For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

BigD_300005's avatar
BigD_300005
Icon for Cirrostratus rankCirrostratus
Oct 17, 2017
Solved

SNMP Pools

I'm trying to probe the status of a pool via SNMP and not translating the whole pool name into an OID as doing that for each and every pool is not efficient.

On the F5 I can run the following command: snmpwalk -v2c -c public localhost F5-BIGIP-LOCAL-MIB::ltmPoolStatusAvailState.\"/Common/Pool1\" Returned: F5-BIGIP-LOCAL-MIB::ltmPoolStatusAvailState."/Common/Pool1" = INTEGER: green(1)

Now to test without the MIB: snmpwalk -v2c -c public localhost 1.3.6.1.4.1.3375.2.2.5.5.2.1.2.\"/Common/Pool1\" Returned: F5-BIGIP-LOCAL-MIB::ltmPoolStatusAvailState."/Common/Pool1" = INTEGER: green(1)

However, if I SNMP walk the device outside of the F5 with Nagios or Solarwinds SNMP walk tool 1.3.6.1.4.1.3375.2.2.5.5.2.1.2.\"/Common/Pool1\" neither program returns anything. Is there a better way to probe it outside the F5 without converting "/Common/Pool1" to an OID/decimal format?

application delivery
LTM
nagios
oid
pool status
snmp
snmp walk
  • Kevin_K_51432's avatar
    Kevin_K_51432
    Oct 17, 2017

    Greetings,

    Did you allow access to the snmpv2c agent?

     

    tmsh modify sys snmp snmpv2c { allowed-addresses add { 10.10.10.0/24 }

tmsh list sys snmp snmpv2c allowed-addresses
sys snmp {
    allowed-addresses { 127.0.0.0/8 10.12.23.0/24 10.10.10.0/24 }
    snmpv2c {
}

     

    Kevin

     

7 Replies

  • Kevin_K_51432's avatar
    Kevin_K_51432
    Historic F5 Account
    Oct 17, 2017

    Greetings,

    Did you allow access to the snmpv2c agent?

     

    tmsh modify sys snmp snmpv2c { allowed-addresses add { 10.10.10.0/24 }

tmsh list sys snmp snmpv2c allowed-addresses
sys snmp {
    allowed-addresses { 127.0.0.0/8 10.12.23.0/24 10.10.10.0/24 }
    snmpv2c {
}

     

    Kevin

     

    • BigD_300005's avatar
      BigD_300005
      Icon for Cirrostratus rankCirrostratus
      Oct 18, 2017

      Yes, SNMPv2 and SNMPv3 work just fine. I can SNMP walk via OID "1.3.6.1.4.1.3375.2.2.5.5.2.1.2" in both Nagios and SolarWinds SNMPWalk tool. This gives me the results for all the pools. I can go even a step further and grab the whole OID for a single pool from that walk and scan for that OID for that as well. But the moment I throw in the name of the pool instead of an OID, I get no results back.

       

    • Kevin_K_51432's avatar
      Kevin_K_51432
      Historic F5 Account
      Oct 18, 2017

      I'm testing from a remote linux server, using the command you provided above. When all of the F5 MIBs are in the proper third party mib directory, the reponse is successful:

       

      snmpwalk -v2c -c public 10.12.23.120 F5-BIGIP-LOCAL-MIB::ltmPoolStatusAvailState.\"/Common/Pool1\"
F5-BIGIP-LOCAL-MIB::ltmPoolStatusAvailState."/Common/Pool1" = INTEGER: red(3)

       

      Move the F5 MIBs away , and of course it fails:

       

      snmpwalk -v2c -c public 10.12.23.120 F5-BIGIP-LOCAL-MIB::ltmPoolStatusAvailState.\"/Common/Pool1\"
MIB search path: /root/.snmp/mibs:/usr/share/mibs/site:/usr/share/snmp/mibs:/usr/share/mibs/iana:/usr/share/mibs/ietf:/usr/share/mibs/netsnmp
Cannot find module (F5-BIGIP-LOCAL-MIB): At line 0 in (none)
F5-BIGIP-LOCAL-MIB::ltmPoolStatusAvailState."/Common/Pool1": Unknown Object Identifier

snmpwalk -v2c -c public 10.12.23.120 1.3.6.1.4.1.3375.2.2.5.5.2.1.2.13.47.67.111.109.109.111.110.47.80.111.111.108.49
iso.3.6.1.4.1.3375.2.2.5.5.2.1.2.13.47.67.111.109.109.111.110.47.80.111.111.108.49 = INTEGER: 3

       

      So, I believe the query itself will work from a remote SNMP management station, it is just a matter of how the station is formatting the request. Are you able to:

      1) Check any of the logs on the SNMP station to see if any errors are being thrown? 2) Get a packet capture on the BIG-IP system to see what the SNMP query looks like?

      Sorry I don't have more info on this,

      Kevin

       

    • BigD_300005's avatar
      BigD_300005
      Icon for Cirrostratus rankCirrostratus
      Oct 19, 2017

      Ok that is good info, thanks Kevin.

       

      I wasn't sure if \"/Common/Pool1\" part actually required the MIB or not. I was trying to cut off the MIB requirement by doing:

      1.3.6.1.4.1.3375.2.2.5.5.2.1.2.\"/Common/Pool1\" Of course the SolarWinds SNMP walk tool isn't using the MIB and my installation of Nagios is having issues using the MIB. I will push forward trying to get that fixed first before moving forward.

       

      I'll update this if this solves my issue. Thanks again!