For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Lemaire_Frédéri's avatar
Lemaire_Frédéri
Icon for Altostratus rankAltostratus
Oct 16, 2023

SNMP Monitor does not put the monitored node down

Hello, I've configured a SNMP monitor using the snmp_dca parent monitor. The SNMP traffic is well working between our LTM and the node on which the monitor is attached. ( the goal is attached this...
application delivery
PSFletchTheTek's avatar
PSFletchTheTek
Icon for Cumulonimbus rankCumulonimbus
Oct 16, 2023

SNMP is just the alert tirgger.
You'll need a irule or policy to act on it. If that is possible.
It's not something i have done before.

Lemaire_Frédéri's avatar
Lemaire_Frédéri
Icon for Altostratus rankAltostratus
Oct 17, 2023

Hi PSFletchTheTek,

It's a monitor and then I would exprect that when reaching the treshold, it should deactivate the node on which it's applied. In the same way it does for any other monitor like HTTP that put the node down when it does not answer the configured return code.
Strange that I would need to use an irule or policy for that.

Thanks in advance.

Regards.

 

  • PSFletchTheTek's avatar
    PSFletchTheTek
    Icon for Cumulonimbus rankCumulonimbus
    Oct 17, 2023

    SNMP is design for external monitoring.
    HTTP or pool based monitoring is internal monitoring for the f5 to action.

    They are different things, but you might be able to get a irule that looks for a log saying the snmp has been triggered and action something. But that's not my area of knowledge.