- Nav-users - lister.unit.no

VLANs from PaloAlto router ports missing
by Philipp Petermann 03 Jul '23

03 Jul '23

Hi, At our university we use the portadmin "vlan_auth" feature to restrict access to certain VLANs for certain organizations. Now we have the problem that a VLAN that we want to give access to is missing in NAV and we couldn't find a way to just add this VLAN. From what I understand VLANs are added automatically by ipdevpoll from detected router ports. Now the reason for this missing VLAN most probably is the fact that it is routed on a PaloAlto firewall. This firewall exists in NAV as type "Palo Alto Networks PA-5200 (Palo Alto Networks PA-5200 series firewall from PaloAlto)" (sysobjectid 1.3.6.1.4.1.25461.2.3.23) but no router ports are reported (count 0). So my questions at this point are: - Is there a way to manually add VLANs so the can be used by "vlan_auth"? - Is my assumption correct that the VLAN is missing because the PaloAlto router ports are not correctly detected? - Should PaloAlto router ports normally be detected with NAV? - If so, how can I fix this? And if not, is there any workaround available? - Is https://github.com/Uninett/nav/pull/2613 a solution to this? We are currently using NAV 5.5.2 Thanks and best regards, -- Philipp Petermann Universität Basel | ITS | NINS Spitalstrasse 41 | 4056 Basel | Schweiz Tel. +41 61 207 15 74

4 3

update 5.6.1-2
by Marcos Tadeu 23 Jun '23

23 Jun '23

Hello, When I update , the script disable the nav service and saw to update the database manually. What I need to do? tks

2 1

SELECT to verify MAC on VLAN
by Marcos Tadeu 12 Jun '23

12 Jun '23

Hello, I need to verify nine hundred MAC address. These need to appears on interfaces with one especific VLAN ID, on pid or trunk (tag) If appears on one interface without the VLAN, I need to list sysname and port of switch. It is an job to do using an SELECT on the NAV database. Can anyone help me to write the SELECT? Tia, -- Marcos

2 4

found multiple interface matches for LLDPNeighbor
by Marcos Tadeu 30 Mai '23

30 Mai '23

Hello, Can be a bug on SW firmware? 2023-05-26 13:01:27,181 [INFO plugins.lldp.lldpneighbor] [topo GRA-O-Dist-A5510-3-24.sw] found multiple interface matches for <LLDPNeighbor identified=True netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw') interfaces=[Interface(id=6200, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='1', ifdescr='1 Gigabit - Level', iftype=6), Interface(id=6202, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='2', ifdescr='2 Gigabit - Level', iftype=6), Interface(id=6206, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='3', ifdescr='3 Gigabit - Level', iftype=6), Interface(id=6208, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='4', ifdescr='4 Gigabit - Level', iftype=6), Interface(id=6212, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='5', ifdescr='5 Gigabit - Level', iftype=6), Interface(id=6213, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='6', ifdescr='6 Gigabit - Level', iftype=6), Interface(id=6216, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='7', ifdescr='7 Gigabit - Level', iftype=6), Interface(id=6220, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='8', ifdescr='8 Gigabit - Level', iftype=6), Interface(id=6222, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='9', ifdescr='9 Gigabit - Level', iftype=6), Interface(id=6225, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='10', ifdescr='10 Gigabit - Level', iftype=6), Interface(id=6229, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='11', ifdescr='11 Gigabit - Level', iftype=6), Interface(id=6232, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'),

2 1

how to see VLAN on trunk port, with API?
by Marcos Tadeu 30 Mai '23

30 Mai '23

Hello, I can see VLAN , and if is trunk, with API interface. how to see VLANs on trunk port, with API? Tia, -- Marcos _______________________________________________ Nav-users mailing list -- nav-users(a)lister.sikt.no To unsubscribe send an email to nav-users-leave(a)lister.sikt.no

2 1

how to see port combo?
by Marcos Tadeu 30 Mai '23

30 Mai '23

Hi, The combo-group creates an "port backup". This is example on Aruba 5500: How to see it on NAV ? Regards, -- Marcos

2 3

pping.conf - does groups_excluded= work?
by Ingeborg Hellemo 25 Mai '23

25 Mai '23

pping.conf lets you spread the pping-task over several hosts via the use of groups_included and groups_excluded. We use this feature because we have some hosts only reachable through a tunnel. The groups_included works fine: Our second pping-host only pings the host in the device group specified. But our main NAV host still pings all hosts, even though the exact same device group is listed in groups_excluded. --Ingeborg -- Ingeborg Østrem Hellemo -- ingeborg.hellemo(a)uit.no Dep. of Information Technology --- Univ. of Tromsø

2 1

{Disarmed} Topology problem
by Marcos Tadeu 24 Mai '23

24 Mai '23

Hello, These link do not exist: Interface N/A ?? Copper0/25 at GRA-A-CPD-HP1905 To IP device 172.30.3.30 <http://10.10.0.96/ipdevinfo/172.30.3.30/> And the click on Direct neighborship candidates <http://10.10.0.96/report/topology_candidates> on Copper0/25 returns empty list ! On 172.30.3.30 has no reference to GRA-A-CPD-HP1905 Maybe an database corrupt?

