TMG7800 SNMP support - Revision history

Luc Morissette at 20:26, 15 February 2011

2011-02-15T20:26:51Z

← Older revision		Revision as of 16:26, 15 February 2011
Line 33:		Line 33:

	#If your management interface has direct Internet access, install <code>net-snmp-utils</code>: \<br>		#If your management interface has direct Internet access, install <code>net-snmp-utils</code>: \<br>
	<pre~~><code~~>yum install net-snmp-utils~~</code>~~		<pre>yum install net-snmp-utils
	</pre>		</pre>
	*If your TMG is not connected to the Internet and CentOs5 is used, the <code>net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-5.3.2.2-9.el5.x86_64.rpm</code> and <code>lm_sensors-2.10.7-9.el5.x86_64.rpm</code> packages must be downloaded from the [http://repo.telcobridges.com/centos/5.5/os/x86_64/CentOS/ the CentOs mirror distribution packages site], uploaded to the TMG and installed using <code></code><br>		*If your TMG is not connected to the Internet and CentOs5 is used, the <code>net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-5.3.2.2-9.el5.x86_64.rpm</code> and <code>lm_sensors-2.10.7-9.el5.x86_64.rpm</code> packages must be downloaded from the [http://repo.telcobridges.com/centos/5.5/os/x86_64/CentOS/ the CentOs mirror distribution packages site], uploaded to the TMG and installed using <code></code><br>
	<pre>yum localinstall net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm net-snmp-5.3.2.2-9.el5.x86_64.rpm lm_sensors-2.10.7-9.el5.x86_64.rpm</pre>		<pre>yum localinstall net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm net-snmp-5.3.2.2-9.el5.x86_64.rpm lm_sensors-2.10.7-9.el5.x86_64.rpm</pre>
Line 42:		Line 42:
	<pre>Status -> Adapters -> Licensed Features -> search for SNMP		<pre>Status -> Adapters -> Licensed Features -> search for SNMP
	</pre>		</pre>
	If it does not appear, contact TelcoBridges support group<br>		If it does not appear, contact TelcoBridges support group<br>

	== Enabling IP forwarding ==		== Enabling IP forwarding ==

Luc Morissette: minor

2011-02-15T20:26:31Z

minor

← Older revision		Revision as of 16:26, 15 February 2011
Line 1:		Line 1:
	This article explains how to configure <code>iptables</code> in order to seamlessly forward [[SNMP]] traffic from the TMG's management interface to the adapter and the other way around. This allows an external equipment to request SNMP information from the adapter by querying the TMG management interface's IP address.		This article explains how to configure <code>iptables</code> in order to seamlessly forward [[SNMP]] traffic from the TMG's management interface to the adapter and the other way around. This allows an external equipment to request SNMP information from the adapter by querying the TMG management interface's IP address.

	In order to achieve most of the instructions in this article, you will need to login as <code>root</code> on your TMG (or an account with superuser privileges).		In order to achieve most of the instructions in this article, you will need to login as <code>root</code> on your TMG (or an account with superuser privileges).

	== Requirements ==		== Requirements ==

	The release installed on the target system must be one of the following:		The release installed on the target system must be one of the following:
	*2.3.36 RC1 or later 2.3.x releases
	*2.4.28 RC1 or later 2.4.x releases		*2.3.36 RC1 or later 2.3.x releases
			*2.4.28 RC1 or later 2.4.x releases
	*2.5.10 RC1 or later 2.5.x releases		*2.5.10 RC1 or later 2.5.x releases

	The target unit is a TMG5800 or TMG7800. See [[TMG SNMP support]] for TMG800 and TMG3200.		The target unit is a TMG5800 or TMG7800. See [[TMG SNMP support]] for TMG800 and TMG3200. Your license must allow the use of SNMP on the adapter.
	Your license must allow the use of SNMP on the adapter.

	== Collect information about your TMG ==		== Collect information about your TMG ==
Line 24:		Line 24:
	A typical TMG setup will have the following configuration. This configuration will be used in the following instructions; replace the corresponding settings with your own.		A typical TMG setup will have the following configuration. This configuration will be used in the following instructions; replace the corresponding settings with your own.

	*Management interface IP: <code>DHCP</code>		*Management interface IP: <code>DHCP</code>
	*Internal Linux IP: <code>172.31.1.2</code>		*Internal Linux IP: <code>172.31.1.2</code>
	*Internal adapter IP: <code>172.31.1.1</code>		*Internal adapter IP: <code>172.31.1.1</code>

Line 32:		Line 32:
	To know if <code>net-snmp-utils</code> is already installed, invoke <code>snmpget</code> on the command line of your TMG Linux host. The <code>snmpget</code> tool is used on the TMG to verify if the SNMP feature is available and working from the adapter.		To know if <code>net-snmp-utils</code> is already installed, invoke <code>snmpget</code> on the command line of your TMG Linux host. The <code>snmpget</code> tool is used on the TMG to verify if the SNMP feature is available and working from the adapter.

