SNMP support for radius problem
Dear I have useing freeradius since long time and it is working fine for me but i have some issue thats why i want support for SNMP. means i want to monitor my remote freeradius server through SNMP but it is not work i have read many document FAQ but i didn't get satisfectory ans... My configuration I have compile freeradius with snmp support ( --with-snmp ) $ cat /etc/raddb/snmp.conf smux_password = verysecret snmp_write_access = no $ cat /etc/snmpd/snmpd.conf <---add this line smuxpeer .1.3.6.1.4.1.3317.1.3.1 verysecret restart snmpd daemon $radiusd -X <--- debug mode main: smux_password = "verysecret" main: snmp_write_access = no SMUX connect try 1 SMUX open oid: 1.3.6.1.4.1.3317.1.3.1 SMUX open progname: radiusd SMUX open password: verysecret SMUX register oid: 1.3.6.1.2.1.67.1.1.1.1 SMUX register priority: -1 SMUX register operation: 1 SMUX register oid: 1.3.6.1.2.1.67.2.1.1.1 SMUX register priority: -1 SMUX register operation: 1 Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. SMUX read start SMUX read len: 12 SMUX message received type: 67 rest len: 4 SMUX_RRSP SMUX_RRSP value: 0 errstat: 0 --- Walking the entire request list --- Nothing to do. Sleeping until we see a request. Now i have run snmpwalk but i didnt get any output from radius $snmpwalk -v 1 -c public localhost .1.3.6.1.2.1.67.1.1.1.1 End of MIB also i have try many veriasion with MIB but i didntget ans and i m confusing about snmp community when i try with this community verysecret i got Time out so what is the difference between verysecret and public ??? which comunity i use to qurey with my freeradius and how can i check my radius comiple successfuly with SNMP support ??? $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers
On Wednesday 28 March 2007 08:17:00 satish patel wrote:
main: smux_password = "verysecret" main: snmp_write_access = no SMUX connect try 1 SMUX open oid: 1.3.6.1.4.1.3317.1.3.1 SMUX open progname: radiusd SMUX open password: verysecret SMUX register oid: 1.3.6.1.2.1.67.1.1.1.1 SMUX register priority: -1 SMUX register operation: 1 SMUX register oid: 1.3.6.1.2.1.67.2.1.1.1 SMUX register priority: -1 SMUX register operation: 1 Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. SMUX read start SMUX read len: 12 SMUX message received type: 67 rest len: 4 SMUX_RRSP SMUX_RRSP value: 0 errstat: 0 --- Walking the entire request list --- Nothing to do. Sleeping until we see a request.
This looks good. It successfully registered with the local SNMP daemon, which means FreeRADIUS is built with SNMP support and is properly configured.
Now i have run snmpwalk but i didnt get any output from radius
$snmpwalk -v 1 -c public localhost .1.3.6.1.2.1.67.1.1.1.1 End of MIB
This looks correct as well. Make sure the public community has permission to view that OID tree. I did test my local SNMP config and receive the same results when I restrict the public community from accessing that OID. Kevin Bonner
I am confusing between to community key one which is store in cat /etc/raddb/snmp.cong smux_password = verysecret and second which is located in /etc/snmp/snmpd.conf smuxpeer .1.3.6.1.4.1.3317.1.3.1 verysecret rocommunity public so which one i use to query to freeradius ?? verysecret ??? public ???? can any one explain me which one i use with snmpwalk command public or verysecret ??? when i use public i it give me system information not radius and when i use verysecret it give me nothing timeout ??? Kevin Bonner <keb@pa.net> wrote: On Wednesday 28 March 2007 08:17:00 satish patel wrote:
main: smux_password = "verysecret" main: snmp_write_access = no SMUX connect try 1 SMUX open oid: 1.3.6.1.4.1.3317.1.3.1 SMUX open progname: radiusd SMUX open password: verysecret SMUX register oid: 1.3.6.1.2.1.67.1.1.1.1 SMUX register priority: -1 SMUX register operation: 1 SMUX register oid: 1.3.6.1.2.1.67.2.1.1.1 SMUX register priority: -1 SMUX register operation: 1 Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. SMUX read start SMUX read len: 12 SMUX message received type: 67 rest len: 4 SMUX_RRSP SMUX_RRSP value: 0 errstat: 0 --- Walking the entire request list --- Nothing to do. Sleeping until we see a request.
This looks good. It successfully registered with the local SNMP daemon, which means FreeRADIUS is built with SNMP support and is properly configured.
Now i have run snmpwalk but i didnt get any output from radius
$snmpwalk -v 1 -c public localhost .1.3.6.1.2.1.67.1.1.1.1 End of MIB
This looks correct as well. Make sure the public community has permission to view that OID tree. I did test my local SNMP config and receive the same results when I restrict the public community from accessing that OID. Kevin Bonner - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers
satish patel wrote:
I am confusing between to community key one which is store in cat /etc/raddb/snmp.cong
smux_password = verysecret
That's an SMUX password, not a community key.
and second which is located in /etc/snmp/snmpd.conf
smuxpeer .1.3.6.1.4.1.3317.1.3.1 verysecret
That's a SNMP key, and an SMUX password.
rocommunity public
so which one i use to query to freeradius ??
verysecret ???
No.
public ????
can any one explain me which one i use with snmpwalk command public or verysecret ???
when i use public i it give me system information not radius and when i use verysecret it give me nothing timeout ???
I think you should read more about how SNMP works. My conclusion is that your SNMP server is not contacting FreeRADIUS for the delegated tree. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Thanks for help i got it and now my freeradius working with snmpd and it is working fine now can u tell me what i monitor through snmpd means can i check how much users login currently and how much failed and what stat i can check throgh this feature $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers
On Thursday 29 March 2007 12:47:38 satish patel wrote:
Thanks for help
i got it and now my freeradius working with snmpd and it is working fine now can u tell me what i monitor through snmpd means can i check how much users login currently and how much failed and what stat i can check throgh this feature
The RADIUS mibs are in the mibs/ directory of the freeradius release. You should be able to monitor any of those values. -Kevin
participants (3)
-
Alan DeKok -
Kevin Bonner -
satish patel