Newsgroup: it.comp.reti.cisco
Titolo: SNMP v1 su CISCO837 e MRTG

Salve
ho deciso di pubblicizzare le statistiche dei miei sistemi su pagine
html.
Ho visto che c'č un bel software chiamato MRTG
http://people.ee.ethz.ch/~oetiker/webtools/mrtg/index-2.html
Per prendere informazioni utilizza SNMP
ho cercato al sito cisco ma ho trovato sta pagina qua:
http://www.cisco.com/en/US/products/sw/iosswrel/ps1831/products_configuration_guide_chapter09186a00800ca66b.html
che perň si riferisce al IOS vecchio 12.1 io ho una 12.2
Qualcuno ha links per aiutarmi nell'attivazione del protocollo SNMP ?
e soprattuto, si puň abilitare SNMP solo sulla eth0 e non sulla int
pubblica?
grazie
-- 
Posted via Mailgate.ORG Server - 
http://www.Mailgate.ORG


Direi di no ma puoi usare l'acl di cui sopra ed in piů puoi filtrare le
porte 161 e 162 udp sulla int pubblica (consigliato).
Ciao,
        Tosh.

 porte 161 e 162 udp sulla int pubblica (consigliato).
Ho fatto prove ma non funziona:
C:\mrtg-2.9.29\bin>perl cfgmaker 
pub...@62.110.131.41
 --global "WorkDir:
c:\www\mrtg" --output mrtg.cfg
--base: Get Device Info on 
pub...@62.110.131.41
:
SNMP Error:
no response received
SNMPv1_Session (remote host: "62.110.131.41" [62.110.131.41].161)
                  community: "public"
                 request ID: 508595411
                PDU bufsize: 8000 bytes
                    timeout: 2s
                    retries: 5
                    backoff: 1)
SNMPWALK Problem for 1.3.6.1.2.1.1 on 
pub...@62.110.131.41
:
------------------------------------------------------------------
ho messo cmq la stringa public nel router ho attivato sulla atm0.35 la porta
161 e 162 sul pubblico (ho abilitato le porte per SNMP).
Ho scritto: access-list 99 permit any
per fa na prova.
e non funziona
ti incollo la mia config..
-----------------------------
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname gateway
!
logging queue-limit 100
!
clock timezone CET 1
ip subnet-zero
no ip source-route
no ip domain lookup
ip domain name 
spadhausen.it
!
!
ip audit notify log
ip audit po max-events 100
no ftp-server write-enable  ---------> NON SO CHE SIA
!
!
!
!
!
!
!
interface Ethernet0
 bandwidth 10000
 ip address 192.168.0.254 255.255.255.0 secondary
 ip address 62.110.131.41 255.255.255.248
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat inside
 no ip mroute-cache
 no cdp enable
 hold-queue 100 out
!
interface ATM0
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 atm vc-per-vp 64
 atm ilmi-keepalive
 dsl operating-mode auto
 hold-queue 224 in
!
interface ATM0.35 point-to-point
 ip address 80.23.68.238 255.255.255.252
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat outside
 pvc 8/35
  encapsulation aal5snap
 !
!
ip nat inside source list 102 interface Ethernet0 overload
ip nat inside source static tcp 192.168.0.10 113 62.110.131.41 113
extendable
ip nat inside source static tcp 192.168.0.10 2010 62.110.131.41 2010
extendable
ip nat inside source static tcp 192.168.0.10 2011 62.110.131.41 2011
extendable
ip nat inside source static tcp 192.168.0.10 2012 62.110.131.41 2012
extendable
ip nat inside source static tcp 192.168.0.10 2013 62.110.131.41 2013
extendable
ip nat inside source static tcp 192.168.0.10 2014 62.110.131.41 2014
extendable
ip nat inside source static tcp 192.168.0.10 2015 62.110.131.41 2015
extendable
ip nat inside source static tcp 192.168.0.10 2016 62.110.131.41 2016
extendable
ip nat inside source static tcp 192.168.0.10 2017 62.110.131.41 2017
extendable
ip nat inside source static tcp 192.168.0.10 2018 62.110.131.41 2018
extendable
ip nat inside source static tcp 192.168.0.10 2019 62.110.131.41 2019
extendable
ip nat inside source static tcp 192.168.0.10 2020 62.110.131.41 2020
extendable
ip nat inside source static tcp 192.168.0.10 21000 62.110.131.41 21000
extendable
ip nat inside source static udp 192.168.0.10 21000 62.110.131.41 21000
extendable
