NetXMS Support Forum

I have Netxms 3.8 installed on Debian 10.  On a separate machine, I have MariaDB 10.5 installed on Debian 10. (I used DEBs from MariaDB repo)  I'd like to force TLS between NetXMS Server & MariaDB Server.  I have MariaDB setup with SSL enabled:
MariaDB [(none)]> show global variables like '%ssl%';
+---------------------+--------------------------------+
| Variable_name       | Value                          |
+---------------------+--------------------------------+
| have_openssl        | YES                            |
| have_ssl            | YES                            |
| ssl_ca              | /etc/mysql/ssl/ca.pem          |
| ssl_capath          |                                |
| ssl_cert            | /etc/mysql/ssl/server-cert.pem |
| ssl_cipher          |                                |
| ssl_crl             |                                |
| ssl_crlpath         |                                |
| ssl_key             | /etc/mysql/ssl/server-key.pem  |
| version_ssl_library | OpenSSL 1.1.1d  10 Sep 2019    |
+---------------------+--------------------------------+
and created the database and user:
MariaDB [(none)]> show grants for [email protected];
+---------------------------------------------------------------------+
| Grants for [email protected]                                   |
+---------------------------------------------------------------------+
| GRANT USAGE ON *.* TO `netxms`@`netxms.mgmt.lan` REQUIRE X509       |
| GRANT ALL PRIVILEGES ON `db_netxms`.* TO `netxms`@`netxms.mgmt.lan` |
+---------------------------------------------------------------------+
Here is my NetXMS configuration:
## Logging
# Log file name
LogFile=/var/log/netxmsd

# Increase logging verbosity, 0 (only errors) to 9 (verbose debug)
DebugLevel=0

## Database configuration.
DBDriver=mariadb.ddr
DBServer=mariadb.mgmt.lan
DBName=db_netxms
DBLogin=netxms
DBPassword=

But I can't seem to get a connection working.  NXDBMGR INIT tells me Access denied, probably because it's not presenting the X509 cert & key to MariaDB. Where do I drop my user cert & key in NetXMS, and how do I configure mariadb driver to use X509?

Is there a way to insert the {instance-name} into a transformation script?  I have a Dummy DCI, "Total traffic on {instance-name} (bits/sec)" that sums 2 other DCIs and returns sum.  I'd like to apply this DCI via templates.

Template DCI transformation script:
In = GetDCIValue($node, FindDCIByDescription($node, "Inbound traffic on " . {instance-name} . " (bits/sec)"));
Out = GetDCIValue($node, FindDCIByDescription($node, "Outbound traffic on " . {instance-name} . " (bits/sec)"));
if ( In == null && Out == null )
return 0;
if ( In == null && Out != null )
return Out;
if ( In != null && Out == null )
return In;
return In + Out;

Template DCI Instance Discovery:
SNMP Walk - OIDs
Base SNMP OID:  .1.3.6.1.2.1.31.1.1.1.1
Filter script:return %(true, $1, $2);

I've tried replacing {instance-name} with $2 but no luck.  Any help is appreciated.

Is it possible to use Instance Discovery within a DCI configured to a Template?  I've tried to configure this according to youTube videos and instructions on the Wiki, but it seems the DCIs never get created on the actual node after applying Template when using Instance Discovery.

I'm running 1.2.12 on Windows 2008 with SQL 2008.  Any help would be appreciated.

I vaguely remember creating a VPN Connector in the older versions of NetXMS, but I cannot find it anywhere in version 1.2.3  Can someone point me in the right direction?  I have a VPN router running IPSec VPN site-to-site tunnels connecting a branch office and the owner's home network.  I have all those nodes in NetXMS, but cannot figure out how to create the VPN connectors.  Any help is appreciated.  Thanks!

I have NetXMS 1.2.3 setup on Windows 2008 R2 64-bit.  One of my nodes is a SonicWall TZ210.  Firmware is SonicOS Enhanced 5.8.1.8-57o.  This firewall is the default gateway for all my servers, with custom NATs for my hosted services.  It is also configured for SSLVPN Access.  SonicWall TZ210 IP address is 192.168.1.99.  When SSLVPN client connects to SSLVPN router, the client gets an IP address from a static pool configured within the TZ210.  (FYI, I have DHCP on my domain controller configured to issue 192.168.1.100-200.  SSLVPN static pool is 192.168.1.201-215)

At random times (I believe during configuration polling...?), an alarm is generated saying that SonicWall TZ210 node is down.  When I check the node in NetXMS console, I notice the Primary IP Address has changed.  The IP address is different sometimes, but it's always within the static pool for SSLVPN clients.  After the Primary IP address changes, none of the details or DCIs are available.  I can go into Node Properties and manually change the IP address back to 192.168.1.99, then run a Configuration Poll and everything is back to normal.  Then, at some point, the IP address will change back to an IP within the SSLVPN static pool.