	#If your management interface has direct Internet access, install <code>net-snmp-utils</code>: <code>yum install net-snmp-utils</code>		#If your management interface has direct Internet access, install <code>net-snmp-utils</code>: \<br>
	#If your TMG is not connected to the Internet and CentOs5 is used, the <code>net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-5.3.2.2-9.el5.x86_64.rpm</code> and <code>lm_sensors-2.10.7-9.el5.x86_64.rpm</code> packages must be downloaded from the [http://repo.telcobridges.com/centos/5.5/os/x86_64/CentOS/ the CentOs mirror distribution packages site], uploaded to the TMG and installed using <code></code><br>		<pre><code>yum install net-snmp-utils</code>
			</pre>
			*If your TMG is not connected to the Internet and CentOs5 is used, the <code>net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-5.3.2.2-9.el5.x86_64.rpm</code> and <code>lm_sensors-2.10.7-9.el5.x86_64.rpm</code> packages must be downloaded from the [http://repo.telcobridges.com/centos/5.5/os/x86_64/CentOS/ the CentOs mirror distribution packages site], uploaded to the TMG and installed using <code></code><br>
	<pre>yum localinstall net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm net-snmp-5.3.2.2-9.el5.x86_64.rpm lm_sensors-2.10.7-9.el5.x86_64.rpm</pre>		<pre>yum localinstall net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm net-snmp-5.3.2.2-9.el5.x86_64.rpm lm_sensors-2.10.7-9.el5.x86_64.rpm</pre>
	~~     4.~~ Test SNMP: <code></code><br>		*Test SNMP: <code></code><br>
	<pre>snmpget -d -v 1 -c public 172.31.1.1 SNMPv2-MIB::sysUpTime.0</pre>		<pre>snmpget -d -v 1 -c public 172.31.1.1 SNMPv2-MIB::sysUpTime.0</pre>
	If this command does not work, check the Web portal to see if the unit has the SNMP license		If this command does not work, check the Web portal to see if the unit has the SNMP license
	<pre>Status -> Adapters -> Licensed Features -> search for SNMP		<pre>Status -> Adapters -> Licensed Features -> search for SNMP
	</pre>		</pre>
	If it does not appear, contact TelcoBridges support group<br>		If it does not appear, contact TelcoBridges support group<br>

	== Enabling IP forwarding ==		== Enabling IP forwarding ==
Line 50:		Line 52:

	'''NOTE''': A reboot is required to activate this setting. It is possible to enable it immediately by setting the contents of <code>/proc/sys/net/ipv4/ip_forward</code> to <code>1</code>. For example: <code></code>		'''NOTE''': A reboot is required to activate this setting. It is possible to enable it immediately by setting the contents of <code>/proc/sys/net/ipv4/ip_forward</code> to <code>1</code>. For example: <code></code>
	<pre>echo 1 > /proc/sys/net/ipv4/ip_forward</pre>		<pre>echo 1 > /proc/sys/net/ipv4/ip_forward</pre>

	== Configuring iptables ==		== Configuring iptables ==

Line 68:		Line 69:
	Permanently save the rules by using		Permanently save the rules by using
	<pre>service iptables save</pre>		<pre>service iptables save</pre>
	If everything worked, SNMP requests should be answered from the TMG's management interface.		If everything worked, SNMP requests should be answered from the TMG's management interface.

			== References ==

	~~== References ==~~		*[http://en.wikipedia.org/wiki/Iptables Wikipedia's iptables article]
	*[http://en.wikipedia.org/wiki/Iptables Wikipedia's iptables article]		*[http://www.netfilter.org/ Official iptables website]
	*[http://www.netfilter.org/ Official iptables website]
	*<code>man iptables</code>		*<code>man iptables</code>

			<br>

Cboulanger: /* Requirements */

2011-02-02T18:38:30Z

Requirements

← Older revision		Revision as of 14:38, 2 February 2011
Line 10:		Line 10:
	*2.5.10 RC1 or later 2.5.x releases		*2.5.10 RC1 or later 2.5.x releases

	The target unit is a TMG5800 or TMG7800.		The target unit is a TMG5800 or TMG7800. See [[TMG SNMP support]] for TMG800 and TMG3200.
	Your license must allow the use of SNMP on the adapter.		Your license must allow the use of SNMP on the adapter.