ip nat inside source static tcp 192.168.0.10 43500 62.110.131.41 43500
extendable
ip nat inside source static tcp 192.168.0.10 6891 62.110.131.41 6891
extendable
ip nat inside source static udp 192.168.0.10 6891 62.110.131.41 6891
extendable
ip classless
ip route 0.0.0.0 0.0.0.0 80.23.68.237
no ip http server
no ip http secure-server        -------------> NON SO CHE SIA
!
access-list 99 permit any
access-list 100 deny   ip 0.0.0.0 0.255.255.255 any
access-list 100 deny   ip 10.0.0.0 0.255.255.255 any
access-list 100 deny   ip 127.0.0.0 0.255.255.255 any
access-list 100 deny   ip 169.254.0.0 0.0.255.255 any
access-list 100 deny   ip 172.16.0.0 0.15.255.255 any
access-list 100 deny   ip 192.0.2.0 0.0.0.255 any
access-list 100 deny   ip 192.168.0.0 0.0.255.255 any
access-list 100 deny   ip 224.0.0.0 15.255.255.255 any
access-list 100 deny   ip host 255.255.255.255 any
access-list 100 deny   ip host 62.110.131.40 host 62.110.131.40
access-list 100 deny   ip host 62.110.131.41 host 62.110.131.41
access-list 100 deny   ip host 62.110.131.42 host 62.110.131.42
access-list 100 deny   ip host 62.110.131.43 host 62.110.131.43
access-list 100 deny   ip host 62.110.131.44 host 62.110.131.44
access-list 100 deny   ip host 62.110.131.45 host 62.110.131.45
access-list 100 deny   ip host 62.110.131.46 host 62.110.131.46
access-list 100 deny   ip host 62.110.131.47 host 62.110.131.47
access-list 100 deny   ip host 62.110.131.40 any
access-list 100 deny   ip host 62.110.131.41 any
access-list 100 deny   ip host 62.110.131.42 any
access-list 100 deny   ip host 62.110.131.43 any
access-list 100 deny   ip host 62.110.131.44 any
access-list 100 deny   ip host 62.110.131.45 any
access-list 100 deny   ip host 62.110.131.46 any
access-list 100 deny   ip host 62.110.131.47 any
access-list 100 deny   ip any host 62.110.131.40
access-list 100 deny   ip any host 62.110.131.47
access-list 100 deny   ip any any fragments
access-list 100 permit icmp any host 62.110.131.41 echo
access-list 100 deny   icmp any host 62.110.131.42 echo
access-list 100 deny   icmp any host 62.110.131.43 echo
access-list 100 deny   icmp any host 62.110.131.44 echo
access-list 100 permit icmp any any
access-list 100 permit igmp any any
access-list 100 deny   udp any any range 33400 34400
access-list 100 permit tcp any host 62.110.131.41 eq 22
access-list 100 permit tcp any host 62.110.131.41 eq telnet
access-list 100 permit tcp any host 62.110.131.41 eq ident
access-list 100 permit udp any host 62.110.131.41 eq snmp
access-list 100 permit udp any host 62.110.131.41 eq snmptrap
access-list 100 permit tcp any host 62.110.131.41 range 2010 2020
access-list 100 permit tcp any host 62.110.131.41 eq 6891
access-list 100 permit udp any host 62.110.131.41 eq 6891
access-list 100 permit tcp any host 62.110.131.41 eq 21000
access-list 100 permit udp any host 62.110.131.41 eq 21000
access-list 100 permit tcp any host 62.110.131.41 eq 43500
access-list 100 permit 0 any host 62.110.131.41
access-list 100 permit 41 any host 62.110.131.41
access-list 100 permit 58 any host 62.110.131.41
access-list 100 permit 59 any host 62.110.131.41
access-list 100 permit 60 any host 62.110.131.41
access-list 100 permit tcp any host 62.110.131.41 established
access-list 100 permit udp any eq domain host 62.110.131.41 range 1024 5000
access-list 100 deny   ip any host 62.110.131.41
access-list 100 permit tcp any host 62.110.131.42 eq ftp-data
access-list 100 permit tcp any host 62.110.131.42 eq ftp
access-list 100 permit tcp any host 62.110.131.42 eq domain
access-list 100 permit udp any host 62.110.131.42 eq domain
access-list 100 permit tcp any host 62.110.131.42 eq 1214
access-list 100 permit tcp any host 62.110.131.42 eq 2000
access-list 100 permit tcp any host 62.110.131.42 range 2010 2020
access-list 100 permit tcp any host 62.110.131.42 eq 4662
access-list 100 permit udp any host 62.110.131.42 eq 4672
access-list 100 permit tcp any host 62.110.131.42 eq 4899
