to only update the SNMP agent (forgive me if this is the wrong terminology) like it is doing at the moment.
What you're seeing is expected behavior. IOS has cached IF-MIB statistics for on 10-second intervals (by default) for a while, for instance see this entry in the SNMP FAQ.
That said, I have a few switches which ...
6
The ifCounterDiscontinuityTime is triggered when interfaces are dynamically removed from a device and then that same interface is dynamically re-added. I tested this using a loopback interface but I believe the behavior would be the same for modular interface whose existence would change based on whether or not the module was present. The steps to reproduce ...
Only top voted, non community-wiki answers of a minimum length are eligible