So, my question is kind of loaded, but how can I troubleshoot this?  I'm not sure if it's something in the SonicWall or NetXMS.  Any help is appreciated.  Thanks in advance!!

Hello.  I'm wondering if it's currently supported to install NetXMS agent on Mac OS.  I have a customer with an Apple environment, all clients and servers are using Mac OS.  This customer only calls me when he believes his switches, routers, or firewall are giving him problems.  I'm not very familiar with Mac OS, but my customer is.  Is there a way I can install NetXMS agent on my customer's Mac servers so I can monitor performance?  If NetXMS agent cannot be installed on Mac OS, does the server operating system have a SNMP agent that can be installed/enabled?  Any help would be greatly appreciated!!  Thank you.

Is this syntax correct?  I've manually ran configuration polls, but nodes aren't binding.  We have 5 IP cameras and Video server.  I created a Container in "Infrastructure Services" named "Camera" and configured Automatic Bind Rules with the following script:

sub main()
{
return $node->ipAddr == "10.0.0.18" ||
return $node->ipAddr == "10.0.0.92" ||
return $node->ipAddr == "10.0.0.93" ||
return $node->ipAddr == "10.0.0.94" ||
return $node->ipAddr == "10.0.0.96" ||
return $node->ipAddr == "10.0.0.97";
}The cameras are configured with static IPs listed above, except for 10.0.0.18, that is our video server, also configured with static IPs.  I just want to container to autobind based on the IP address of the node, as opposed to manually right-clicking the node, selecting "Bind" and navigating the hierarchy tree.  Am I doing this correctly?

I'm wondering if it would make more sense to create nodes and assign ID numbers based on MAC address as opposed to IP address/DNS name.  I have seen duplicate nodes of the same laptop in my NetXMS setup because the user will come in to the office, obtain an IP address and work, then not return to the office until next week.  By that time, his DHCP license has expired and receives a new IP address, so when AutoNetworkDiscovery runs, it adds a new node with new ID number.  Not sure if that makes sense or is feasible in any way.

Please let me know what you think.
Zac

Hello all.  Been using NetXMS for about a year now, but this is my first post.  I've been using NetXMS to monitor the throughput on the trunk ports of all my switches.  I'm also using it to monitor basic node status of various devices, such as routers, printers, IP Cameras, etc.

We recently upgraded our wireless network to provide full WiFi coverage over our entire property.  We installed 5 Cisco WAP200 access points across our internal/private network.  They're configured with Static IP, and only broadcasting 802.11g using WPA2-PSK with AES encryption.  We're not using any VLANs and the wireless SSID that clients connect to is the same subnet that our wired clients and servers connect to (192.168.1.0/24).  The management addresses for all access points are also on the same subnet (192.168.1.0/24).

So, here's my problem:  Whenever NetXMS polls the WAP200's, I get a bunch of wierd subnets under "Entire Network"  There are a bunch of 0.0.0.0/28, 0.0.0.0/32, 0.0.0.0/19 subnets.  Even more wierd ones are 0.0.0.48/28, 0.0.0.152/30, 37.0.112.0/24, 110.32.32.46/31, and lots of others.

I'm wondering if I've configured something wrong in NetXMS.  I downloaded and recompiled all of Cisco's Wireless MIBs into NetXMS, but that didn't change the behavior.  If anyone could please provide some insight as to what is going on, I would greatly appreciate it.  I'm hoping that this is a bug and can be fixed in a new release or that this behavior can be remedied by changing a setting somewhere. Thank you in advace.

Zac
P.S.  Great product and looking forward to upgrades in the future.

---[UPDATE]---
There are still wierd subnets being added to "Entire Network" but now, each Cisco WAP200 has multiple duplicate interfaces.  They all seem to have the same MAC address, but there are wierd IP addresses and subnet masks with each. (Never seen a 47.0.115.0 subnet mask.)

Initially, each WAP200 would have 7 interfaces, br0, eth0, and ra0 - ra4.  The bridge and ethernet have the same MAC and the RA interfaces have a different, but similar, MAC.  (For instance, BR0 and ETH0 have D0-C2-82-E7-DC-6C while RA0-RA4 have D0-C2-82-E7-DC-68).  Another wierd going-on is the "Slot/Port" number.  These seem to be randomly generated when browsing from interface to interface within the same node.

Again, any insight is much appreciated.