Joe,
No I didn't have that MIB loaded??? - I don't know why I said I did before.
I think I was reading the "Files in Default MIB Directory" as already
loaded.
AND... OK now I can browse that oid and see the correct product.
Thanks.
John
Joe Fernandez
<jfernand@kardinia.com> To:
john.j.mackney@accenture.com
cc:
02/10/2002 13:39 Subject: Re: [nv-l]
authenticationFailure trap received from enterprise cisco
Hi John,
Apologies for the very long delay in replying to your reply - my day job
has kept me fully occupied for the last week or two!
I happen to be in front of a NetView Windows 2000 system at the moment, so
I checked that one.
I tried the the standard MIB loader, not the Web Mib loader. It did not
have CISCO-PRODUCTS-MIB loaded. I attempted a MIB browse with the standard
MIB browser and got as far as :
iso.dod.internet.private.enterprises.cisco.ciscoProducts
Below that were only about 4 entries:
ciscoGatewayServer
ciscoTerminalServer
ciscoRouter
..
I used the standard MIB loader to load CISCO-PRODUCTS-MIB-V1SMI.my.
Now when I browse, the symbols below
iso.dod.internet.private.enterprises.cisco.ciscoProducts
are greatly increased.
I see a whole set of product specific symbols for the first time e.g.
cisco3000
cisco4000
..
..
cisco7505
I note you said you are running on Solaris 8.
Are you sure your standard MIB loader shows this MIB is loaded?
I'll try to check a Solaris 8 system tomorrow and see if it is different.
At 04:36 PM 19/09/2002 +0100, you wrote:
>
>Joe,
>
>I was going to load that mib but In V7.1.2 there is already a MIB loaded
>called cisco-products-v1smi.mib
>
>According to the Cisco site, this mib is the Version 2 MIB in V1 format. I
>tried downloading the mib you suggested but the WEB mib loader refused to
>load it (I guess because the other mib is already loaded).
>
>There is no entry in trapd.conf for 1.3.6.1.4.1.9.1.48 so I thought I'd
run
>mib2trap, but it does not accept either mib file as a valid input file.
>So I'm a bit stuck with that. Anyone know anything about mib2trap?
>
>It's all a bit odd really. I think the authenticationFailure traps might
be
>occurring when the MLMs go down and the NetView server takes over the
>polling. The traps themselves are sent to the MLM - and when it comes back
>up it forwards all the traps to NetView in one go (which is why they come
>in big bursts).
>
>There are no ACLs on the Cisco routers to block these snmp requests from
>the NetView server (and like I say it works from the command line)
>
>Also, I do not have any other NMS on this server.
>
>J
>
>
>
>
> Joe Fernandez
> <jfernand@kardinia.com> To:
nv-l@lists.tivoli.com
> cc:
> 19/09/2002 03:41 Subject: Re: [nv-l]
authenticationFailure trap received from enterprise cisco
>
>
>
>
>
>The last identifier in the OIDs, which is not being resolved by your
>browser, is the Cisco Product identifier.
>
>48 is the identifier for cisco7505.
>
>If your browser is not resolving these, you need to load
>CISCO-PRODUCTS-MIB, which defines these.
>
>If you do not have it on your NetView system you can get it from Cisco 's
>web site or I can email you a copy.
>
>However, that will not solve your problem.
>
>If you can do SNMP Gets from NetView to the 7505 and get the values back
>without any problem as you say, and the trap says the unauthenticated
>requests are coming from your NetView server, are you running any other
>network management application on the same server?
>
>
>At 04:11 PM 18/09/2002 +0100, john.j.mackney@accenture.com wrote:
>>
>>I have NetView 7.1.2 on Solaris 8 (+All recommended SUN patches)
>>Since I turned NetView on this week I keep getting loads of traps like
the
>>following:
>>
>>A authenticationFailure trap received from enterprise cisco with 1
>>argument: authAddr= "my_netview_server"
>>SPECIFIC : 0 (hex: 0)
>>GENERIC : 4
>>CATEGORY : Status Events
>>ENTERPRISE : cisco 1.3.6.1.4.1.9.1.48
>>SOURCE : Agent (A)
>>HOSTNAME : "cisco 7505's IP address"
>>SEVERITY : Indeterminate
>>LOGGEDTIME : 09/18/02 06:25:01 AM
>>
>>If I click Browse MIB and follow down the tree I can get to
>>.1.3.6.1.4.1.9.1...
>>or
>>.iso.org.dod.internet.private.enterprise.enterprises.cisco.ciscoProducts...
>
>>
>>But I cannot find the final .48 in the tree.
>>
>>I do not think the error is related to community names as when I click
>>"Start Query" anywhere in the MIB tree, I get in the messages window if
>the
>>MIB browser:
>>Note using community "our_read_Community_Name" for node "cisco 7505's IP
>>address"
>>and it returns a value
>>
>>Anyone know what's happening. I get similar traps from other cisco
devices
>>(but obviously with either OID values - which also do not resolve the
last
>>value).
>>
>>Is this because the OS of the cisco devices do not match the MIBs I have
>>installed.
>>Please - any info anyone - out network managers are complaining about the
>>volume of traps.
>>
>>
>>
>>
>>
>>This message is for the designated recipient only and may contain
>>privileged, proprietary, or otherwise private information. If you have
>>received it in error, please notify the sender immediately and delete the
>>original. Any other use of the email by you is prohibited.
>>
>>
>>---------------------------------------------------------------------
>>To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
>>For additional commands, e-mail: nv-l-help@lists.tivoli.com
>>
>>*NOTE*
>>This is not an Offical Tivoli Support forum. If you need immediate
>>assistance from Tivoli please call the IBM Tivoli Software Group
>>help line at 1-800-TIVOLI8(848-6548)
>>
>Joe Fernandez
>Kardinia Software
>jfernand@kardinia.com
>
>http://www.kardinia.com
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: nv-l-unsubscribe@lists.tivoli.com
>For additional commands, e-mail: nv-l-help@lists.tivoli.com
>
>*NOTE*
>This is not an Offical Tivoli Support forum. If you need immediate
>assistance from Tivoli please call the IBM Tivoli Software Group
>help line at 1-800-TIVOLI8(848-6548)
>
>
>
>
>This message is for the designated recipient only and may contain
>privileged, proprietary, or otherwise private information. If you have
>received it in error, please notify the sender immediately and delete the
>original. Any other use of the email by you is prohibited.
>
Joe Fernandez
Kardinia Software
jfernand@kardinia.com
http://www.kardinia.com
This message is for the designated recipient only and may contain
privileged, proprietary, or otherwise private information. If you have
received it in error, please notify the sender immediately and delete the
original. Any other use of the email by you is prohibited.
|