Cboulanger: /* Configuring iptables */

2011-02-02T18:29:30Z

Configuring iptables

← Older revision		Revision as of 14:29, 2 February 2011
Line 57:		Line 57:

	iptables -t nat -A PREROUTING -p udp -i mgmt0 --dport 161 -j DNAT --to-destination 172.31.1.1		iptables -t nat -A PREROUTING -p udp -i mgmt0 --dport 161 -j DNAT --to-destination 172.31.1.1
	iptables -t nat -A POSTROUTING -p udp -o ~~eth0~~ --dport 161 -j MASQUERADE		iptables -t nat -A POSTROUTING -p udp -o int0 --dport 161 -j MASQUERADE

	'''OR''' input the following lines if you are not using DHCP and want to use SNAT instead of MASQUERADE:		'''OR''' input the following lines if you are not using DHCP and want to use SNAT instead of MASQUERADE:

	iptables -t nat -A PREROUTING -p udp -i mgmt0 --dport 161 -j DNAT --to-destination 172.31.1.1		iptables -t nat -A PREROUTING -p udp -i mgmt0 --dport 161 -j DNAT --to-destination 172.31.1.1
	iptables -t nat -A POSTROUTING -p udp -o ~~eth0~~ --dport 161 -j SNAT --to-source 172.31.1.2		iptables -t nat -A POSTROUTING -p udp -o int0 --dport 161 -j SNAT --to-source 172.31.1.2

	Consult the added rules by using <code></code>		Consult the added rules by using <code></code>

Cboulanger: /* Configuring iptables */

2011-02-02T18:29:14Z

Configuring iptables

← Older revision		Revision as of 14:29, 2 February 2011
Line 56:		Line 56:
	Input the following lines at the command line:		Input the following lines at the command line:

	iptables -t nat -A PREROUTING -p udp -i ~~eth0~~ --dport 161 -j DNAT --to-destination 172.31.1.1		iptables -t nat -A PREROUTING -p udp -i mgmt0 --dport 161 -j DNAT --to-destination 172.31.1.1
	iptables -t nat -A POSTROUTING -p udp -o ~~eth1~~ --dport 161 -j MASQUERADE		iptables -t nat -A POSTROUTING -p udp -o eth0 --dport 161 -j MASQUERADE

	'''OR''' input the following lines if you are not using DHCP and want to use SNAT instead of MASQUERADE:		'''OR''' input the following lines if you are not using DHCP and want to use SNAT instead of MASQUERADE:

	iptables -t nat -A PREROUTING -p udp -i ~~eth0~~ --dport 161 -j DNAT --to-destination 172.31.1.1		iptables -t nat -A PREROUTING -p udp -i mgmt0 --dport 161 -j DNAT --to-destination 172.31.1.1
	iptables -t nat -A POSTROUTING -p udp -o ~~eth1~~ --dport 161 -j SNAT --to-source 172.31.1.2		iptables -t nat -A POSTROUTING -p udp -o eth0 --dport 161 -j SNAT --to-source 172.31.1.2

	Consult the added rules by using <code></code>		Consult the added rules by using <code></code>

Cboulanger: /* Collect information about your TMG */

2011-02-02T18:27:56Z

Collect information about your TMG

← Older revision		Revision as of 14:27, 2 February 2011
Line 19:		Line 19:
	#The IP address of the TMG's management interface (can be obtained using <code>ifconfig mgmt0</code>). If you are using DHCP, it is not needed.		#The IP address of the TMG's management interface (can be obtained using <code>ifconfig mgmt0</code>). If you are using DHCP, it is not needed.
	#The IP addresses of both the Linux host and the adapter on the internal interface:		#The IP addresses of both the Linux host and the adapter on the internal interface:
	##The host IP address can be obtained using <code>ifconfig ~~eth0~~</code>.		##The host IP address can be obtained using <code>ifconfig int0</code>.
	##The adapter ''host'' IP address can be obtained by opening a shell to the adapter and using <code>print_net</code>.		##The adapter ''host'' IP address can be obtained by opening a shell to the adapter and using <code>print_net</code>.

Cboulanger: /* Collect information about your TMG */

2011-02-02T18:27:05Z

Collect information about your TMG

← Older revision		Revision as of 14:27, 2 February 2011
Line 19:		Line 19:
	#The IP address of the TMG's management interface (can be obtained using <code>ifconfig mgmt0</code>). If you are using DHCP, it is not needed.		#The IP address of the TMG's management interface (can be obtained using <code>ifconfig mgmt0</code>). If you are using DHCP, it is not needed.
	#The IP addresses of both the Linux host and the adapter on the internal interface:		#The IP addresses of both the Linux host and the adapter on the internal interface:
	##The host IP address can be obtained using <code>ifconfig ~~eth1~~</code>.		##The host IP address can be obtained using <code>ifconfig eth0</code>.
	##The adapter ''host'' IP address can be obtained by opening a shell to the adapter and using <code>print_net</code>.		##The adapter ''host'' IP address can be obtained by opening a shell to the adapter and using <code>print_net</code>.

