Community discussions

MikroTik App
 
hwmonkey
Member Candidate
Member Candidate
Topic Author
Posts: 115
Joined: Wed Feb 08, 2012 9:50 pm

SNMPv3 Mastering

Tue Mar 18, 2014 7:39 pm

I have an existing link that has been monitored in The Dude using SNMPv1. It has not been installed long, and we are now trying to implement some security. Most of the network is only SNMPv2 capable.

I am able to walk the device and setup probes. The Dude configuration for SNMPv3 is working.

My issue is with a map link. I select mastering type of "SNMP" but the interface does not show up. If I walk the device, I see the interfaces. See the attached.

Suggestions?
You do not have the required permissions to view the files attached to this post.
 
hwmonkey
Member Candidate
Member Candidate
Topic Author
Posts: 115
Joined: Wed Feb 08, 2012 9:50 pm

Re: SNMPv3 Mastering

Wed Mar 26, 2014 5:39 am

Ideas? Anyone running SNMPv3 successfully?
 
hwmonkey
Member Candidate
Member Candidate
Topic Author
Posts: 115
Joined: Wed Feb 08, 2012 9:50 pm

Re: SNMPv3 Mastering

Tue Apr 01, 2014 9:30 pm

I guess I have two questions then:

1. Is anyone using SNMPv3 successfully with The Dude?
2. If not, are you doing anything to mitigate risk with SNMPv1 or SNMPv2? What tactics do you use to make these communications safe?

Thanks.
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: SNMPv3 Mastering

Wed Apr 02, 2014 8:37 am

I did. It looked to me a bit lazy but it worked as expected. But then I deleted dude from RB2011 as it was making terrible things - freezing, leaking memory, loosing data.
 
hwmonkey
Member Candidate
Member Candidate
Topic Author
Posts: 115
Joined: Wed Feb 08, 2012 9:50 pm

Re: SNMPv3 Mastering

Wed Apr 02, 2014 4:07 pm

I did.
Were you able to access interface data (e.g. create link and see interfaces and bitrates per interface) or did you just walk the device and create custom probes? I can do the latter, not the former
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: SNMPv3 Mastering

Wed Apr 02, 2014 9:27 pm

Yes, I saw interface data but was very slowly updated - approximatelly 5-10x per minute. Using "winbox type communication" was much more faster (1-2x per second). Unfortunatelly I fully uninstalled Dude so I cannot show you how it worked. But the setting was quite intuititve, I did not need to consult any manual for SNMPv3 settings. - You need to create special profile for this in Dude and switch it within all devices or make your profile to be default for used types of devices, as I remember. I used both authentication and encryption. Also the special community has to be set and enabled in each device.
 
hwmonkey
Member Candidate
Member Candidate
Topic Author
Posts: 115
Joined: Wed Feb 08, 2012 9:50 pm

Re: SNMPv3 Mastering

Wed Apr 02, 2014 9:50 pm

Hmm. I have done that. I can walk the device (as depicted in first post), but the interfaces to do not show up (see additional image).
You do not have the required permissions to view the files attached to this post.
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: SNMPv3 Mastering

Thu Apr 03, 2014 9:16 am

Maybe I will try to install dude on mipsbe again. Then I could check it again and show you. But I am not promising.
 
hwmonkey
Member Candidate
Member Candidate
Topic Author
Posts: 115
Joined: Wed Feb 08, 2012 9:50 pm

Re: SNMPv3 Mastering

Thu Apr 03, 2014 5:35 pm

Maybe I will try to install dude on mipsbe again. Then I could check it again and show you. But I am not promising.
Thanks. Or throw it on Windows (or a virtual session) and hit a device or two. I really do not understand why V3 is not working. This is not a Mikrotik device. But I have The Dude watching Ubiquity, Cambium, Memorylink, plus four other brands. This is the only SNMPV3 I have going, and I am having problems. Not sure where to look, for the config is correct.
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: SNMPv3 Mastering

Thu Apr 03, 2014 6:22 pm

Hi, so I did it and it works (tested with dude 3.6 running on Windows):
01.jpg
02.jpg
03.jpg
Check the pictures, you have probably something wrongly set.
You do not have the required permissions to view the files attached to this post.
 
hwmonkey
Member Candidate
Member Candidate
Topic Author
Posts: 115
Joined: Wed Feb 08, 2012 9:50 pm

Re: SNMPv3 Mastering

Thu Apr 03, 2014 6:33 pm

Thank you for taking the time to do this and to post images.

So maybe this is a problem with v4.0b3. I compared settings in The Dude and they are valid. I think I will need to test on 3.6 and also test monitoring a Tik device with v3. That will suggest where the bug is.
 
jarda
Forum Guru
Forum Guru
Posts: 7756
Joined: Mon Oct 22, 2012 4:46 pm

Re: SNMPv3 Mastering

Thu Apr 03, 2014 6:56 pm

Glad you appreciate my help. Hope you will post your findings.

Who is online

Users browsing this forum: No registered users and 13 guests