Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

[SNMP capture] how to quickly add a SNMPv3 template to the monitoring host?

2025-01-16 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

This time, take Lewei's use of Zabbix monitoring host Huawei E9000 as an example.

1. For more information about snmpwalk v3 commands, refer to the website:

Https://blog.csdn.net/ivnetware/article/details/51765458

two。 First of all, we need to know the encryption method of Huawei E9000 SNMPv3.

The actual operation is as follows:

[root@zsnm] # ssh 192.168.11.1root@192.168.11.1's password: Last login: Wed Nov 7 09:30:24 2018 from 10.142.88.1Wind River Linux glibc_small (standard) 4.2root@SMM:/# smmget-d snmpv3securityconf authentication protocol:MD5privacy protocol:AESroot@SMM:/# smmget-l smm-t front-d getallipaddrIp address: 192.168.11.1Broadcast address: 192.168.11.255Mask: 255.255.255.0Ip address: 192.168 .11.3 broadcast address: 192.168.11.255Mask: 255.255.255.0root@SMM:/# smmget-l smm-t front-d floatipIp address: 192.168.11.3Mask: 255.255.255.0Broadcast address: 192.168.11.255root@SMM:/#

Command parsing:

Ssh ip address remote connection to Huawei E9000

Smmget-d snmpv3securityconf can obtain the encryption method of Huawei E9000 SNMPv3.

Smmget-l smm-t front-d getallipaddr queries all IP addresses of the SMM board (only one Ip address can be found on the standby SMM board, while the main SMM board can find itself and the floating Ip address)

Smmget-l smm-t front-d floatip query floating IP address

Notes on Huawei E9000:

If you need to configure the SNMPv3 encryption of Huawei E9000 through the web interface, you need to access the floating IP address.

3. Use the snmpwalk command to try to get device information

[root@zsnm] # snmpwalk-v 3-l authPriv-u root-a MD5-A Huawei12#$-x AES-X Huawei12#$ 192.168.11.1SNMPv2-MIB::sysDescr.0 = STRING: Linux SMM 2.6.34.9-WR4.2.0.0_standard # 64 SMP PREEMPT Wed Aug 14 15:56:08 CST 2013 ppcSNMPv2-MIB::sysObjectID.0 = OID: SNMPv2-SMI::enterprises.2011.2.82DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (164300943) 19 days 0:23:29.43SNMPv2-MIB::sysContact.0 = STRING: Sysadmin (root@localhost) SNMPv2-MIB::sysName.0 = STRING: SMMSNMPv2-MIB::sysLocation.0 = STRING: Server RoomSNMPv2-MIB::sysORLastChange.0 = Timeticks: (100928332) 11 days 16:21:23.32SNMPv2-MIB::sysORID.1 = OID: SNMPv2-MIB::snmpMIBSNMPv2-MIB::sysORID.2 = OID: SNMP-VIEW-BASED-ACM-MIB::vacmBasicGroupSNMPv2-MIB::sysORID.3 = OID: SNMP-MPD-MIB::snmpMPDMIBObjects.3.1.1SNMPv2-MIB::sysORID.4 = OID: SNMP-USER-BASED-SM-MIB::usmMIBComplianceSNMPv2-MIB::sysORID.5 = OID: SNMP-FRAMEWORK-MIB:: snmpFramework MIBCompliance ^ C [root@zsnm ~] #

Command parsing:

Snmpwalk-v 3-l authPriv-u root-a MD5-A Huawei12#$-x AES-X Huawei12#$ 192.168.11.1

-v3 SNMPv3 version

-l authPriv security level is authPriv (both authenticated and encrypted)

-u root Huawei E9000 default user name root

-a MD5 authentication protocol is MD5

-A Huawei12#$ Huawei E9000 default user root default password is Huawei12#$

-x AES privacy protocol is AES

-X Huawei12#$ Huawei E9000 default user root default password is Huawei12#$

192.168.11.1 IP address of the host to be monitored

4. Create a new template and configure the monitoring item

Monitoring item name: systemHealth

Type: SNMPV3

Key value: systemHealth

SNMP OID:1.3.6.1.4.1.2011.2.82.1.82.1.1.0

Security name: {$SNMP_SECNAME}

Security level: authPriv

Authentication protocol: MD5

Authentication password: {$SNMP_AUTH}

Privacy Protocol: AES

Private key: {$SNMP_AUTH}

Information type: number (no plus or minus)

Update interval: 60s

The mapping values are as follows:

HuaweiE9000-systemHealth0 ⇒ ok

1 ⇒ minor

2 ⇒ major

3 ⇒ major and minor

4 ⇒ critical

5 ⇒ critical and minor

6 ⇒ critical and major

7 ⇒ critical and major and minor

Add a template macro:

{$SNMP_AUTH} = Huawei12#$

{$SNMP_SECNAME} = root

Other options default to 5. 5. View the latest data

After waiting for a period of time, the obtained data will appear, but there will be an error: SNMP error: Unknown Error

Only use this post to record my learning experience. If I can solve this problem in the future, I will update it. At the same time, the great god is also welcome to answer.

Original address

How to quickly add SNMPv3 templates for monitoring hosts?

Http://www.lwops.cn/forum.php?mod=viewthread&tid=65&fromuid=1

(source: Lewei Forum)

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report