Mailing List Archive

SNMP on Foundry BigIron8000
Hello,

I am on a contract, trying to monitor a pair of Foundry BigIron 8000's with
snmp. Below are the relevant lines from the config (I think):

SSH at bi8kb#sh ver
SW: Version 07.5.05fT53 Copyright (c) 1996-2002 Foundry Networks, Inc.
Compiled on Nov 01 2002 at 17:15:02 labeled as B2P07505f
HW: BigIron 8000 Router, SYSIF version 21


SSH at bi8kb#sh conf
!
Startup-config data location is flash memory
!
Startup configuration:
!
ver 07.5.05fT53

(snip)

snmp-server community ..... ro
snmp-server community ..... ro
snmp-server enable ethe 1/5 to 1/6
snmp-server enable vlan 44

(snip)

snmp-client X.X.X.X

(snip)

SSH at bi8kb#debug ip udp
SSH at bi8kb#debug destination ssh 1

(I run snmpwalk from the client)

Jul 15 06:26:54 UDP: rcvd src X.X.X.X(port 23900) -> dest Y.Y.Y.Y(port 161),
length:62
Jul 15 06:26:55 UDP: rcvd src X.X.X.X(port 23900) -> dest Y.Y.Y.Y(port 161),
length:62
Jul 15 06:26:56 UDP: rcvd src X.X.X.X(port 23900) -> dest Y.Y.Y.Y(port 161),
length:62
Jul 15 06:26:57 UDP: rcvd src X.X.X.X(port 23900) -> dest Y.Y.Y.Y(port 161),
length:62
Jul 15 06:26:58 UDP: rcvd src X.X.X.X(port 23900) -> dest Y.Y.Y.Y(port 161),
length:62


So the packets make it to the router...

Of course, on the client side, there is simply a timeout.

# snmpwalk -v 1 -c public Y.Y.Y.Y
Timeout: No Response from Y.Y.Y.Y

Am I missing anything extra? I'm sure the community string is correct. I'd
like to keep it simple and use SNMPv1 for now.

I know "snmp-server enable" has options for ethernet or vlan, but it will
only accept one vlan - the two ethernet interfaces are the possible ingress
points for the SNMP requests. I have gotten SNMP to work on BigIron's
before, so I know its possible (maybe I'm just rusty...)

There is route-based load balancing into and out of the switch, so I can't
guarantee which vlan or interface the SNMP traffic will come in on.

Thanks in advance,

Jeff

_________________________________________________________________
Don’t just search. Find. Check out the new MSN Search!
http://search.msn.click-url.com/go/onm00200636ave/direct/01/
SNMP on Foundry BigIron8000 [ In reply to ]
Does the "show snmp" counters indicate the problem?

Someone on this list previously mentioned a bug with snmp in bigiron software:-
"The 7.8.00d is released now the bug is #33598 .The description of the
bug is different, but this issue " SNMP uses a different interface IP
while responding to a get request " has been addressed in this issue. I
verified the issue has been fixed in 7800d code."

To test this you could sniff on your management host for snmp
responses coming back from different IP addresses.

Otherwise you could drop the interface options from the "snmp-server
enable" and lock snmp down with an acl, ie

access-list 8 permit x.x.x.x
access-list 8 deny any log

snmp-server community ....... ro 8