I got it working. I was correct in that it was a build/configuration
issue.
I had to add this to the configuration options at build time:
'--with-mib-modules=tsm-mib'
After that the snmpd started to respond with data:
larryh@apcon-ubuntu:~/.../tls$ snmpget -m +SNMP-TSM-MIB -v 3 -u v3admin -a
md5 -A hello1234 -l authNoPriv 127.0.0.1 1.3.6.1.2.1.190.1.2.1.0
SNMP-TSM-MIB::snmpTsmConfigurationUsePrefix.0 = INTEGER: false(2)
On Fri, Nov 15, 2019 at 10:16 AM Larry Hayes <lhay...@gmail.com> wrote:
> Thanks for the suggestion, I am assuming you meant that the snmpget needed
> a -v 3 to do version 3 snmp.
> That did not work and I tried with USM and TSM models:
>
> bash-4.3# snmpget -v 3 -u v3admin -a md5 -A hello1234 -l authNoPriv
> 127.0.0.1 1.3.6.1.2.1.190.1.2.1.0
> SNMP-TSM-MIB::snmpTsmConfigurationUsePrefix.0 = No Such Object available
> on this agent at this OID
>
> bash-4.3# snmpget -v 3 --defSecurityModel=tsm -T
> our_identity=04:BF:CF:1A:9C:5D:7A:9D:87:7E:1D:D8:A3:77:1A:DD:D7:76:77:0B -T
> their_identity=07:96:45:D7:46:E4:EE:11:66:68:36:77:A5:F9:24:D6:8A:1A:71:D9
> dtlsudp:127.0.0.1:10161 1.3.6.1.2.1.190.1.2.1.0
> SNMP-TSM-MIB::snmpTsmConfigurationUsePrefix.0 = No Such Object available
> on this agent at this OID
>
> I see in the snmpd output at start up time:
> Nov 15 10:05:33 apcon-ubuntu snmpd[14186]: A SNMP version other than 3 was
> requested with (D)TLS; using 3 anyways
>
> I feel this is either a build/configuration issue with snmpd that I am not
> addressing.
> Like I said, I added to the mib in the build configuration option and have
> installed it.
> Just seems like I am missing something to tell snmpd that it is
> responsible for this MIB.
>
>
>
> On Thu, Nov 14, 2019 at 2:41 PM Anders Wallin <walli...@gmail.com> wrote:
>
>> Hi Larry,
>>
>> you need to use "-v 3", there is no TLS support in "2c"
>>
>> Regards
>> Anders Wallin
>>
>>
>> On Thu, Nov 14, 2019 at 9:18 PM Larry Hayes <lhay...@gmail.com> wrote:
>>
>>> I am using 5.8.r0 net-snmp.
>>>
>>> I have build the net-snmp library and snmpd with the flags for TSM:
>>>
>>>
>>> *--with-security-modules=tsm --with-transports=TLSTCP,DTLSUDP*
>>>
>>>
>>>
>>> *and--with-mibs=SNMP-TSM-MIB:<and some others>*
>>>
>>> I can get the snmpd daemon running with self signed cert access working.
>>> Installed the TSM Mib in the /etc/snmp/mibs directory
>>>
>>> Added this the snmpd.conf file:
>>>
>>> [snmp] mibs +SNMP-TSM-MIB
>>>
>>> translate works:
>>> bash-4.3# ./snmptranslate -m +SNMP-TSM-MIB -IR -On
>>> snmpTsmConfigurationUsePrefix
>>> .1.3.6.1.2.1.190.1.2.1
>>> bash-4.3#
>>>
>>> I was trying to do a get on the snmpTsmConfigruationUsePrefix.
>>> It failing:
>>> bash-4.3# ./snmpget -d -v 2c -c public 127.0.0.1 .1.3.6.1.2.1.190.1.2.1
>>>
>>> Sending 45 bytes to UDP: [127.0.0.1]:161->[0.0.0.0]:0
>>> 0000: 30 2B 02 01 01 04 06 70 75 62 6C 69 63 A0 1E 02
>>> 0+.....public...
>>> 0016: 04 40 7C FC 31 02 01 00 02 01 00 30 10 30 0E 06
>>> .@|.1......0.0..
>>> 0032: 0A 2B 06 01 02 01 81 3E 01 02 01 05 00 .+.....>.....
>>>
>>>
>>> Received 45 byte packet from UDP: [127.0.0.1]:161->[0.0.0.0]:60013
>>> 0000: 30 2B 02 01 01 04 06 70 75 62 6C 69 63 A2 1E 02
>>> 0+.....public...
>>> 0016: 04 40 7C FC 31 02 01 00 02 01 00 30 10 30 0E 06
>>> .@|.1......0.0..
>>> 0032: 0A 2B 06 01 02 01 81 3E 01 02 01 80 00 .+.....>.....
>>>
>>> SNMP-TSM-MIB::snmpTsmConfigurationUsePrefix = No Such Object available
>>> on this agent at this OID
>>> bash-4.3#
>>>
>>>
>>> I was expecting the snmpd to respond to the gets for the TSM Mib.
>>> Is there something else that I need to do to get the snmpd to respond to
>>> this MIB?
>>>
>>> Thanks for any help
>>> _______________________________________________
>>> Net-snmp-users mailing list
>>> Net-snmp-users@lists.sourceforge.net
>>> Please see the following page to unsubscribe or change other options:
>>> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
>>>
>>
_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
