Network Management

Reply
New Contributor
Posts: 2
Registered: ‎09-17-2015

SNMP monitoring

[ Edited ]

Hi Guys

 

Im looking to monitor both our Aruba controllers (6000's M3) and our clearpass servers using Solarwinds.

Although I can see the read and write communities are set up on both sets of controllers I am unable to get access via UDP 161 - do I need to permit the SW server somehow on the CP and Aruba controllers?

 

I guess the question is how do I open UDP 161 up for external monitoring on an Aruba controller.

 

I have tried adding the SW server to the SNMP config page, I can see traps being sent to the SW server, but can't run a SNMP query or walk the MiB?

 

Thanks

Guru Elite
Posts: 20,332
Registered: ‎03-29-2007

Re: SNMP monitoring

Check to make sure that there is no firewall blocking traffic between the controller and SolarWinds.  by default, if you define an SNMP community, you should be able to walk it if there is ip connectivity between the solarwinds device and the controller.  While doing the SNMPwalk, SSH into the controller and type "show datapath session table <ip address of solarwinds or management device>" to see if there is any ip traffic related to that ip address.  If there is none, that means traffic is being blocked somewhere upstream.  If it shows up, but there is a "D" flag, that means that the controller is blocking the traffic.

 

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

New Contributor
Posts: 2
Registered: ‎09-17-2015

Re: SNMP monitoring

No blocking, I can see it being allowed

 

1xx.1xx.7x.x    1xx.1x.3.2x    17   161   53418  0/0  0    0   0   0/10        6a   5781       588619     F
                                                  0/0     0 0   0   local      
1xx.1x.3.2x     1xx.1xx.7x.x    17   53418 161    0/0  0    0   0   0/10        6a   5781       582615     FC
                                                  0/0     0 0   0   local    

 

I have raised a support call with SW as an additional packet trace proves that the request is getting there...

Guru Elite
Posts: 20,332
Registered: ‎03-29-2007

Re: SNMP monitoring

The reverse connection indicates that it is also being replied to.  Hopefully you don't have a situation where your controller has the wrong default gateway, so the traffic cannot be returned.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: