Re: NET-SNMP version: 5.7.3 and IPv6
Can you paste the end of your configuration run, where it summarizes the results? The “rocommunity6” configuration directive will be available if that configuration summary includes “UDPIPv6” in the “Network transport support:” list - e.g., - Net-SNMP configuration summary: - SNMP Versions Supported:1 2c 3 Building for: linux Net-SNMP Version: 5.8.pre1 Network transport support: Callback Unix Alias TCP UDP TCPIPv6 UDPIPv6 IPv4Base SocketBase TCPBase UDPIPv4Base UDPBase IPv6Base How did you build your net-snmp? Is there any chance that you built the agent/ subdirectory without IPv6 support, and the snmplib/ subdirectory with IPv6 support? That would cause “rocommunity6” to not work but “agentaddress udp6:…” would work. Bill On Wed, Jan 24, 2018 at 11:42 AM, Simon Chamlian wrote: > Seems like --enable-ipv6 is not enough to make SNMPv2 work with IPv6 > since: > > # ./snmpd -H 2>&1 | grep community > trapsink host [community] [port] > trap2sinkhost [community] [port] > informsink host [community] [port] > trapcommunitycommunity-string > com2sec [-Cn CONTEXT] secName > IPv4-network-address[/netmask] community > com2sec6 [-Cn CONTEXT] secName > IPv6-network-address[/netmask] community > com2secunix [-Cn CONTEXT] secName sockpath community > authcommunityauthtype1,authtype2 community > [default|hostname|network/bits [oid|-V view [context]]] > rwcommunity community [default|hostname|network/bits > [oid|-V view [context]]] > rocommunity community [default|hostname|network/bits > [oid|-V view [context]]] > > does not show rwcommunity6 and rocommunity6 . > > So what other flags do I need in addition to (--enable-ipv6) to re-compile > to make rwcommunity6/rocommunity6 available? > > S. > > > > On Mon, Jan 15, 2018 at 2:37 PM, Simon Chamlian > wrote: > >> Hi, >> >> Just recompiled the agent by enabling IPv6 ( --enable-ipv6). >> >> The agent is working fine but don't seem to be able to use IPv6. >> >> Example: >> >> # snmpget -v 3 -u Admin -a MD5 -A Admin-00 -l authNoPriv 172.27.42.199 >> MPBC-1RU-MIB::mpbc1RUNEID.0 -Oqv >> "TestNew" >> >> works fine. >> >> >> In Ipv6: >> >> # snmpget -v 3 -u Admin -a MD5 -A Admin-00 -l authNoPriv >> udp6:'[fe80::6eff:beff:fe02:d0%eth0]':161 MPBC-1RU-MIB::mpbc1RUNEID.0 >> -Oqv >> snmpget: Timeout >> >> I also tried without the port >> # snmpget -v 3 -u Admin -a MD5 -A Admin-00 -l authNoPriv >> udp6:'[fe80::6eff:beff:fe02:d0%eth0]' MPBC-1RU-MIB::mpbc1RUNEID.0 -Oqv >> snmpget: Timeout >> >> >> Gives me timeout. What am I doing wrong? Do I need any special >> instructions in snmpd.conf file? >> >> Note that when I launch the agent, I get the following error message in >> the log: >> Error opening specified endpoint "" >> Server Exiting with code 1 >> >> But the agent works fine with IPv4. >> >> Thanks, >> S >> >> > > > -- > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > ___ > Net-snmp-coders mailing list > Net-snmp-coders@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/net-snmp-coders > > -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: NET-SNMP version: 5.7.3 and IPv6
On Wed, Jan 17, 2018 at 10:58:40AM -0500, Simon Chamlian wrote: > but these tokens are not recognized: > ./snmpd.conf: line 12: Warning: Unknown token: rocommunity6. > ./snmpd.conf: line 13: Warning: Unknown token: rwcommunity6. This means that snmpd did not understand you config, and accordingly it does not support community access for IPv6. Are you sure you are running the version compiled with --enable-ipv6? What other config options did you use? /Niels -- Niels Baggesen - @home - Århus - Denmark - n...@users.sourceforge.net The purpose of computing is insight, not numbers --- R W Hamming -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: NET-SNMP version: 5.7.3 and IPv6
Seems like --enable-ipv6 is not enough to make SNMPv2 work with IPv6 since: # ./snmpd -H 2>&1 | grep community trapsink host [community] [port] trap2sinkhost [community] [port] informsink host [community] [port] trapcommunitycommunity-string com2sec [-Cn CONTEXT] secName IPv4-network-address[/netmask] community com2sec6 [-Cn CONTEXT] secName IPv6-network-address[/netmask] community com2secunix [-Cn CONTEXT] secName sockpath community authcommunityauthtype1,authtype2 community [default|hostname|network/bits [oid|-V view [context]]] rwcommunity community [default|hostname|network/bits [oid|-V view [context]]] rocommunity community [default|hostname|network/bits [oid|-V view [context]]] does not show rwcommunity6 and rocommunity6 . So what other flags do I need in addition to (--enable-ipv6) to re-compile to make rwcommunity6/rocommunity6 available? S. On Mon, Jan 15, 2018 at 2:37 PM, Simon Chamlian wrote: > Hi, > > Just recompiled the agent by enabling IPv6 ( --enable-ipv6). > > The agent is working fine but don't seem to be able to use IPv6. > > Example: > > # snmpget -v 3 -u Admin -a MD5 -A Admin-00 -l authNoPriv 172.27.42.199 > MPBC-1RU-MIB::mpbc1RUNEID.0 -Oqv > "TestNew" > > works fine. > > > In Ipv6: > > # snmpget -v 3 -u Admin -a MD5 -A Admin-00 -l authNoPriv > udp6:'[fe80::6eff:beff:fe02:d0%eth0]':161 MPBC-1RU-MIB::mpbc1RUNEID.0 -Oqv > snmpget: Timeout > > I also tried without the port > # snmpget -v 3 -u Admin -a MD5 -A Admin-00 -l authNoPriv > udp6:'[fe80::6eff:beff:fe02:d0%eth0]' MPBC-1RU-MIB::mpbc1RUNEID.0 -Oqv > snmpget: Timeout > > > Gives me timeout. What am I doing wrong? Do I need any special > instructions in snmpd.conf file? > > Note that when I launch the agent, I get the following error message in > the log: > Error opening specified endpoint "" > Server Exiting with code 1 > > But the agent works fine with IPv4. > > Thanks, > S > > -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: NET-SNMP version: 5.7.3 and IPv6
I am sure about the compilation with --enable-ipv6 because it works with snmp v3 # snmpget -v 3 -u Admin -a MD5 -A Admin-00 -l authNoPriv 172.27.42.15 MPBC-1RU-MIB::mpbc1RUNEID.0 -Oqv "VERSA_199" # snmpget -v 3 -u Admin -a MD5 -A Admin-00 -l authNoPriv [fe80::6eff:beff:fe02:d0%eth0] MPBC-1RU-MIB::mpbc1RUNEID.0 -Oqv "VERSA_199" It is only with snmpv2 that both addresses (Ipv4/IPv6) don't work. # snmpget -v 2c -c public 172.27.42.15 MPBC-1RU-MIB::mpbc1RUNEID.0 MPBC-1RU-MIB::mpbc1RUNEID.0 = STRING: "VERSA_199" # snmpget -v 2c -c public [fe80::6eff:beff:fe02:d0%eth0] MPBC-1RU-MIB::mpbc1RUNEID.0 Timeout: No Response from [fe80::6eff:beff:fe02:d0%eth0]. >From what I understand from your answer is that having rocommunity6/rwcommunity6 in the snmpd.conf file is a must? On Wed, Jan 24, 2018 at 2:21 AM, Niels Baggesen wrote: > On Wed, Jan 17, 2018 at 10:58:40AM -0500, Simon Chamlian wrote: > > but these tokens are not recognized: > > ./snmpd.conf: line 12: Warning: Unknown token: rocommunity6. > > ./snmpd.conf: line 13: Warning: Unknown token: rwcommunity6. > > This means that snmpd did not understand you config, and accordingly it > does not support community access for IPv6. > > Are you sure you are running the version compiled with --enable-ipv6? > > What other config options did you use? > > /Niels > > -- > Niels Baggesen - @home - Århus - Denmark - n...@users.sourceforge.net > The purpose of computing is insight, not numbers --- R W Hamming > -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Re: NET-SNMP version: 5.7.3 and IPv6
n Wed, Jan 17, 2018 at 10:58:40AM -0500, Simon Chamlian wrote: > but these tokens are not recognized: > ./snmpd.conf: line 12: Warning: Unknown token: rocommunity6. > ./snmpd.conf: line 13: Warning: Unknown token: rwcommunity6. This means that snmpd did not understand you config, and accordingly it does not support community access for IPv6. Are you sure you are running the version compiled with --enable-ipv6? What other config options did you use? /Niels -- Niels Baggesen - @home - Århus - Denmark - n...@users.sourceforge.net The purpose of computing is insight, not numbers --- R W Hamming -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ___ Net-snmp-coders mailing list Net-snmp-coders@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
