Network Discovery via Agent Tunnel

Started by ChrisM, January 08, 2021, 03:57:57 PM

Previous topic - Next topic

ChrisM

I am looking to utilise a remote Agent which connects back to the NetXMS server via an agent tunnel, to discover active network devices/Map used IP addresses etc at the remote site.

After some investigating and research, I believe I have found previous requests for this feature a number of years ago, but no confirmation it has been released.

From my testing, I can see the Network discovery on the server looking for devices and although they see the MAC details via ARP (From the remote agent?), no ICMP or SNMP response is received. I assume this is because the ICMP/SNMP requests are not utilising the tunnel agent:

2021.01.08 12:32:51.285 *D* [                   ] GetOldNodeWithNewIP: ip=192.168.0.63 mac=70:18:8B:51:86:3A
2021.01.08 12:33:03.220 *D* [agent.conn.620     ] Cannot establish connection with agent at 192.168.0.63:4700
2021.01.08 12:33:03.220 *D* [snmp.discovery     ] SnmpCheckCommSettings(192.168.0.63): starting check (proxy=0, originalPort=0)
2021.01.08 12:33:03.220 *D* [snmp.discovery     ] SnmpCheckCommSettings(192.168.0.63): checking port 161
2021.01.08 12:33:03.221 *D* [snmp.discovery     ] SnmpCheckV3CommSettings(192.168.0.63): failed
2021.01.08 12:33:03.221 *D* [snmp.discovery     ] SnmpCheckCommSettings(192.168.0.63): trying version 1 community 'public'
2021.01.08 12:33:07.726 *D* [snmp.discovery     ] SnmpCheckCommSettings(192.168.0.63): trying version 1 community '*******'
2021.01.08 12:33:12.228 *D* [snmp.discovery     ] SnmpCheckCommSettings(192.168.0.63): trying version 0 community 'public'
2021.01.08 12:33:16.730 *D* [snmp.discovery     ] SnmpCheckCommSettings(192.168.0.63): trying version 0 community '*******'
2021.01.08 12:33:21.231 *D* [snmp.discovery     ] SnmpCheckCommSettings(192.168.0.63): failed
2021.01.08 12:33:21.231 *D* [obj.poll.node      ] AcceptNewNode(192.168.0.63): host is not reachable

I have set the network discovery to utilise the remote agent but this fails.

If I manually add the node and address the proxy via this agent, the device communicates successfully and functions as expected.

Which leads me to believe currently it is not possible to utilise Network Discovery via a tunnelled agent, Is this correct?

If so, i see a great use case for this scenario, would it be possible to add to the development roadmap?

Alternatively, please can you point me in the correct direction.

Thank you!

Victor Kirhenshtein

Hi,

discovery via agent behind tunnel should work if you are using zones, and node with agent is set as proxy for remote zone.

Best regards,
Victor

ChrisM

Thank you Victor.

I completely missed the Zoning concept. Setup with Zoning and proxy as you suggested and working well.