Telnet reports and ethernet status

[astin]

Hello.
Please can one of you guys tell me which MIB i need to dload in order to register a telnet session to one of my cisco switches. I have loaded several MIBs but ot no avail.
Also, I have now got to the stage that when a client machine disconnects from my network i get a 'link up trap recieved from enterprise x.x.x.x.x etc. the interface is mentioned, but so is a lot of other stuff. I can see where i edit the message - but there seem to be loads of wildcards there # and $ and so on.
I think 'report from ethernet #2' (as I think 2 is the argument for link up should work.)
But Im not sure - and certainly no expert on HPOV.
Any help would be welcome. Basically I would like to know the event and variable I need to put in - or even a refernce to a relevant bit of dyna text.
thanks

 

[nfaber]

astin,

Establishing a telnet session with a Cisco device does not require the loading of any MIBs. I suspect that there is a firewall between your management station and the Cisco device that does not alow telnet. Telnet has been considered an unsecure protocal for some time now, as it sends passwords in clear text.


As far as your other problem, the wildcards are most likely variable bindings that are passed inside the PDU for the trap giving you specific information about the device in question. It is not clear from you message, but you probably are looking at the generic trap openview uses when it recieves a trap and does not have a MIB loaded for it. Do you see something like "no format in trapd.conf" message? If so, follow the OID through the MIB tree to see where you need to load a MIB. From "enterprise x.x.x.x.x" you can follow it down by bringing up your MIB browser, starting at .iso.org.dod.internet.enterprises and clicking on the "Describe" button that will give you the numeric OID identifier. In this way you can follow it down the tree to see what MIB you need to load.

If you cannot find the MIB you can configure the event yourself using the Actons>>Configure Event menu item from the Alarm Browser window and load you own defenition in trapd.conf. In the Event Log Message window of the event configuration, play with adding $1, $2, $3 etc. These are variables that represent the 1st, 2nd, and 3rd variable binding comming in with the trap. Each trap can have any number, and some you might not want to see.

 

[astin]

thanks ever so much for the info. However what I was looking for was a notification that someone was telnetting into my routers/switches. Do I need a mib for mp hpov box to report that this has happened ?
the second piece of advise was perfect - many thanks

 

[nfaber]

astin,

I believe you need to enable the proper traps on the router. I am not sure exactly which traps need to be enabled on the router, your router guys can tell you that (unless you the router guy ;-) ). If your the router guy, go to cisco's web site and perfrom a search from there. The management station cannot poll a router to see if someone happens to be telneting to it, that would be inefficient and you would problably not catch it anyway.

 

[nfaber]

Astin,

Your lucky. I happened to have the following CISCO IOS commands reference lying around. I sanitized it and here it is. This should give you a head start:

SNMP Configuration - Cisco Routers and Switches

1. Create or Modify Access Control for UHG's SNMP community

snmp-server community c15c0uhg ro (access_list_number1)
snmp-server community string rw (access_list_number2) -for AT&T

2. Limit TFTP Servers Used Via SNMP (for AT&T)

Snmp-server tftp-server-list (access_list_number3)

3. Establish the Contact, Location and Serial Number of the SNMP Agent

snmp-server contact Network Administrator
snmp-server location Text Location Descriptor – Used already for Smarts
snmp-server chassis-id Number - information stored by NCFS

4. Configure the Router to Send Traps:

snmp-server trap-source lo0
snmp-server host (management station)


ROUTER:
snmp-sever enable traps snmp
snmp-server enable traps snmp authentication
snmp-sever enable traps isdn call-information
snmp-server enable traps atm pvc
snmp-server enable traps bgp (future)
snmp-server enable traps isdn
no snmp-server enable traps isdn layer2
snmp-sever enable traps config
snmp-sever enable traps entity
snmp-sever enable traps envmon
snmp-sever enable traps frame-relay
snmp-sever enable traps syslog
snmp-sever enable traps dlsw
snmp-sever enable traps dial
snmp-sever enable traps hsvp

IOS SWITCH:
snmp-server enable traps snmp
snmp-server enable traps entity
snmp-server enable traps config
snmp-server enable traps 2900 (for Catalyst 2900/3500)

COS SWITCH
Set snmp trap enable chassis
Set snmp trap enable module
Set snmp trap enable entity
snmp-server enable traps config
Set snmp trap enable syslog

 

[nfaber]

Astin,

Your lucky. I happened to have the following CISCO IOS commands reference lying around. I sanitized it and here it is. This should give you a head start:

SNMP Configuration - Cisco Routers and Switches

1. Create or Modify Access Control for UHG's SNMP community

snmp-server community your community sting ro (access_list_number1)
snmp-server community string rw (access_list_number2)

2. Limit TFTP Servers Used Via SNMP
Snmp-server tftp-server-list (access_list_number3)

3. Establish the Contact, Location and Serial Number of the SNMP Agent

snmp-server contact Network Administrator
snmp-server location Text Location Descriptor – Used already for Smarts
snmp-server chassis-id Number - information stored by NCFS

4. Configure the Router to Send Traps:

snmp-server trap-source lo0
snmp-server host (management station)


ROUTER:
snmp-sever enable traps snmp
snmp-server enable traps snmp authentication
snmp-sever enable traps isdn call-information
snmp-server enable traps atm pvc
snmp-server enable traps bgp (future)
snmp-server enable traps isdn
no snmp-server enable traps isdn layer2
snmp-sever enable traps config
snmp-sever enable traps entity
snmp-sever enable traps envmon
snmp-sever enable traps frame-relay
snmp-sever enable traps syslog
snmp-sever enable traps dlsw
snmp-sever enable traps dial
snmp-sever enable traps hsvp

IOS SWITCH:
snmp-server enable traps snmp
snmp-server enable traps entity
snmp-server enable traps config
snmp-server enable traps 2900 (for Catalyst 2900/3500)

COS SWITCH
Set snmp trap enable chassis
Set snmp trap enable module
Set snmp trap enable entity
snmp-server enable traps config
Set snmp trap enable syslog

 

[astin]

once again - thank you very much for your help