[prev in list] [next in list] [prev in thread] [next in thread] 

List:       net-snmp-users
Subject:    NET-SNMP Proxy V3 issues (converting from snmpv1/v2 requests to
From:       ravi cherukuri <ravi_cherukuri () yahoo ! com>
Date:       2011-07-22 10:40:23
Message-ID: 1311331223.36730.YahooMailNeo () web29705 ! mail ! ird ! yahoo ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Gentle reminder to the following problem.



Hi Dave, 


Synopsys: 
I am trying to proxy incoming snmpv1/v2/v3 requests as snmpv3 request from Host A to \
Host B (snmpv1/v2 disabled, can accept only snmpv3 requests).  It is failing to proxy \
v3 Requests.


Problem Description: 
Host A 
• NET-SNMP(port 161) for proxying V3 requests
• IP Address 13.132.246.152
• For proxying V3 requests snmpd.conf modified as 
proxy -v 3 -l authpriv -u SHADESUSER -a SHA -A snmpv3authpass  -x DES –X \
snmpv3privpass  13.132.247.59 1.3

Host
B
• Can accept and respond to snmpV3 requests.
• IP address 13.132.247.59

From Host A (command used at command prompt)
1.A successful response received for direct request – HostB snmpV3 request handling \
tested success. # /usr/sfw/bin/snmpwalk -v3 -l authPriv -u SHADESUSER -a SHA -A \
snmpv3authpass -x DES -X snmpv3privpass 13.132.247.59 1.3

OutPut:
Received expected MIB data
Wireshark(ethereal) Observation:
The first packet from HostA to HostB is "get-request"
Please find the screenshot attached (SuccessfulRequest.jpeg).
Get-Request circled in green.

2.Failed when proxied.
# /usr/sfw/bin/snmpwalk -v3 -l authPriv -u SHADESUSER -a SHA -A snmpv3authpass -x DES \
-X snmpv3privpass localhost 1.3

OutPut:
Timeout: No Response from localhost 

Wireshark(ethereal) Observation:
No "get-request" is found from HostA-HostB
Please find the screenshot attached (FailedRequest.jpeg).


Requesting you to help me in understanding NET-SNMP proxy and correct us if we are \
wrong.

Many Thanks,
Ravi 


[Attachment #5 (text/html)]

<html><body><div style="color:#000; background-color:#fff; font-family:Courier New, \
courier, monaco, monospace, sans-serif;font-size:10pt"><div id="yiv316995525"><div \
style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); font-family: \
Courier New,courier,monaco,monospace,sans-serif; font-size: 10pt;">Gentle reminder to \
the following problem.<br><br><br><div \
class="yiv316995525yui_3_2_0_4_131133095610652" \
id="yiv316995525yui_3_2_0_4_131133095610654" style="font-family: Courier \
New,courier,monaco,monospace,sans-serif; font-size: 10pt;"><div \
id="yiv316995525yui_3_2_0_4_1311330956106104" \
class="yiv316995525yui_3_2_0_4_131133095610657" style="font-family: times new \
roman,new york,times,serif; font-size: 12pt;">Hi Dave,

<br><div id="yiv316995525"><div id="yiv316995525yui_3_2_0_4_1311330956106118" \
class="yiv316995525yui_3_2_0_4_131133095610671" style="font-family: \
verdana,helvetica,sans-serif; font-size: 10pt;"><div \
id="yiv316995525yui_3_2_0_4_1311330956106117"><pre \
id="yiv316995525yui_3_2_0_4_1311330956106116" \
class="yiv316995525yui_3_2_0_4_131133095610673" style="font-family: \
verdana,helvetica,sans-serif;"><br>Synopsys: <br>I am trying to proxy incoming \
snmpv1/v2/v3 requests as snmpv3 request from Host A to Host B (snmpv1/v2 disabled, \
can accept only snmpv3 requests). <br>It is failing to proxy v3 \
Requests.<br><br><br>Problem Description: <br>Host A  <br>• NET-SNMP(port 161) for \
proxying V3 requests<br>• IP Address 13.132.246.152<br>• For proxying V3 requests \
snmpd.conf modified as <br><span class="yiv316995525yui_3_2_0_4_131133095610681" \
style="font-family: Courier New,courier,monaco,monospace,sans-serif;">proxy -v 3 -l \
authpriv -u SHADESUSER -a SHA -A  snmpv3authpass  -x DES –X snmpv3privpass  \
13.132.247.59 1.3</span><br><br>Host<br> B<br>• Can accept and respond to snmpV3 \
requests.<br>• IP address 13.132.247.59<br><br>From Host A (command used at command \
prompt)<br>1.A successful response received for direct request – HostB snmpV3 \
request handling tested success.<br><span \
class="yiv316995525yui_3_2_0_4_131133095610683" style="font-family: Courier \
New,courier,monaco,monospace,sans-serif;"># /usr/sfw/bin/snmpwalk -v3 -l authPriv -u \
SHADESUSER -a SHA -A snmpv3authpass -x DES -X snmpv3privpass </span><span \
class="yiv316995525yui_3_2_0_4_131133095610685" style="font-family: Courier \
New,courier,monaco,monospace,sans-serif;">13.132.247.59</span> <span \
class="yiv316995525yui_3_2_0_4_131133095610687" style="font-family: Courier \
New,courier,monaco,monospace,sans-serif;">1.3</span><br><br>OutPut:<span \
style="font-style: italic;"><br>   Received expected MIB \
data</span><br>Wireshark(ethereal)  Observation:<br>   <span style="font-style: \
italic;">The first packet from HostA to HostB is "<span style="font-weight: \
bold;">get-request</span>"<br>   Please find the screenshot attached \
(SuccessfulRequest.jpeg).<br>   Get-Request circled in green.</span><br><br>2.Failed \
when proxied.<br><span class="yiv316995525yui_3_2_0_4_131133095610695" \
style="font-family: Courier New,courier,monaco,monospace,sans-serif;"># \
/usr/sfw/bin/snmpwalk -v3 -l authPriv -u SHADESUSER -a SHA -A snmpv3authpass -x DES \
-X snmpv3privpass <span style="font-weight: bold;">localhost</span> \
1.3<br></span><br>OutPut:<br>   <span style="font-style: italic;">Timeout: No \
Response from localhost </span><br><br>Wireshark(ethereal) Observation:<br>   <span \
style="font-style: italic;">No "get-request" is found from HostA-HostB<br>   Please \
find the screenshot attached (FailedRequest.jpeg).</span><br><br><br>Requesting you \
to help me in understanding NET-SNMP proxy and correct us if  we are \
wrong.<br><br>Many Thanks,<br>Ravi </pre><br><br><br><span></span></div>



</div></div><br><br></div></div></div></div></div></body></html>
--0-1592056909-1311331223=:36730--


["FailedRequest.png" (image/png)]
["SuccessfulRequest.png" (image/png)]

------------------------------------------------------------------------------
Storage Efficiency Calculator
This modeling tool is based on patent-pending intellectual property that
has been used successfully in hundreds of IBM storage optimization engage-
ments, worldwide.  Store less, Store more with what you own, Move data to 
the right place. Try It Now! http://www.accelacomm.com/jaw/sfnl/114/51427378/

_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic