Ad Widget

Collapse

Zabbix 5.4 Mikrotik SNMP

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • MattK
    Junior Member
    • Jul 2021
    • 15

    #1

    Zabbix 5.4 Mikrotik SNMP

    I am using the Zabbix 5.4 Mikrotik Template listed here: https://www.zabbix.com/integrations/mikrotik but am running into some issues.

    Problem 1
    I would like to use SNMPv3 to encrypt traffic from the router, however, I get the following when I attempt to connect:
    Click image for larger version  Name:	Screenshot 2021-09-30 083113.png Views:	0 Size:	19.3 KB ID:	432411

    This is what I have configured on Zabbix:
    Click image for larger version  Name:	Screenshot 2021-09-30 083142.png Views:	0 Size:	37.9 KB ID:	432412
    Click image for larger version  Name:	image_20161.png Views:	7 Size:	11.1 KB ID:	432415

    And this is what I have configured on the Mikrotik router (I have checked that the Authentication passphrase and Privacy passphrase are correct):
    Click image for larger version  Name:	Screenshot 2021-09-30 083452.png Views:	0 Size:	21.2 KB ID:	432413Click image for larger version  Name:	Screenshot 2021-09-30 083523.png Views:	0 Size:	29.3 KB ID:	432414


    I have tried using snmpwalk which seems to work find and I also tried setting the Timeout=30 in zabbix_server.conf.

    We also do have it working with SNMPv2 though would much prefer to have SNMPv3 encryption.

    Here are the logs I'm getting:
    Code:
    SNMP agent item "net.if.out.discards[ifOutDiscards.10]" on host "30000-IPC_MKOffice-RT1" failed: another network error, wait for 15 seconds
    SNMP agent item "net.if.out.errors[ifOutErrors.2]" on host "30000-IPC_MKOffice-RT1" failed: another network error, wait for 15 seconds
    SNMP agent item "net.if.out.errors[ifOutErrors.3]" on host "30000-IPC_MKOffice-RT1" failed: another network error, wait for 15 seconds
    SNMP agent item "net.if.out.errors[ifOutErrors.8]" on host "30000-IPC_MKOffice-RT1" failed: another network error, wait for 15 seconds
    SNMP agent item "net.if.out.errors[ifOutErrors.9]" on host "30000-IPC_MKOffice-RT1" failed: another network error, wait for 15 seconds
    temporarily disabling SNMP agent checks on host "30000-IPC_MKOffice-RT1": interface unavailable

    Problem 2
    This is assuming we are using SNMPv2...

    When CAPsMAN is configured on the router, we constantly get that interface wlan1() and interface wlan2() go up and down.
    There are no issues with the router itself and CAPsMAN seems to be working fine.
    Is there any way of fixing this?

    Any help would be greatly appreciated...
    Last edited by MattK; 30-09-2021, 01:09.
  • MattK
    Junior Member
    • Jul 2021
    • 15

    #2
    Any help would be much appreciated...

    Comment

    • tim.mooney
      Senior Member
      • Dec 2012
      • 1427

      #3
      What OS and OS version are the proxy or zabbix-server that are doing the SNMP queries?

      You said you tried snmpwalk and it worked. Do you mean snmpwalk using v3, or snmpwalk in general. Also, did you actually run the snmpwalk from the zabbix-proxy or zabbix-server, or did you run it from somewhere else?

      I'm asking these specific questions because I know that some Linux distros have completely removed support for some older protocols and cipher suites, and some things are switched off by default (for example, see crypto-policies(7) on RHEL 8 or any of its respins). I'm just wondering if you're using a new-enough OS on your proxy or server that it might somehow be running afoul of OS policies or presence of legacy algorithms. That's just speculation, but it's one thing I would look into.

      Comment

      • MattK
        Junior Member
        • Jul 2021
        • 15

        #4
        OS: Ubuntu 20.04
        Proxy: Currently not using Zabbix proxies

        Yes snmpwalk v3 worked fine from the Zabbix server itself...

        Comment

        Working...