Hi all I have the problem especified in the SOL7530(https://support.f5.com/kb/en-us/solutions/public/7000/500/sol7530.html) the management port IP address is typically associated with the system's host name. However, in some cases the management port is not used, or remote SNMP systems reside on an IP network reachable through an interface other than the management port. I have made the workaround procedure of SOL7530, but it don´t work. Can anyone help me???

you know trap-source does not change ip in ip header, don't you? e.g. config (trap-source none) root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list sys management-ip sys management-ip 192.168.1.11/24 { } root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list sys snmp trap-source sys snmp { trap-source none } test (trap-source none) [root@centos1 ~] tcpdump -nni eth0 -X port 162 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 15:56:27.520464 IP 192.168.1.11.40940 > 172.28.24.1.162: Trap(30) .1.3.6.1.4.1.3375.2.4 192.168.1.11 enterpriseSpecific s=2 126594 0x0000: 4500 0049 0000 4000 4011 b4d3 c0a8 010b E..I..@.@....... 0x0010: ac1c 1801 9fec 00a2 0035 bbce 302b 0201 .........5..0+.. 0x0020: 0004 0670 7562 6c69 63a4 1e06 092b 0601 ...public....+.. 0x0030: 0401 9a2f 0204 4004 c0a8 010b 0201 0602 .../..@......... 0x0040: 0102 4303 01ee 8230 00 ..C....0. config (trap-source 172.28.24.11) root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list sys management-ip sys management-ip 192.168.1.11/24 { } root@(ve11a)(cfg-sync In Sync)(Active)(/Common)(tmos) list sys snmp trap-source sys snmp { trap-source 172.28.24.11 } test (trap-source 172.28.24.11) [root@centos1 ~] tcpdump -nni eth0 -X port 162 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 15:56:52.218821 IP 192.168.1.11.50373 > 172.28.24.1.162: Trap(29) .1.3.6.1.4.1.3375.2.4 172.28.24.11 enterpriseSpecific s=2 2259 0x0000: 4500 0048 0000 4000 4011 b4d4 c0a8 010b E..H..@.@....... 0x0010: ac1c 1801 c4c5 00a2 0034 e0d0 302a 0201 .........4..0*.. 0x0020: 0004 0670 7562 6c69 63a4 1d06 092b 0601 ...public....+.. 0x0030: 0401 9a2f 0204 4004 ac1c 180b 0201 0602 .../..@......... 0x0040: 0102 4302 08d3 3000 ..C...0.

is this about SNMP polling or SNMP traps? you say you followed the procedure but it didn't work. what exactly doesn't work, didn't the source IP change? did you create / use the Self-IP as suggested?

That is the problem, the bigip doesn´t response snmp to de manager... can you post snmp configuration? tmsh list sys snmp have you tried to restart snmpd? tmsh restart sys service snmpd

If this is a new VLAN, have you allowed UDP port 161 access on the self-IP?

SNMP without management interface

24 Replies

nitass_89166
Noctilucent
Aug 26, 2014
In this VLAN, we have one floating IP (Allow custom, include default + 44 port) and 2 IPs one for each device who have this config: PortLockDown=Allow All, Traffic Group= NonFloating, Inherit traffic group partition is UNCHECKED.

is 10.51.26.229.161 floating or non-floating self ip? can you try snmp to non-floating self ip?

and can you check how many snmpd is running? is it similar to this?

e.g.