2 3

Problems with the facility report
by Practicas IT 22 Mai '23

22 Mai '23

Good morning, We have added a NAS device in NAV, but it does not detect it completely, it does not provide us with all the necessary information. The same thing happens with Aruba Switch as well. How could we add MIB files in NAV, is it possible?

2 1

How to monitor traffic activity peaks ?
by FOUR Ludovic (EXT) 22 Mai '23

22 Mai '23

Hello, I would like to make a summary of periodic traffic activity (per month / per year). In the device port details, I can get only average traffic values on periodic graphs. For some reasons, I would like to record the number of maximum traffic peaks and what is the maximum peak value we got in a specicic period range. How can I do that ? (Treshold rules ?) Regards, Ludovic FOUR Faculté de Pharmacie Strasbourg - Support Informatique France

2 1

GeoMap without Vlan interfaces
by Marcos Tadeu 17 Mai '23

17 Mai '23

Hello Can I config Geomap do not use the VLANs interfaces to trace links on map? I need only physical interfaces connections on GeoMap. Tia, -- Marcos Tadeu

2 2

Where does the DNS-button collect its data?
by Ingeborg Hellemo 12 Mai '23

12 Mai '23

/ipdevinfo contains a button named "DNS" which shows all the IP-addresses connected to the device and their hostnames. I have one device which is correctly registered i DNS. Even so, the DNS info says "No addresses found". Why? Where to start debugging? ipdevpolld -J dns -n <ip-address> runs as expected. --Ingeborg -- Ingeborg Østrem Hellemo -- ingeborg.hellemo(a)uit.no Dep. of Information Technology --- Univ. of Tromsø

2 8

VLANs on netmap
by Marcos Tadeu 09 Mai '23

09 Mai '23

Hello, The same VLAN appears several time on netmat. When click in one, different links are highlighted. Dispist commentary, how to do to appear one time? Regards, -- Marcos

2 2

spam VENDOR TENDA - MIB
by Marcos Tadeu 08 Mai '23

08 Mai '23

Hi, Thanks for the amazing software! We need to use with SW Tenda G5328P, with proprietary MIB. The MIB is on this email How we can include an new MIB? TIA, -- Marcos Tadeu

3 3

Error 500 when upgrading to nav 5.6
by FOUR Ludovic (EXT) 30 Mar '23

30 Mar '23

Hello, I've updated recently Nav on debian from 5.5.2-1 to 5.6 I have an error 500 when I try to reach the nav gui website Here is some errors on /var/log/apache2/error.log [Tue Jan 24 11:18:16.723757 2023] [mpm_prefork:notice] [pid 22855] AH00169: caught SIGTERM, shutting down [Tue Jan 24 11:23:07.716778 2023] [mpm_prefork:notice] [pid 1600] AH00163: Apache/(version removed) (Debian) mod_fcgid/(version removed) OpenSSL/1.1.1n mod_wsgi/(version removed) Python/3.7 configured -- resuming normal operations [Tue Jan 24 11:23:07.881160 2023] [core:notice] [pid 1600] AH00094: Command line: '/usr/sbin/apache2' [Tue Jan 24 11:27:21.186436 2023] [wsgi:error] [pid 1602] [remote <IP removed>:55041] mod_wsgi (pid=1602): Exception occurred processing WSGI script '/opt/venvs/nav/lib/python3.7/site-packages/nav/wsgi.py'. [Tue Jan 24 11:27:21.187713 2023] [wsgi:error] [pid 1603] [remote <IP removed>:55043] mod_wsgi (pid=1603): Exception occurred processing WSGI script '/opt/venvs/nav/lib/python3.7/site-packages/nav/wsgi.py'. [Tue Jan 24 11:27:21.212539 2023] [wsgi:error] [pid 1602] [remote <IP removed>:55041] Traceback (most recent call last): [Tue Jan 24 11:27:21.212543 2023] [wsgi:error] [pid 1603] [remote <IP removed>:55043] Traceback (most recent call last): [Tue Jan 24 11:27:21.212725 2023] [wsgi:error] [pid 1602] [remote <IP removed>:55041] File "/opt/venvs/nav/lib/python3.7/site-packages/django/core/handlers/wsgi.py", line 133, in __call__ [Tue Jan 24 11:27:21.212731 2023] [wsgi:error] [pid 1603] [remote <IP removed>:55043] File "/opt/venvs/nav/lib/python3.7/site-packages/django/core/handlers/wsgi.py", line 133, in __call__ [Tue Jan 24 11:27:21.212737 2023] [wsgi:error] [pid 1602] [remote <IP removed>:55041] response = self.get_response(request)one Apparently, uwsgi Proxy is only used by graphite. No WSGI or uwsgi error found in /var/log/apache2/graphite-web_error.log The uwsgi configuration has not been touched since installation of nav and the other vhosts are working. When I downgrade nav to previous version, nav is working again and I can see updated traffic graphs (no gaps or missing graphs since the error) Regards, Ludovic F. Faculty of pharmacy - Strasbourg FRANCE

2 4

Announcement: NAV 5.6.1 released
by Morten Brekkevold 23 Mar '23

23 Mar '23

The first maintenance release of the 5.6 series of NAV is now out! The source code is available for download at GitHub [1]. New packages for Debian 10 (Buster) and 11 (Bullseye) are available in our APT repository [2] as usual. Please be extra aware of config file changes. Look out for `*.dpkg-dist` files in `/etc/nav` and make sure to update your running config. Fixes ===== - Ensure event variables are always posted in transactions, so the event engine does not accidentally end up processing incomplete event information (#2594) - Report broken cache configuration as an error in Ranked Statistics tool, rather than taking down the whole NAV site (#2561, #2563) - Show error message on invalid ip address in ipdevinfo (#2590, #2589) - Link to correct room in room report if room has a space in its name (#2593, #2592) - Work around duplicate internal serial numbers in Juniper equipment by trusting data only from the device with t he lowest entity index (#2583, #2493) - Make save function in AlertHistory, EventHistory and AlertQueue atomic (#2594) - Ignore LDAP server referral responses, rather then erroring out during the login process (#2576, #1166) - Include the new_version variable in alert message templates for device hw/fw/sw upgrades (#2565) - Update NAV blog widget to use the new blog URL (#2585) - Handle invalid IP address input in ipdevinfo device searches gracefully, rather then crashing with a 500 error (#2589, #2590) - Fix broken links to room details from room report for rooms with spaces in their names (#2592, #2593) Release notes ============= We always advise you to have a look at NAV's accompanying release notes [3] before upgrading. Happy NAVing everyone! Links ===== [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-6 -- Sincerely, Morten Brekkevold Sikt – Norwegian Agency for Shared Services in Education and Research

1 0

deviceNotice/None - no message template is defined
by Ingeborg Hellemo 23 Mar '23

23 Mar '23

NAV 5.5.2 An upgrade of a router generated several "Device SomeModule at router.domain had a software upgrade" (as expected), but also several Subject: deviceNotice/None on router.domain from NAV, but no message template is defined. Variable dump: {'_messages': None, 'alert_type': None, 'device': <Device: VB13030631>, 'event': <EventQueue: id=101132957, event_type_id='deviceNotice', source_id='ipdevpoll', target_id='eventEngine', netbox=<Netbox: router.domain> , subid='', state='x', time=datetime.datetime(2022, 12, 13, 13, 50, 53, 897695)>, 'event_type': <EventType: deviceNotice>, 'history_vars': {}, 'language': 'en', 'msgtype': 'email', 'netbox': <Netbox: router.domain>, 'severity': 3, 'source': <Subsystem: ipdevpoll>, 'state': 'x', 'subid': '', 'time': datetime.datetime(2022, 12, 13, 13, 50, 53, 897695), 'value': 100} --Ingeborg -- Ingeborg Østrem Hellemo -- ingeborg.hellemo(a)uit.no Dep. of Information Technology --- Univ. of Tromsø

2 7

Re: Error 500 when upgrading to nav 5.6
by Davide Miccone 08 Mar '23

08 Mar '23

Hello Ludovic, I have your some problem. Have you resolved? Any suggestion will be appreciated. Regards, Davide

3 2

Netmap is empty
by onygaard＠tryggheim.no 24 Feb '23

24 Feb '23

Hi, We are running NAV 5.6.0 (from av Debian package) on a local Debian 11 machine, set up with postgresql and apache2. Initially we had some problem with the error message "Graphite unreachable", but followed the solution suggested by datagutten: https://github.com/Uninett/nav/discussions/2535 Now, a lot looks nice. Graphs display fine, but we have problems with Netmap, which is empty. For the router e.g. the "Ports" tab is missing info about "To Device" and "To Port". "Port details" do not provide any options for "Two IP device". Regards, Ole Harald

