Send netdisco-users mailing list submissions to
netdisco-users@lists.sourceforge.net
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.sourceforge.net/lists/listinfo/netdisco-users
or, via email, send a message with subject or body 'help' to
netdisco-users-requ...@lists.sourceforge.net
You can reach the person managing the list at
netdisco-users-ow...@lists.sourceforge.net
When replying, please edit your Subject line so it is more specific
than "Re: Contents of netdisco-users digest..."
Today's Topics:
1. Re: Netdisco Swagger UI HTTPS (Oliver Gorwits)
2. Re: Netdisco and Aruba Controllers (Muris)
--- Begin Message ---
Ah! OK sorry I misread your original email... I'll take a look and check
that the Swagger link is created correctly... maybe it's a bug.
regards
Oliver
On Tue, 8 Oct 2024 at 09:31, Muris <alcat...@gmail.com> wrote:
> Hi Oliver, I already mentioned that I am running Apache in HTTPS on the
> front end which points to netdisco internal webserver
>
>
>
> But the swagger only allows HTTP selection not HTTPS, there is no dropdown
> to select it even though its working via SSL. Im trying to figure out how
> to make it appear?
>
>
>
> This is the SSL apache config:
>
>
>
> <VirtualHost *:80>
>
> ServerName netdisco.local
>
> Redirect permanent / https://netdisco.local
>
> </VirtualHost>
>
>
>
> <VirtualHost *:443>
>
> SSLEngine on
>
> SSLCertificateFile /etc/httpd/ssl/netdisco.pem
>
> SSLCertificateKeyFile /etc/httpd/ssl/netdisco.key
>
>
>
> ProxyPreserveHost On
>
> ProxyPass / http://127.0.0.1:5000/ retry=0 timeout=60
>
> ProxyPassReverse / http://127.0.0.1:5000/
>
>
>
> ProxyRequests Off
>
> <Proxy *>
>
> Order allow,deny
>
> Allow from all
>
> </Proxy>
>
>
>
> ServerName netdisco.local
>
> </VirtualHost>
>
>
>
>
>
> *From: *Oliver Gorwits <oli...@cpan.org>
> *Date: *Tuesday 8 October 2024 at 17:15
> *To: *Muris <alcat...@gmail.com>
> *Cc: *"netdisco-users@lists.sourceforge.net" <
> netdisco-users@lists.sourceforge.net>
> *Subject: *Re: [Netdisco] Netdisco Swagger UI HTTPS
>
>
>
> Hi Muris
>
>
>
> For a long time (in fact the whole time of Netdisco) we have not supported
> TLS natively in the web app, and the reason for this is that it's quite
> difficult to do properly and securely.
>
>
>
> This is best left to a proxy in front of Netdisco, like nginx or apache2.
>
>
>
> It's mentioned here in the docs and on the same wiki page are a few
> recipes for reverse proxy and the Netdisco settings to help:
> https://github.com/netdisco/netdisco/wiki/Install-Tips#ssl-support
>
>
>
> I should add that Netdisco web app will generate all hyperlinks to reflect
> its hosting, mostly automatically. So if it is addressed with https://
> via a proxy, then the link to Swagger (and anything else) should get
> https:// to match.
>
>
>
> regards,
>
> Oliver.
>
>
>
> On Wed, 2 Oct 2024 at 05:31, Muris <alcat...@gmail.com> wrote:
>
> Hello netdisco group,
>
>
>
> Does anyone know how to modify for the netdisco swagger to work via https?
>
>
>
> Ive got apache https running on front end that points to netdisco on port
> 5000
>
>
>
> When I wanted to test swagger the only drop down available is for HTTP,
> but not HTTPS, anyway to put https?
>
>
>
> Thanks
>
>
>
> _______________________________________________
> Netdisco mailing list
> netdisco-users@lists.sourceforge.net
> https://sourceforge.net/p/netdisco/mailman/netdisco-users/
>
> _______________________________________________
> Netdisco mailing list
> netdisco-users@lists.sourceforge.net
> https://sourceforge.net/p/netdisco/mailman/netdisco-users/
>
--- End Message ---
--- Begin Message ---
Hey, just an update on this, I did manage to get it working developing a custom
SSH Arpnip for Aruba Controllers
Ive put it here, can be included in future release
https://github.com/netdisco/netdisco/issues/1258
On 11/8/2022, 20:22, "Christian Ramseyer" <ramse...@netnea.com
<mailto:ramse...@netnea.com>> wrote:
On 09.08.22 22:04, Muris wrote:
> Thanks, i will try this really appreciate
>
> A question - whats the real reason some of this data cant be gotten out of
> snmp and it needs ssh just to get arps?
>
> Is it some limitations of the aruba product on snmp?
For starters, the standard MIB for ARP tables is ancient and
insufficient for todays technology, it's just a flat list and knows
nothing about VRFs, multiple IP stacks, independent VMs inside your
fancy new firewall etc. It's pretty useless except for primitive devices.
So then every vendor has it quirks. Maybe Aruba Controllers even have a
special MIB for it, I don't know if anybody checked.
But SSH is the most reliable way to get it, and it's also pretty easy to
implement in a few lines of code.
> I dont get how like cisco just works and anything hp/aruba requires
so much tweaking
I wouldn't say Cisco is much better, if you look closely you'll find
that six of the SSHCollector modules are for various Cisco product lines
:) It's just the most popular brand so many people have bashed their
head against it already.
Cheers
Christian
--
Christian Ramseyer, netnea ag
Network Management. Security. OpenSource.
https://www.netnea.com <https://www.netnea.com>
Phone: +41 79 644 77 64
--- End Message ---
_______________________________________________
Netdisco mailing list - Digest Mode
netdisco-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/netdisco-users
