Here are some more frequently asked question regarding SNMP.

 

> What versions of IPICS support SNMP?

SNMP was introduced in release 4.6(1).

 

> How do I enable snmp?

SNMP is always "enabled", but you may need to grant client access or configure the list of SNMP trap receivers before it will do anything useful.


See Table 2-37—"SNMP tab in the Options Window" section in the Cisco IPICS Server Administration Guide, Release 4.9(1) - Performing Cisco IPICS System Administrator Tasks [Cisco IP In… for more information.

 

> Where can I find the IPICS MIB?

Cisco IPICS provides a MIB that defines the data that is published via SNMP, and the traps (events) the Cisco IPICS server can send. The MIB is named CISCO-IPICS-MIB.my and is stored on the Cisco IPICS server in the /usr/share/snmp/mibs folder.

 

> Where can I find snmpget on my IPICS server?

It depends on what version of IPICS you have.  Prior to release 4.8(2), these tools were available in /usr/bin.  However, in 4.8(2), the "net-snmp" tools package like snmpget and snmpwalk were removed from the IPICS OS so we could pass security testing.

You may be able to download net-snmp-5.3.2.2-9.el5.rpm from RedHat, if needed.


> Why is the snmpd service not running by default on the IPICS server?

It is disabled because we don’t use it.  Our SNMP support is built directly into the Admin Console web application.  It starts as soon as you startup tomcat. The snmpd daemon could be used to monitor OS MIBs etc, but it cannot be used to monitor Java based apps like IPICS.


> Why doesn't IPICS run on the standard SNMP port 161?

On Linux, only root may open ports less than 1024.  The IPICS processes such as Tomcat run as "ipicsadmin" as a security precaution.  Therefore, it is important to choose an SNMP client or Network Monitoring System that allows you to specify the port value when connecting to IPICS server.


 

IPICS SNMP Tutorial


Server Configuration

  1. Open the IPICS Admin Console web application in your browser.
  2. Login as a system administrator.
  3. Click on Administration->Options->SNMP
  4. Take note of the configuration:
    • SNMP Port : 1610
    • SNMP Trap Port : 1620
    • SNMP Community String (i.e. password) : (the default value is "public")
  5. In the SNMP Host field, add the IP address of the machine where you will run snmpget from. This field accepts multiple comma delimited IP addresses and/or hostnames.
  6. In the Trap Receiver field, add the IP address of the machine where you will run snmpget from. This field accepts multiple comma delimited IP addresses and/or hostnames.
  7. Click Save
  8. You must restart the server to load the new SNMP configuration, so you may either fail over the server from Configuration->High Availability->HA Configuration in the IPICS Admin Console, or you may issue "service ipics restart" on the IPICS server command line.


Examples


Use snmpget on an IPICS 4.6(1) system to query itself for the total number of IPICS channels defined in the system. 

 

Example 1
# snmpget -v 2c localhost:1610 -c public .1.3.6.1.4.1.9.9.802.1.1.1.0
SNMPv2-SMI::enterprises.9.9.802.1.1.1.0 = Gauge32: 86


Use snmpwalk on an IPICS 4.6(1) system to dump all IPICS values.

Example 2
# snmpwalk -v 2c localhost:1610 -c public .1.3.6.1.4.1.9.9.802
SNMPv2-SMI::enterprises.9.9.802.1.1.1.0 = Gauge32: 86
SNMPv2-SMI::enterprises.9.9.802.1.1.2.0 = Gauge32: 86
SNMPv2-SMI::enterprises.9.9.802.1.1.3.0 = Gauge32: 0
...



Use snmpget from a remote Linux machine to query an IPICS 4.8(1) server at 10.1.1.1 for the total number of IPICS channels defined in the system:

Example 3
# snmpget -v 2c 10.1.1.1:1610 -c public@SNMP-IPICS .1.3.6.1.4.1.9.9.802.1.1.1.0
SNMPv2-SMI::enterprises.9.9.802.1.1.1.0 = Gauge32: 86

 

 

Using the iReasoning MIB Browser on a Windows machine:

  1. Download iReasoning MIB Browser
  2. Copy the CISCO-IPICS-MIB.my to C:\Program Files (x86)\ireasoning\mibbrowser\mibs\
  3. Run MIB Browser
  4. Click on File->Load MIB
  5. In the tree, expand these nodes:
    • private
      • enterprises
        • cisco
          • ciscoMgmt
            • ciscoIpicsMIBObjects
  6. In the toolbar, click on "Advanced..."
  7. Change the Address to the IPICS Server address
  8. Change the port to 1610
  9. If you are using IPICS 4.6(1) or IPICS 4.7(1):
    • Change the Read Community string to "public"
  10. If you are using IPICS 4.8(1) or later:
    • Change the Read Community string to "public@SNMP-IPICS"
  11. Select SNMP Version 2
  12. Click OK
  13. (Make sure you setup the server's SNMP options (see above) otherwise it won't work.)

 

Tips

  • If you get timeouts or cannot connect to the IPICS server using snmpget, verify you are using the right SNMP Port.
  • If you get authorization error's when you run snmpget.
    • Verify you entered your IP address in the SNMP Host field
    • Verify the SNMP Community String (i.e. password) is correct.
      • grep "communities" /opt/cisco/ipics/tomcat/current/conf/ipics-snmp.acl
      • Note that starting in 4.8(1), you must append "@SNMP-IPICS" to the community string in your SNMP client. So if you set the community string on the IPICS server to "public", you must use "public@SNMP-IPICS" in your SNMP client.
  • Did you remember to restart your IPICS sever after modifying the SNMP configuration?
  • The IPICS MIB is located on your server in the following location: /usr/share/snmp/mibs/CISCO-IPICS-MIB.my