The awesome world of SimpleNetworkManagementProtocol

Transcription

1 The awesome world of SimpleNetworkManagementProtocol François Joannette FJ Consultant Manuel Deschambault Symbiotic System Design Feedback

2 What is SNMP? Ports, firewall and NAT Components Versions MIB and OIDs Commands Must check out Going beyond. extending crazy stuff Manuel?

3 What is SNMP? Ports, firewall and NAT Components Versions MIB and OIDs Commands Must check out Going beyond.

4 What is SNMP? Ports, firewall and NAT Components Versions MIB and OIDs Commands Must check out Going beyond.

5 What is SNMP? Ports, firewall and NAT Components Versions MIB and OIDs Commands Must check out Going beyond.

6 What is SNMP? Ports, firewall and NAT Components Versions MIB and OIDs Commands Must check out Going beyond.

7 What is SNMP? Ports, firewall and NAT Components Versions MIB and OIDs Commands Must check out Going beyond.

8 What is SNMP? Ports, firewall and NAT Components Versions MIB and OIDs Commands Must check out Going beyond.

9 What is SNMP? Ports, firewall and NAT Components Versions MIB and OIDs Commands Must check out sysuptime > DISMAN-EVENT-MIB::sysUpTimeInstance Timeticks: (450831) 1:15:08.31 Going beyond.

10 What is SNMP? Ports, firewall and NAT Components Versions MIB and OIDs Commands Must check out Going beyond.

11 What is SNMP? Ports, firewall and NAT Components Versions MIB and OIDs Commands Must check out Going beyond.

12 What is SNMP? Ports, firewall and NAT Components Versions MIB and OIDs Commands Must check out Going beyond.

13 What is SNMP? Ports, firewall and NAT Components Versions MIB and OIDs Commands Must check out Going beyond.

14 What is SNMP? Ports, firewall and NAT Components Versions MIB and OIDs Commands Must check out Going beyond.

15 What is SNMP? Ports, firewall and NAT Components Versions MIB and OIDs Commands Must check out Going beyond. extending crazy stuff Manuel?

16 Q&A Feedback

17 How to make SimpleNetworkManagementProtocol useful on the Macintosh Manuel Deschambault Support Tool Architect

18 S N M imple etwork P anagement rotocol Traps Query Activate SNMP Configure SNMP Extend SNMP

19 S N M imple etwork P anagement rotocol Traps Query Activate SNMP Configure SNMP Extend SNMP X

20 Activate SNMP Configure SNMP Extend SNMP

21 Activate SNMP Almost always off Only need to activate Configure SNMP Extend SNMP

22 Activate SNMP Configure SNMP Monolithic config file Not easy to manage Not easy to automate Extend SNMP

23 Configure SNMP Monolithic & not manageable Standard anatomy of SNMP folder /etc/snmp snmpd.conf

24 Configure SNMP Monolithic & not manageable New anatomy of SNMP folder /etc/snmp snmpd.conf autoconfig.sh Components rocommunity.txt syscontact.txt syslocation.txt Extensions examplescript.sh

25 Configure SNMP Monolithic & not manageable New anatomy of SNMP folder /etc/snmp snmpd.conf autoconfig.sh Components rocommunity.txt syscontact.txt syslocation.txt Extensions examplescript.sh

26 Configure SNMP Monolithic & not manageable New anatomy of SNMP folder /etc/snmp snmpd.conf autoconfig.sh Components rocommunity.txt syscontact.txt Only configs requiring snmpd.conf editing syslocation.txt Extensions examplescript.sh

27 Configure SNMP Monolithic & not manageable New anatomy of SNMP folder /etc/snmp snmpd.conf autoconfig.sh Components rocommunity.txt Only configs requiring snmpd.conf editing Code any configs needed into text files syscontact.txt syslocation.txt Extensions examplescript.sh

28 Configure SNMP Monolithic & not manageable New anatomy of SNMP folder /etc/snmp snmpd.conf autoconfig.sh Components rocommunity.txt Only configs requiring snmpd.conf editing Code any configs needed into text files Edit autoconfig.sh parser accordingly syscontact.txt syslocation.txt Extensions examplescript.sh

29 Configure SNMP Monolithic & not manageable autoconfig.sh parser script move /etc/snmp/snmpd.conf to /etc/snmp/snmp.conf.previous set default values for: -rocommunity (public) -syslocation (not specified) -syscontact (not specified) read: -/etc/snmp/components/rocommunity.txt -/etc/snmp/components/syslocation.txt -/etc/snmp/components/syscontact.txt push rocommunity > /etc/snmp/snmpd.conf push syslocation >> /etc/snmp/snmpd.conf push syscontact >> /etc/snmp/snmpd.conf override defaults use defaults Yes No are values valid? list all scripts in /etc/snmp/components/extensions for each script do: extract the OID compose the OID extract the name take next script No Yes is it last one push "extend <OID> <name> <script path> >> /etc/snmp/snmpd.conf restart net-snmp daemon

30 Configure SNMP Not easy to automate New anatomy of SNMP folder /etc/snmp snmpd.conf autoconfig.sh Components rocommunity.txt syscontact.txt syslocation.txt Extensions examplescript.sh

31 Configure SNMP Not easy to automate New anatomy of SNMP folder /etc/snmp snmpd.conf autoconfig.sh Components rocommunity.txt syscontact.txt Set as watch folder with launchd task syslocation.txt Extensions examplescript.sh

32 Configure SNMP Not easy to automate New anatomy of SNMP folder /etc/snmp snmpd.conf autoconfig.sh Components rocommunity.txt Set as watch folder with launchd task Run autoconfig.sh script when modified syscontact.txt syslocation.txt Extensions examplescript.sh