Cboulanger: /* Installing iptables */

2011-02-02T18:24:50Z

Installing iptables

@@ Line 51: / Line 51: @@
 '''NOTE''': A reboot is required to activate this setting. It is possible to enable it immediately by setting the contents of <code>/proc/sys/net/ipv4/ip_forward</code> to <code>1</code>. For example: <code></code>
 <pre>echo 1 &gt; /proc/sys/net/ipv4/ip_forward</pre>
 == Configuring iptables  ==

Cboulanger: /* Installing net-snmp-utils (optional) */

2011-02-02T18:18:01Z

Installing net-snmp-utils (optional)

← Older revision		Revision as of 14:18, 2 February 2011
Line 33:		Line 33:

	#If your management interface has direct Internet access, install <code>net-snmp-utils</code>: <code>yum install net-snmp-utils</code>		#If your management interface has direct Internet access, install <code>net-snmp-utils</code>: <code>yum install net-snmp-utils</code>
	#If your TMG is not connected to the Internet and CentOs5 is used, the <code>net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-5.3.2.2-9.el5.x86_64.rpm</code> and <code> lm_sensors-2.10.7-9.el5.x86_64.rpm</code> packages must be downloaded from the [http://repo.telcobridges.com/centos/5.5/os/x86_64/CentOS/ the CentOs mirror distribution packages site], uploaded to the TMG and installed using <code></code><br>		#If your TMG is not connected to the Internet and CentOs5 is used, the <code>net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-5.3.2.2-9.el5.x86_64.rpm</code> and <code>lm_sensors-2.10.7-9.el5.x86_64.rpm</code> packages must be downloaded from the [http://repo.telcobridges.com/centos/5.5/os/x86_64/CentOS/ the CentOs mirror distribution packages site], uploaded to the TMG and installed using <code></code><br>
	<pre>yum localinstall net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm net-snmp-5.3.2.2-9.el5.x86_64.rpm lm_sensors-2.10.7-9.el5.x86_64.rpm</pre>		<pre>yum localinstall net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm net-snmp-5.3.2.2-9.el5.x86_64.rpm lm_sensors-2.10.7-9.el5.x86_64.rpm</pre>
	4. Test SNMP: <code></code><br>		4. Test SNMP: <code></code><br>
	<pre>snmpget -d -v 1 -c public 172.31.1.1 SNMPv2-MIB::sysUpTime.0</pre>		<pre>snmpget -d -v 1 -c public 172.31.1.1 SNMPv2-MIB::sysUpTime.0</pre>

Cboulanger: /* Installing net-snmp-utils (optional) */

2011-02-02T18:16:02Z

Installing net-snmp-utils (optional)

← Older revision		Revision as of 14:16, 2 February 2011
Line 33:		Line 33:

	#If your management interface has direct Internet access, install <code>net-snmp-utils</code>: <code>yum install net-snmp-utils</code>		#If your management interface has direct Internet access, install <code>net-snmp-utils</code>: <code>yum install net-snmp-utils</code>
	#If your TMG is not connected to the Internet and CentOs5 is used, the <code>net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm</code> ~~and~~ <code>net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm</code> packages must be downloaded from the [http://repo.telcobridges.com/centos/5.5/os/x86_64/CentOS/ the CentOs mirror distribution packages site], uploaded to the TMG and installed using <code></code><br>		#If your TMG is not connected to the Internet and CentOs5 is used, the <code>net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm</code>, <code>net-snmp-5.3.2.2-9.el5.x86_64.rpm</code> and <code> lm_sensors-2.10.7-9.el5.x86_64.rpm</code> packages must be downloaded from the [http://repo.telcobridges.com/centos/5.5/os/x86_64/CentOS/ the CentOs mirror distribution packages site], uploaded to the TMG and installed using <code></code><br>
	<pre>yum localinstall net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm</pre>		<pre>yum localinstall net-snmp-libs-5.3.2.2-9.el5.x86_64.rpm net-snmp-utils-5.3.2.2-9.el5.x86_64.rpm net-snmp-5.3.2.2-9.el5.x86_64.rpm lm_sensors-2.10.7-9.el5.x86_64.rpm</pre>
	4. Test SNMP: <code></code><br>		4. Test SNMP: <code></code><br>
	<pre>snmpget -d -v 1 -c public 172.31.1.1 SNMPv2-MIB::sysUpTime.0</pre>		<pre>snmpget -d -v 1 -c public 172.31.1.1 SNMPv2-MIB::sysUpTime.0</pre>