[Top] [All Lists]

RE: [nv-l] Authentication Trap Failures from Localhost

To: <nv-l@lists.us.ibm.com>, <Scott.Bursik@pbsg.com>
Subject: RE: [nv-l] Authentication Trap Failures from Localhost
From: "Barr, Scott" <Scott_Barr@csgsystems.com>
Date: Tue, 9 Dec 2003 15:42:34 -0600
Delivery-date: Tue, 09 Dec 2003 21:53:49 +0000
Envelope-to: nv-l-archive@lists.skills-1st.co.uk
Reply-to: nv-l@lists.us.ibm.com
Sender: owner-nv-l@lists.us.ibm.com
Thread-index: AcO+mrIdBj01c94wTWmZ22TIqwi9WAAAj9MQ
Thread-topic: [nv-l] Authentication Trap Failures from Localhost
This is unrelated but notewory.
I have a PMR open on mgragentd. I get the authentication failures from localhost  (on my NetView servers) also and I believe it is because mgragentd is not responding and never registered with SNMP. If I recall, a snmpwalk on localhost will hang near the end of the Solaris mib.
-----Original Message-----
From: owner-nv-l@lists.us.ibm.com [mailto:owner-nv-l@lists.us.ibm.com]On Behalf Of Davis, Donald
Sent: Tuesday, December 09, 2003 3:21 PM
To: 'nv-l@lists.us.ibm.com'; 'Scott.Bursik@pbsg.com'
Subject: RE: [nv-l] Authentication Trap Failures from Localhost

Add these two lines to your /etc/snmpd.conf file.
The ATM sub agent seems to get installed by default, but not configured properly.
I tried to un-configure it but it seemed to be more trouble than it was worth.
I just added these two lines and snmp was happy...

snmpd smuxtimeout=200 #muxatmd
smux muxatmd_password #muxatmd

Don Davis
First Citizens Bank
Raleigh, NC.  27603-3526

-----Original Message-----
From: Bursik, Scott {PBSG} [mailto:Scott.Bursik@pbsg.com]
Sent: Tuesday, December 09, 2003 3:58 PM
To: Nv-L (nv-l@lists.us.ibm.com)
Subject: [nv-l] Authentication Trap Failures from Localhost

NetView 7.1.3 AIX 4.3.3

I am working on some AIX 5.2 nodes trying to get a "golden" SNMP
configuration. I have performed some tests and I have one thing holding me
back. I am getting a LOT of Authentication Failure traps coming into my
NetView server from these "test" AIX machines. I set up packet sniffing on
one of the machines for the SNMP protocols and I see that there are attempts
to "talk" to the SNMP agent using the "public" community name from the lo0
localhost interface. Our community name for readOnly is not "public". I have
looked at the snmpd.log and it looks like before these Authentication
Failure traps are sent there is some SMUX activity. Is there a configuration
for SMUX where the community name needs to be set?

Here is a sample of the packet where the "public" community name is used:

====( 71 bytes transmitted on interface lo0 )==== 14:37:03.919638085
OTHER packet   (IP)
IP header breakdown:
        < SRC ="" >  (pbsxst00001.fritolay.pvt)
        < DST = >  (pbsxst00001.fritolay.pvt)
        ip_v=4, ip_hl=20, ip_tos=0, ip_len=71, ip_id=6432, ip_off=0
        ip_ttl=30, ip_sum=0, ip_p = 17 (UDP)
UDP header breakdown:
        <source port=32896, <destination port=161(snmp) >
        [ udp length = 51 | udp checksum = 4adf ]
00000000     30290201 00040670 75626c69 63a01c02     |0).....public...|
00000010     01010201 00020100 3011300f 060b2b06     |........0.0...+.|
00000020     01040102 02010101 000500                |...........     |

Thanks again,

Scott Bursik

This electronic mail and any files transmitted with it are confidential and are intended solely for the use of individual or entity to whom they are addressed. If you are not the intended recipient or the person responsible for delivering the electronic mail to the intended recipient, be advised that you have received this electronic mail in error and that any use, dissemination, forwarding, printing, or copying of this electronic mail is strictly prohibited. If you have received this electronic mail in error, please immediately notify the sender by return mail.

<Prev in Thread] Current Thread [Next in Thread>

Archive operated by Skills 1st Ltd

See also: The NetView Web