What are the key lengths of these algorithms that Observium uses? I have some firewalls, which require to set explicitly which algorithm they have to communicate with Observium. However, I cannot make it work, even though I tried all the key lengths on my firewalls. I am having trouble using SNMP v3 on the following devices:
HardwareSummit X440-48tOperating SystemExtreme XOS 15.3.1.4 patch1-19 (nossh)
HardwareSummit X440-24tOperating SystemExtreme XOS 15.3.1.4 patch1-19 (nossh)
HardwareSummit Stack V2Operating SystemExtreme XOS 15.3.1.4 patch1-41 (nossh)
HardwareASA5515Operating SystemCisco ASA 9.2(2)4
Observium does report that it could not authenticate. SNMP v2c works though.
You might need to consult the net-snmp documentation, since we rely on net-snmp to handle SNMP commubication.
Well be using whatever is the SNMP default!
Adam.
Sent with AquaMail for Android http://www.aqua-mail.com
On 15 May 2015 10:01:33 Henry Collins hcol1987@gmail.com wrote:
What are the key lengths of these algorithms that Observium uses? I have some firewalls, which require to set explicitly which algorithm they have to communicate with Observium. However, I cannot make it work, even though I tried all the key lengths on my firewalls. I am having trouble using SNMP v3 on the following devices:
HardwareSummit X440-48tOperating SystemExtreme XOS 15.3.1.4 patch1-19 (nossh)
HardwareSummit X440-24tOperating SystemExtreme XOS 15.3.1.4 patch1-19 (nossh)
HardwareSummit Stack V2Operating SystemExtreme XOS 15.3.1.4 patch1-41 (nossh)
HardwareASA5515Operating SystemCisco ASA 9.2(2)4
Observium does report that it could not authenticate. SNMP v2c works though.
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
With the extreme kit, is the nossh image going to have decent enough encryption options for SNMP? If you’re also using some sort of gimped image for the ASA because you’re in some software-export-controlled country, the same may apply.
My config on my x670 which works, is using sha with aes 128 on xos 15.5.2.9.
If you have tried aes 128 support and it didn’t work, check you’ve configured the view properly, otherwise your snmpv3 user probably won’t be able to see anything.
In my case (again, on extreme), that means: configure snmpv3 add group "ROGroup" user "observium" sec-model usm configure snmpv3 add access "ROGroup" sec-model usm sec-level priv read-view "defaultAdminView" write-view "None" notify-view "None"
Phil
From: observium [mailto:observium-bounces@observium.org] On Behalf Of Henry Collins Sent: 15 May 2015 10:01 To: observium@observium.org Subject: [Observium] What SHA and AES does Observium use?
What are the key lengths of these algorithms that Observium uses? I have some firewalls, which require to set explicitly which algorithm they have to communicate with Observium. However, I cannot make it work, even though I tried all the key lengths on my firewalls. I am having trouble using SNMP v3 on the following devices:
Hardware
Summit X440-48t
Operating System
Extreme XOS 15.3.1.4 patch1-19 (nossh)
Hardware
Summit X440-24t
Operating System
Extreme XOS 15.3.1.4 patch1-19 (nossh)
Hardware
Summit Stack V2
Operating System
Extreme XOS 15.3.1.4 patch1-41 (nossh)
Hardware
ASA5515
Operating System
Cisco ASA 9.2(2)4
Observium does report that it could not authenticate. SNMP v2c works though.
participants (3)
-
Adam Armstrong -
Henry Collins -
Phillip Baker