[root@ve11a:Active:In Sync] ~ ps -elf | grep snmp | grep -v grep 0 S root 5951 5832 0 80 0 - 409 - Aug25 ? 0:00 runsv snmpd 4 S root 5958 5951 0 80 0 - 9953 - Aug25 ? 0:07 /usr/sbin/snmpd -f -c /config/snmp/snmpd.conf -I-ifTable ifXTable ipAddressTable -Lsd -LF 6 /var/log/snmpd.log -p /var/run/snmpd.pid 0 S root 6746 5832 0 80 0 - 409 - Aug25 ? 0:00 runsv rmonsnmpd 0 S root 6759 6746 0 80 0 - 6852 - Aug25 ? 0:00 /usr/sbin/rmonsnmpd -f -c /config/snmp/subagents.conf -s -l /dev/null 0 S root 8109 5832 0 80 0 - 409 - Aug25 ? 0:00 runsv nokiasnmpd
- Pedro_Maidana_1
  Nimbostratus
  Aug 27, 2014
  Hi, this is the output ps -elf | grep snmp | grep -v grep 0 S root 6323 6222 0 80 0 - 407 - Jan24 ? 0:00 runsv nokiasnmpd 0 S root 7231 6222 0 80 0 - 407 - Jan24 ? 0:00 runsv snmpd 0 S root 7238 6222 0 80 0 - 407 - Jan24 ? 0:00 runsv rmonsnmpd 4 S root 14286 7231 0 80 0 - 8760 - 08:55 ? 0:00 /usr/sbin/snmpd -f -c /config/snmp/snmpd.conf -I-ifTable ifXTable ipAddressTable -Lsd -LF 6 /var/log/snmpd.log -p /var/run/snmpd.pid 0 S root 14303 7238 0 80 0 - 5959 - 08:55 ? 0:00 /usr/sbin/rmonsnmpd -f -c /config/snmp/subagents.conf -s -l /dev/null The 10.51.26.229.161 is a non-floating ip. I tried to float and non-float but the file maked on the snmp manager is commented on all the interfaces... Yes, now the bigip is responding SNMP requests but not properly. This is the tcpdump of the last try: tcpdump -n -nn -i VLAN_98 host 10.11.135.47 and not port 22 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on VLAN_98, link-type EN10MB (Ethernet), capture size 96 bytes 08:57:27.390865 IP 10.11.135.47.46948 > 10.51.26.229.161: C=0rqu1dea GetBulk(26) N=0 M=12 .1.3.6.1.2.1.1 08:57:27.394239 IP 10.51.26.229.161 > 10.11.135.47.46948: C=0rqu1dea GetResponse(404) .1.3.6.1.2.1.1.1.0=[|snmp] 08:57:27.400000 IP 10.11.135.47.46948 > 10.51.26.229.161: C=0rqu1dea GetBulk(30) N=0 M=12 .1.3.6.1.2.1.1.9.1.2.4 08:57:27.401324 IP 10.51.26.229.161 > 10.11.135.47.46948: C=0rqu1dea GetResponse(621) .1.3.6.1.2.1.1.9.1.2.5=.1.3[|snmp] 08:57:27.405262 IP 10.11.135.47.46948 > 10.51.26.229.161: C=0rqu1dea GetBulk(30) N=0 M=12 .1.3.6.1.2.1.1.9.1.3.8 08:57:27.448252 IP 10.51.26.229.161 > 10.11.135.47.46948: C=0rqu1dea GetResponse(221) .1.3.6.1.2.1.1.9.1.4.1=1 [|snmp] 08:57:27.452272 IP 10.11.135.47.46948 > 10.51.26.229.161: C=0rqu1dea GetBulk(30) N=0 M=12 .1.3.6.1.2.1.31.1.1.1.1 08:57:27.454653 IP 10.51.26.229.161 > 10.11.135.47.46948: C=0rqu1dea GetResponse(258) .1.3.6.1.2.1.55.1.1.0=2 [|snmp] 08:57:27.456554 IP 10.11.135.47.46948 > 10.51.26.229.161: C=0rqu1dea GetBulk(29) N=0 M=12 .1.3.6.1.2.1.2.2.1.2 08:57:27.457420 IP 10.51.26.229.161 > 10.11.135.47.46948: C=0rqu1dea GetResponse(267) .1.3.6.1.2.1.2.2.1.2.80=[|snmp] 08:57:27.460574 IP 10.11.135.47.46948 > 10.51.26.229.161: C=0rqu1dea GetBulk(31) N=0 M=12 .1.3.6.1.2.1.2.2.1.2.1536 08:57:27.461377 IP 10.51.26.229.161 > 10.11.135.47.46948: C=0rqu1dea GetResponse(411) .1.3.6.1.2.1.2.2.1.2.1584=[|snmp] 08:57:27.464681 IP 10.11.135.47.46948 > 10.51.26.229.161: C=0rqu1dea GetBulk(31) N=0 M=12 .1.3.6.1.2.1.2.2.1.2.1856 08:57:27.465380 IP 10.51.26.229.161 > 10.11.135.47.46948: C=0rqu1dea GetResponse(323) .1.3.6.1.2.1.2.2.1.2.1872=[|snmp] 08:57:27.468730 IP 10.11.135.47.46948 > 10.51.26.229.161: C=0rqu1dea GetBulk(29) N=0 M=12 .1.3.6.1.2.1.2.2.1.3 08:57:27.469442 IP 10.51.26.229.161 > 10.11.135.47.46948: C=0rqu1dea GetResponse(230) .1.3.6.1.2.1.2.2.1.3.80=6 [|snmp] 08:57:27.475955 IP 10.11.135.47.46948 > 10.51.26.229.161: C=0rqu1dea GetBulk(31) N=0 M=12 .1.3.6.1.2.1.2.2.1.3.1536 08:57:27.477345 IP 10.51.26.229.161 > 10.11.135.47.46948: C=0rqu1dea GetResponse(231) .1.3.6.1.2.1.2.2.1.3.1584=6 [|snmp] ............ abbreviation ............ abbreviation 08:57:27.618279 IP 10.11.135.47.46948 > 10.51.26.229.161: C=0rqu1dea GetBulk(31) N=0 M=12 .1.3.6.1.2.1.2.2.1.5.1856 08:57:27.619376 IP 10.51.26.229.161 > 10.11.135.47.46948: C=0rqu1dea GetResponse(260) .1.3.6.1.2.1.2.2.1.5.1872=0 [|snmp] 08:57:27.625784 IP 10.11.135.47.46948 > 10.51.26.229.161: C=0rqu1dea GetBulk(30) N=0 M=12 .1.3.6.1.2.1.31.1.1.1.15 08:57:27.628374 IP 10.51.26.229.161 > 10.11.135.47.46948: C=0rqu1dea GetResponse(258) .1.3.6.1.2.1.55.1.1.0=2 [|snmp] 08:57:27.631710 IP 10.11.135.47.46948 > 10.51.26.229.161: C=0rqu1dea GetRequest(31) .1.3.6.1.2.1.31.1.1.1.15.1 08:57:27.632134 IP 10.51.26.229.161 > 10.11.135.47.46948: C=0rqu1dea GetResponse(31) .1.3.6.1.2.1.31.1.1.1.15.1=[noSuchObject] ...... abbreviation ...... abbreviation 08:57:27.633225 IP 10.11.135.47.46948 > 10.51.26.229.161: C=0rqu1dea GetRequest(31) .1.3.6.1.2.1.31.1.1.1.6.1 08:57:27.634119 IP 10.51.26.229.161 > 10.11.135.47.46948: C=0rqu1dea GetResponse(31) .1.3.6.1.2.1.31.1.1.1.6.1=[noSuchObject] 08:57:27.635039 IP 10.11.135.47.46948 > 10.51.26.229.161: C=0rqu1dea GetRequest(30) .1.3.6.1.2.1.2.2.1.10.1 08:57:27.636105 IP 10.51.26.229.161 > 10.11.135.47.46948: C=0rqu1dea GetResponse(30) .1.3.6.1.2.1.2.2.1.10.1=[noSuchInstance] 08:57:28.009215 IP 10.11.135.47.46948 > 10.51.26.229.161: C=0rqu1dea GetRequest(32) .1.3.6.1.2.1.31.1.1.1.6.1952 08:57:28.010099 IP 10.51.26.229.161 > 10.11.135.47.46948: C=0rqu1dea GetResponse(32) .1.3.6.1.2.1.31.1.1.1.6.1952=[noSuchObject] 08:57:28.011284 IP 10.11.135.47.46948 > 10.51.26.229.161: C=0rqu1dea GetRequest(31) .1.3.6.1.2.1.2.2.1.10.1952 08:57:28.012276 IP 10.51.26.229.161 > 10.11.135.47.46948: C=0rqu1dea GetResponse(35) .1.3.6.1.2.1.2.2.1.10.1952=110545874 ^C 374 packets captured
nitass_89166
Noctilucent
Aug 27, 2014
Yes, now the bigip is responding SNMP requests but not properly.