33 Configure SNMP Not easy to automate Demo

34 Activate SNMP Configure SNMP Extend SNMP Not a lot of pertinent data by default Net-SNMP agent can be extended to add useful data to our queries

35 Extend SNMP Benefits of extending the Net-SNMP agent Format of extension scripts Output of extension scripts Net-SNMP extensions vs remote SSH commands Standardizing

36 Extend SNMP Benefits of extending the Net-SNMP agent Returns the output of ANY script via SNMP query Allows very granular data to be returned Format of extension scripts Output of extension scripts Net-SNMP extensions vs remote SSH commands Standardizing

37 Extend SNMP Benefits of extending the Net-SNMP agent Format of extension scripts extend <OID> <name> <script path> Name get ascii encoded in OID, keep very short Output of extension scripts Net-SNMP extensions vs remote SSH commands Standardizing

38 Extend SNMP Benefits of extending the Net-SNMP agent Format of extension scripts Output of extension scripts Returns a table (1 or more values if multiple components) Returns a single exit value, even if multiple values in table Net-SNMP extensions vs remote SSH commands Standardizing

39 Configure SNMP Not easy to automate Demo

40 Extend SNMP Benefits of extending the Net-SNMP agent Format of extension scripts Output of extension scripts Net-SNMP extensions vs remote SSH commands Standardizing

41 S N M imple etwork P anagement rotocol Extend SNMP Method comparison Net-SNMP extension model SNMP Query Net-SNMP extension for S.M.A.R.T. Status SNMP Server

42 S N M imple etwork P anagement rotocol Extend SNMP Method comparison Remote SSH model SSH command sent to Mac to get S.M.A.R.T. status SNMP Server

43 Pros Extend SNMP Method comparison Net-SNMP extensions Remote SSH commands Very little setup on NMS server side NMS server expansion pack can be cross platform if OID structure is followed also on Linux machines Data encrypted if SNMPv3 used Net-SNMP setup can be automated within current deployment/ management solution SSH can be disabled on Mac Does not require SNMP setup of Mac All development done on SNMP server Data encrypted by default Modifications can be stored in expansion packs depending on NMS

44 S N M imple etwork P anagement rotocol Extend SNMP Method comparison Net-SNMP extension model SNMP Query Net-SNMP extension for S.M.A.R.T. Status SNMP Server

45 Cons Extend SNMP Method comparison Net-SNMP extensions Remote SSH commands Requires SSH enabled with credentials NMS server admin must be able to Configuration burden is mostly on the computer to monitor script all platforms to monitor Heavy processor load on NMS server with large device count Must make a separate expansion pack per platform to monitor

46 Extend SNMP Standardizing What we would want to standardize Benefits of standardizing How to put this in play Contact me to sign-up / be updated

47 Extend SNMP Standardizing What we would want to standardize OID structure per data point (on ) Scripts Benefits of standardizing How to put this in play Contact me to sign-up / be updated

48 Extend SNMP Standardizing What we would want to standardize Benefits of standardizing Benefit from expertise of coders/scripters world wide NMS expansion packs can be shared, making deployment very fast and easy How to put this in play Contact me to sign-up / be updated

49 Extend SNMP Standardizing What we would want to standardize Benefits of standardizing How to put this in play I will host an open source project for this later this summer or in the fall Contact me to sign-up / be updated

50 François Joannette Consultant FJ Consultant Manuel Deschambault Support Tool Architect Symbiotic System Design Feedback

51 Extend SNMP Extra marks (if time permits) a.k.a. brown nosing section

52 Extend SNMP Roaming solution Extra marks (if time permits) a.k.a. brown nosing section What about roaming machines? Making extension scripts that work off the LAN Calling those scripts on a schedule when off the LAN Modifications to the anatomy of the SNMP folder

53 Extend SNMP Roaming solution Identifying two classes of data point Identifying the scripts we want to work when roaming Knowing if the script is called by SNMP server or while roaming Acting on alert

54 Extend SNMP Roaming solution Identifying two classes of data point Classify each data point as performance metric or status Isolate status scripts since those will reflect failures to alert on Identifying the scripts we want to work when roaming Knowing if the script is called by SNMP server or while roaming Acting on alert

55 Extend SNMP Roaming solution Identifying two classes of data point Identifying the scripts we want to work when roaming Name the extension scripts that return status data as SA_<name of script>.sh (for Stand Alone) Knowing if the script is called by SNMP server or while roaming Acting on alert

56 Extend SNMP Roaming solution Identifying two classes of data point Identifying the scripts we want to work when roaming Knowing if the script is called by SNMP server or while roaming When script is called by the scheduled launchd task, pass it a variable. If this is empty, then the script was called by SNMP query and is on the LAN. Acting on alert

57 Extend SNMP Roaming solution roamingcheck.sh script roamingcheck.sh was executed per schedule get /etc/snmp/snmpserver.txt SNMP Server can be reached. Exit script Yes Does IP ping? No Is it empty? Yes Machine not configured for roaming. Exit script No List and execute all scripts in /etc/snmp/components/extensions that start with SA_ Exit script

58 Extend SNMP Roaming solution SA_Example.sh script Start of script theexit=0 StandAlone=$1 Gather Data Point Roaming echo data point Generate the alert message How was script executed? theexit=1 SNMP Query Yes Was threshold exceeded? No echo data point Yes More data points? No Pass message to /etc/snmp/roamalert.sh Exit with exit code End of script

59 Extend SNMP Roaming solution Identifying two classes of data point Identifying the scripts we want to work when roaming Knowing if the script is called by SNMP server or while roaming Acting on alert roamalert.sh script is called with error message personalize roamalert.sh to execute the alert mechanism of your choice

60 François Joannette FJ Consultant Manuel Deschambault Symbiotic System Design Feedback