http://www.dslreports.com/forum/r22257662 en Sun, 29 Nov 2009 18:25:55 EDT Sun, 29 Nov 2009 18:25:55 EDT http://www.dslreports.com/forum/remark,22257662 Steve : I have a Netopia 3347-02 wireless router provided by AT&T for my DSL circuit at home, and I simply cannot get SNMP to work right. I'm sure it's some kind of silly mistake, but I can't find it. I've been doing SNMP for years.

It's running the latest firmware (7.6.1r9), and I'm not using NAT (I have a separate firewall machine). I'm using wired connections only, and the radio is disabled.

For testing, I've set the community strings to the traditional - and insecure! - public and private:

Netopia (top)>> ip snmp Netopia (snmp)>> view  =============================================== snmp community read "public" write "private" trap "" traps ip-traps sysgroup contact "" location "" notify type v1-trap
By using the undocumented magic mode command, I can enable the console command to reroute the error logs to the telnet session, then watch while I try to fetch some data:

Netopia> magic mode (poof!) Netopia# consoleconsole output redirected to this session Netopia# 4/18/09 08:56:48 A L3 0 SNMP Authentication Failure (IP address 99.25.142.37) 4/18/09 08:56:55 A L3 0 SNMP Authentication Failure (IP address 99.25.142.37) 4/18/09 08:57:03 A L3 0 SNMP Authentication Failure (IP address 99.25.142.37) 4/18/09 08:57:36 A L3 0 SNMP Authentication Failure (IP address 99.25.142.37) 4/18/09 08:57:40 A L3 0 SNMP Authentication Failure (IP address 99.25.142.37) 4/18/09 08:57:43 A L3 0 SNMP Authentication Failure (IP address 99.25.142.37) 4/18/09 08:57:47 A L3 0 SNMP Authentication Failure (IP address 99.25.142.37) 
The fetch commands producing this:

$ snmpget -r0 -v1 -c'public' 99.25.142.46 sysName.0Timeout: No Response from 99.25.142.46. $ snmpget -r0 -v1 -c'private' 99.25.142.46 sysName.0Timeout: No Response from 99.25.142.46. $ snmpget -r0 -v2c -c'public' 99.25.142.46 sysName.0Timeout: No Response from 99.25.142.46. $ snmpget -r0 -v2c -c'private' 99.25.142.46 sysName.0Timeout: No Response from 99.25.142.46.
I do not have admin-disabled on the inside Ethernet interface, and I'm doing testing from a Linux box on the same subnet, so there's no chance that my other firewall is messing with this. The Netopia has ClearSailing set, which essentially disables the firewall. A tcpdump verifies that it's sending the stuff I think it is.

This is making me crazy - has anybody managed to get SNMP working with these units?

Steve

--
Stephen J. Friedl | Unix Wizard | Microsoft Security MVP | Orange County, California USA | my web site]]> http://www.dslreports.com/forum/remark,22257662 Sat, 18 Apr 2009 12:03:14 EDT