what is not working properly?
- Pedro_Maidana_1
  Nimbostratus
  Aug 28, 2014
  When i try to add the bigip on the snmp manager (in this case an mrtg) it´s added but all the interface fields are commented. And i can´t see graphs abt traffic. When trying w/ other snmp manager, for example, a free snmp monitor (sol@rw1nds) the software tell me that can connect to Bigip properly. I need to configure the specific OID on the bigip SNMP configuration or can to leave default? (.1)
nitass
Employee
Aug 27, 2014
Yes, now the bigip is responding SNMP requests but not properly.

what is not working properly?
- Pedro_Maidana_1
  Nimbostratus
  Aug 28, 2014
  When i try to add the bigip on the snmp manager (in this case an mrtg) it´s added but all the interface fields are commented. And i can´t see graphs abt traffic. When trying w/ other snmp manager, for example, a free snmp monitor (sol@rw1nds) the software tell me that can connect to Bigip properly. I need to configure the specific OID on the bigip SNMP configuration or can to leave default? (.1)
nitass_89166
Noctilucent
Aug 28, 2014
I need to configure the specific OID on the bigip SNMP configuration or can to leave default? (.1)

.1 (default) allows all the oid tree.
- Fernando_Tician
  Nimbostratus
  Apr 05, 2016
  Hi guys, I have the same problem, i tried the SOL7530(https://support.f5.com/kb/en-us/solutions/public/7000/500/sol7530.html without sucess. Someone got the solution for this issue? Thanks
nitass
Employee
Aug 28, 2014
I need to configure the specific OID on the bigip SNMP configuration or can to leave default? (.1)

.1 (default) allows all the oid tree.
- Fernando_Tician
  Nimbostratus
  Apr 05, 2016
  Hi guys, I have the same problem, i tried the SOL7530(https://support.f5.com/kb/en-us/solutions/public/7000/500/sol7530.html without sucess. Someone got the solution for this issue? Thanks