SNMP

-

 SNMPv2c

Use a community string as form of security, which is sent in plaintext, recommended to use ACL on IOS devices and IP Permit on Catalyst devices,

sysoid is used to  identify the model, for example 1.3.6.1.4.1.9.1.2114 is ASA 5506-X


snmpwalk -v:2c -c:public -r:10.114.64.6 -os:1.3.6.1.2.1.1.3 -op:1.3.6.1.2.1.1.4


SNMPv3

  • noAuthNoPriv
    Uses username for authc
  • authNoPriv
    Uses MD5or SHA for authc
  • authPriv
    Uses MD5or SHA for authc
    Uses DES or AES for encryption.




==========

FTD SNMP v3

1.  Enable SNMP, add an username
















2. Add SNMP host















3. SNMPwalk

SnmpWalk.exe -r:172.16.1.19 -v:3 -sn:admin -ap:SHA -aw:Cisco123 -pp:AES128 -pw:Cisco123 -os:.1.3.6.1.2.1.1

C:\SnmpWalk>SnmpWalk.exe -r:172.16.1.19 -v:3 -sn:admin -ap:SHA -aw:Cisco123 -pp:
AES128 -pw:Cisco123 -os:.1.3.6.1.2.1.1
SnmpWalk v1.01 - Copyright (C) 2009 SnmpSoft Company
[ More useful network tools on http://www.snmpsoft.com ]
OID=.1.3.6.1.2.1.1.1.0, Type=OctetString, Value=Cisco Firepower Threat Defense,
Version 6.7.0.3 (Build 105), ASA Version 9.15(1)19
OID=.1.3.6.1.2.1.1.2.0, Type=OID, Value=1.3.6.1.4.1.9.1.1902
OID=.1.3.6.1.2.1.1.3.0, Type=TimeTicks, Value=1:14:03.00
OID=.1.3.6.1.2.1.1.4.0, Type=OctetString, Value=
OID=.1.3.6.1.2.1.1.5.0, Type=OctetString, Value=FTD67
OID=.1.3.6.1.2.1.1.6.0, Type=OctetString, Value=Home Lab
OID=.1.3.6.1.2.1.1.7.0, Type=Integer, Value=4
OID=.1.3.6.1.2.1.2.1.0, Type=Integer, Value=12
OID=.1.3.6.1.2.1.2.2.1.1.2, Type=Integer, Value=2
OID=.1.3.6.1.2.1.2.2.1.1.3, Type=Integer, Value=3
OID=.1.3.6.1.2.1.2.2.1.1.4, Type=Integer, Value=4
OID=.1.3.6.1.2.1.2.2.1.1.5, Type=Integer, Value=5
OID=.1.3.6.1.2.1.2.2.1.1.6, Type=Integer, Value=6
OID=.1.3.6.1.2.1.2.2.1.1.7, Type=Integer, Value=7
OID=.1.3.6.1.2.1.2.2.1.1.8, Type=Integer, Value=8
OID=.1.3.6.1.2.1.2.2.1.1.9, Type=Integer, Value=9
OID=.1.3.6.1.2.1.2.2.1.1.10, Type=Integer, Value=10
OID=.1.3.6.1.2.1.2.2.1.1.11, Type=Integer, Value=11
OID=.1.3.6.1.2.1.2.2.1.1.12, Type=Integer, Value=12
OID=.1.3.6.1.2.1.2.2.1.1.13, Type=Integer, Value=13
OID=.1.3.6.1.2.1.2.2.1.1.14, Type=Integer, Value=14
OID=.1.3.6.1.2.1.2.2.1.1.15, Type=Integer, Value=15
OID=.1.3.6.1.2.1.2.2.1.1.16, Type=Integer, Value=16
OID=.1.3.6.1.2.1.2.2.1.2.2, Type=OctetString, Value=management-plane
OID=.1.3.6.1.2.1.2.2.1.2.3, Type=OctetString, Value=Outside
OID=.1.3.6.1.2.1.2.2.1.2.4, Type=OctetString, Value=DMZ
OID=.1.3.6.1.2.1.2.2.1.2.5, Type=OctetString, Value=Inside
OID=.1.3.6.1.2.1.2.2.1.2.6, Type=OctetString, Value=Outside2
OID=.1.3.6.1.2.1.2.2.1.2.7, Type=OctetString, Value=GigabitEthernet0/4
OID=.1.3.6.1.2.1.2.2.1.2.8, Type=OctetString, Value=GigabitEthernet0/5
OID=.1.3.6.1.2.1.2.2.1.2.9, Type=OctetString, Value=GigabitEthernet0/6

----------------------------------------------------------------
https://ezfive.com/snmpsoft-tools/

SnmpWalk.exe [-q] -r:host [-p:port] [-t:timeout] [-v:version] [-c:community]
         [-ei:engine_id] [-sn:sec_name] [-ap:auth_proto] [-aw:auth_passwd]
         [-pp:priv_proto] [-pw:priv_passwd] [-ce:cont_engine] [-cn:cont_name]
         [-os:start_oid] [-op:stop_oid] [-csv]

