SNMPv3 AUTH_FAIL

Started by 7novds, April 02, 2017, 04:23:03 PM

Previous topic - Next topic
Print
Go Down Pages1
User actions

7novds

April 02, 2017, 04:23:03 PM
Столкнулся с интересной проблемой:

В логах Cisco Catalyst вижу постоянные запросы от сервера NetXMS по SNMPv3
При этом в самом netxms везде настроен SNMPv2. Других приложений/сервисов на хосте нет.

Victor Kirhenshtein

#1
April 12, 2017, 05:41:19 PM
Насколько постоянные? Во время configuration poll сервер может перебирать разные версии протоколов.

7novds

#2
April 25, 2017, 10:16:53 AM Last Edit: May 01, 2017, 10:12:46 AM by 7novds
Примерно так. В моем случае этл 90% сообщений в логе. Можно как-то отключить "перебор" версий протокола? Для ноды явным образом настроен SNMPv2.

Apr 24 06:36:26: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 07:07:05: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 07:37:44: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 08:08:24: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 08:39:03: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 09:09:42: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 09:40:20: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 10:10:59: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 10:41:39: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 11:12:18: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 11:42:57: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 12:13:35: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 12:44:14: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 13:14:53: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 13:45:33: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 14:16:11: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 14:46:50: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 15:17:28: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 15:48:07: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 16:18:45: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 16:49:24: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 17:20:03: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 17:50:42: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 18:21:20: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 18:51:59: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 19:22:38: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 19:53:16: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 20:23:55: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 20:54:33: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 21:25:13: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 21:55:51: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 22:26:31: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 22:57:10: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 23:27:49: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 23:58:28: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D

Aleksander

#3
May 03, 2017, 12:33:54 PM
Quote from: 7novds on April 25, 2017, 10:16:53 AM
Примерно так. В моем случае этл 90% сообщений в логе. Можно как-то отключить "перебор" версий протокола? Для ноды явным образом настроен SNMPv2.

Apr 24 06:36:26: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 07:07:05: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 07:37:44: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 08:08:24: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 08:39:03: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 09:09:42: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 09:40:20: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 10:10:59: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 10:41:39: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 11:12:18: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 11:42:57: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 12:13:35: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 12:44:14: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 13:14:53: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 13:45:33: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 14:16:11: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 14:46:50: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 15:17:28: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 15:48:07: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 16:18:45: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 16:49:24: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 17:20:03: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 17:50:42: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 18:21:20: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 18:51:59: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 19:22:38: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 19:53:16: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 20:23:55: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 20:54:33: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 21:25:13: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 21:55:51: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 22:26:31: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 22:57:10: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 23:27:49: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D
Apr 24 23:58:28: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host A.B.C.D

На интерфейсе сколько IP Если несколько выбери ближайщий по пути следования к серверу.

7novds

#4
May 05, 2017, 08:43:37 AM
В качестве "target" используется loopback коммутатора. IP адресов на нем как у дурака махорки, но их использование не совсем подходит ( интерфейс могут отключить, например руками или из-за аварии или может поменяется маршрутизация и тогда ближайший перестанет ближайшим )

Чесно говоря не совсем понимаю каким образом это решит проблему

Victor Kirhenshtein

#5
May 12, 2017, 04:33:32 PM
Похоже на configuration poll. Перепроверю логику работы - в теории сначала должна пробоваться текущая версия протокола.
Print
Go Up Pages1
User actions