access-list 100 permit udp any host 62.110.131.42 eq 6257
access-list 100 permit tcp any host 62.110.131.42 eq 6699
access-list 100 permit tcp any host 62.110.131.42 eq 6667
access-list 100 permit tcp any host 62.110.131.42 eq 7100
access-list 100 permit tcp any host 62.110.131.42 established
access-list 100 permit 0 any host 62.110.131.42
access-list 100 permit 41 any host 62.110.131.42
access-list 100 permit 58 any host 62.110.131.42
access-list 100 permit 59 any host 62.110.131.42
access-list 100 permit 60 any host 62.110.131.42
access-list 100 permit udp any eq domain host 62.110.131.42 range 1024 5000
access-list 100 permit udp any eq ntp host 62.110.131.42 eq ntp
access-list 100 deny   ip any host 62.110.131.42
access-list 100 permit tcp any host 62.110.131.43 eq ftp-data
access-list 100 permit tcp any host 62.110.131.43 eq ftp
access-list 100 permit tcp any host 62.110.131.43 eq smtp
access-list 100 permit tcp any host 62.110.131.43 eq www
access-list 100 permit tcp any host 62.110.131.43 eq 81
access-list 100 permit tcp any host 62.110.131.43 eq 90
access-list 100 permit tcp any host 62.110.131.43 eq pop3
access-list 100 permit tcp any host 62.110.131.43 eq ident
access-list 100 permit tcp any host 62.110.131.43 eq 1433
access-list 100 permit tcp any host 62.110.131.43 eq 2000
access-list 100 permit tcp any host 62.110.131.43 eq 3306
access-list 100 permit tcp any host 62.110.131.43 eq 4899
access-list 100 permit tcp any host 62.110.131.43 established
access-list 100 permit 0 any host 62.110.131.43
access-list 100 permit 41 any host 62.110.131.43
access-list 100 permit 58 any host 62.110.131.43
access-list 100 permit 59 any host 62.110.131.43
access-list 100 permit 60 any host 62.110.131.43
access-list 100 permit udp any eq domain host 62.110.131.43 range 1024 5000
access-list 100 permit udp any eq ntp host 62.110.131.43 eq ntp
access-list 100 deny   ip any host 62.110.131.43
access-list 100 permit tcp any host 62.110.131.44 eq www
access-list 100 permit tcp any host 62.110.131.44 eq ident
access-list 100 permit tcp any host 62.110.131.44 range 2010 2040
access-list 100 permit tcp any host 62.110.131.44 eq 63000
access-list 100 permit tcp any host 62.110.131.44 eq 63050
access-list 100 permit tcp any host 62.110.131.44 eq 63100
access-list 100 permit 0 any host 62.110.131.44
access-list 100 permit 41 any host 62.110.131.44
access-list 100 permit 58 any host 62.110.131.44
access-list 100 permit 59 any host 62.110.131.44
access-list 100 permit 60 any host 62.110.131.44
access-list 100 permit tcp any host 62.110.131.44 established
access-list 100 permit udp any eq domain host 62.110.131.44 range 1024 5000
access-list 100 deny   ip any host 62.110.131.44
access-list 100 deny   ip any any
access-list 101 permit ip 192.168.0.0 0.0.255.255 any
access-list 101 permit ip 80.21.107.2 0.0.0.252 any
access-list 101 deny   ip any any
access-list 102 permit ip 192.168.0.0 0.0.0.255 any
no cdp run
snmp-server community public RO 99
snmp-server enable traps tty
!
line con 0
 exec-timeout 120 0
 no modem enable
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 exec-timeout 120 0
 login local
 transport input telnet
!
scheduler max-task-time 5000
!
end


Ottenevi lo stesso risultato omettendo del tutto la acl dalla riga di
comando dell'snmp.
Ad ogni buon conto per vedere se sul router è tutto ok puoi utilizzare il
comando "sh snmp", mentre per fare dei test puoi utilizzare l'snmpwalk di
linux od una delle mille utility snmp per windows che girano in rete.
E' molto probabile che il tuo problema sia nella config di mrtg, io nella
versione windows non l'ho mai installato, ma c'è chi dice che non è così
immediato.
Ciao,
        Tosh.

Non c'è verso di attivare SNMP!!!!!
ho attivato con i comandi chemi hai passato ma non reisco ad attivare snmp
sul 837 in modo da portere generare i report da MRTG


Posta la config. ed uno show snmp
Ciao,
        Tosh