   -q               Quiet mode (suppress header; print variable values only).
   -r:host          Name or network address (IPv4/IPv6) of remote host.
   -p:port          SNMP port number on remote host. Default: 161
   -t:timeout       SNMP timeout in seconds (1-600). Default: 5
   -v:version       SNMP version. Supported version: 1, 2c or 3. Default: 1
   -c:community     SNMP community string for SNMP v1/v2c. Default: public
   -ei:engine_id    Engine ID. Format: hexadecimal string. (SNMPv3).
   -sn:sec_name     SNMP security name for SNMPv3.
   -ap:auth_proto   Authentication protocol. Supported: MD5, SHA (SNMPv3).
   -aw:auth_passwd  Authentication password (SNMPv3).
   -pp:priv_proto   Privacy protocol. Supported: DES, IDEA, AES128, AES192,
                    AES256, 3DES (SNMPv3).
   -pw:priv_passwd  Privacy password (SNMPv3).
   -cn:cont_name    Context name. (SNMPv3)
   -ce:cont_engine  Context engine. Format: hexadecimal string. (SNMPv3)
   -os:start_oid    Object ID (OID) of first SNMP variable to walk. Default:.1
   -op:stop_oid     Object ID (OID) of last SNMP variable to walk.
                    Default: walk to the very last variable.
   -csv             Output in CSV (Comma Separated Values) format.
Examples
SnmpWalk.exe -r:MainRouter -csv > output_file.csv
SnmpWalk.exe -r:10.0.0.1 -t:10 -c:"admin_rw" -os:.1.3.6.1.2.1.1
SnmpWalk.exe -r:"::1" -v:3 -sn:SomeName -ap:MD5 -aw:SomeAuthPass -pp:DES -pw:SomePrivPass
              -os:.1.3.6.1.2.1 -op:.1.3.6.1.2.65535 -q




Windows Tool

https://www.ireasoning.com/downloadmibbrowserfree.php

ASA:


show snmp-server oid

Comments

Post a Comment

Popular posts from this blog

Firepower FMC and FTD troubleshooting

-
 1. Display real time log on FMC or FTD: pigtail for example: pigtail | grep 192.168.2.20                      pigtail | grep sftunnel 2. Restart communication channel manage_procs.pl run it from  the sensor only, run it from FMC will reset all sensors' channel. This scripts are nice to be used when the FMC and FTD have communication problems like heartbeats are not received, policy deployment is failing or events are not received > expert ************************************************************** NOTICE - Shell access will be deprecated in future releases          and will be replaced with a separate expert mode CLI. ************************************************************** admin@FTD:~$ sudo su Password: root@FTD:/home/admin# manage_procs.pl ****************  Configuration Utility  **************  1   Reconfigure Correlator  2   Reconfigure and flush Correlator  3    Restart Comm. channel  4   Update routes  5   Reset all routes  6   Validate Network  0   Exit *****
Read more

Firepower 2100/1100 FTD/ASA initial setup, reimage, upgrade.

-
  Chassis FXOS and FTD share same management IP (default 192.168.45.45) Chassis FXOS (192.168.45.45) and ASA ()use different management IP although on same physical interface. SSH to FXOS/FTD are on FTD CLI prompt, go to FXOS using the  connect fxos  command Console to Chassis is on FXOS CLI prompt, go to FTD using the  connect ftd  command The Firepower 1100 does not support the FXOS Firepower Chassis Manager; only a limited CLI is supported for troubleshooting purposes. The Firepower 2100 runs an underlying operating system called the Firepower eXtensible Operating System (FXOS).  If you run ASA on Firepower 2100, ASA can be in the following modes: Appliance mode (the default after ASA 9.13)—Appliance mode lets you configure all settings in the ASA. Only advanced troubleshooting commands are available from the FXOS CLI. See the  FXOS troubleshooting guide  for more information. Firepower Chassis Manager is not supported . ciscoasa# connect fxos [admin] Connecting to fxos. Connected
Read more

ASA IKEv1 VPN troubleshooting Steps and Tips

-
  1. Phase I proposal mismatch  Run show crypto isakmp sa  Initiator: MM_WAIT_MSG2 Responder: No info  Most likely this is phase1 proposal mismatch, verify IKEv1 policy, other symptoms:   Initiator log: Information Exchange processing failed All configured IKE versions failed to establish the tunnel Initiator debug: Received an un-encrypted NO_PROPOSAL_CHOSEN notify message, dropping Responder log: Error processing payload: Payload ID Responder debug:  All SA proposals found unacceptable 2. IKE version mismatch:  Run  show crypto isakmp sa  no info at both initiator and responder Initiator log: Removing peer from correlator table failed, no match! Reason: User Requested  All configured IKE versions failed to establish the tunnel Initiator debug: Oakley begin quick mode PHASE 1 COMPLETED IKE Initiator sending 1st QM pkt Removing peer from correlator table failed, no match! Session is being torn down. Reason: User Requested Responder log: Tunnel Rejected: Conflicting protocols specified
Read more