3 5

Re: Netmap is empty
by Ole Harald Nygård 21 Feb '23

21 Feb '23

1 0

Alert Profiles, filters and options
by BERGELIN SABADELL, IVAR-ERIC 16 Feb '23

16 Feb '23

Hello, My name is Ivar and I work at Universitat Pompeu Fabra of Barcelona. I sent an email a few days ago asking about the API's options of NAV (no responses yet). Now I'm trying to get the link status of a switch using filters, but I have three questions. - Is it possible to get this information using filters? My idea is to send a daily email with a list of the ports of a specific switch which has link status down through NAV's "Alert Profiles" tool. - What is the difference between these two tabs? [image: image.png] [image: image.png] - Is this second option checking if a port has an ethernet cable plugged to the ethernet card of a computer at that moment? Thanks again -- *Ivar Bergelin* Tècnic de suport informàtic Unitat d'Informàtica del Campus del Poblenou Roc Boronat 138 | 08018 - Barcelona [Tel.] (+34) 93 542 23 58 http://www.upf.edu

2 1

Fwd: A question about computers connectivity
by BERGELIN SABADELL, IVAR-ERIC 16 Feb '23

16 Feb '23

Hello, My name is Ivar, I work at Universitat Pompeu Fabra of Barcelona and we use NAV 4.5.2. I have a question about the NAV's API functionalities. We are looking to see if it's possible to check whether a group of computers connected to a specific switch have "link signal status" even when they are turned off (all the computers have WOL enabled as well). I found an example to get the state (active) of a computer. Here in this following link of your documentation URL: http://navscc-upf.x.upf.edu/doc/howto/using_the_api.html You show a specific scenario titled: We want to know the interface a computer is connected to right now. We have the ip-address of the computer. So, when it says "We want to know the interface a computer *is connected to right now*" means the computer is turned on or it works even if the computer is off? it would help us a lot. Thank you. -- *Ivar Bergelin* Tècnic de suport informàtic Unitat d'Informàtica del Campus del Poblenou Roc Boronat 138 | 08018 - Barcelona [Tel.] (+34) 93 542 23 58 http://www.upf.edu

2 1

How to filter reports on Attributes
by Ingeborg Hellemo 08 Feb '23

08 Feb '23

Filter reports gives you the option to filter on "Attributes". What is the correct incantation to fill in that will give something else than "There was an unhandled SQL error!"? --Ingeborg -- Ingeborg Østrem Hellemo -- ingeborg.hellemo(a)uit.no Dep. of Information Technology --- Univ. of Tromsø

3 5

Re: Fortigate firewall
by Morten Brekkevold 23 Jan '23

23 Jan '23

On Tue, 10 Jan 2023 17:23:08 +0100 Biselx Nicolas <nicolas.biselx(a)epfl.ch> wrote: > I'm not sure but I think that's what you asked me... > See in attachement Yes, the attachment is perfect, showing an snmpwalk of the `ipAddressTable` :) > D:\>snmpwalk.exe -v 2c -c XXXXX forti-noc.epfl.ch 1.3.6.1.2.1.4.34 > iso.3.6.1.2.1.4.34.1.3.1.10.0.2.49.143 = INTEGER: 143 All the responses seem to show the same problem, but we only need this one response for me to claim that the Fortigate device has an incorrect implementation of the IP-MIB. This is the definition of an entry in the ipAddressTable: > IP-MIB::ipAddressEntry > ipAddressEntry OBJECT-TYPE > -- FROM IP-MIB > MAX-ACCESS not-accessible > STATUS current > INDEX { ipAddressAddrType, ipAddressAddr } > DESCRIPTION "An address mapping for a particular interface." > ::= { iso(1) org(3) dod(6) internet(1) mgmt(2) mib-2(1) ip(4) ipAddressTable(34) 1 } `iso.3.6.1.2.1.4.34.1.3` from above is a result from the `ipAddressIfIndex` column (column no. 3). The row index is given as `.1.10.0.2.49.143`. The `.1` indicates an address type of IPv4, which according to spec should occupy 4 octets. However, the remaining row index contains 5 octets - An invalid IPv4 address: `10.0.2.49.143`. This is the type definition: > InetAddressIPv4 ::= TEXTUAL-CONVENTION > DISPLAY-HINT "1d.1d.1d.1d" > STATUS current > DESCRIPTION > "Represents an IPv4 network address: > > Octets Contents Encoding > 1-4 IPv4 address network-byte order > > The corresponding InetAddressType value is ipv4(1). > > This textual convention SHOULD NOT be used directly in object > definitions, as it restricts addresses to a specific format. > However, if it is used, it MAY be used either on its own or in > conjunction with InetAddressType, as a pair." > SYNTAX OCTET STRING (SIZE (4)) This response perfectly explains the warning/error given by ipdevpoll: > device has strange SNMP implementation of IP-MIB; ignoring retrieved IP > address data: IPv4 address length is not 4: OID('.1.10.0.2.49.143') It seems to me like the Fortigate device appends an actual `ifIndex` value (143, in this case) to all the IP addresses, and is therefore in violation of the MIB definition. We could potentially work around this in NAV by ignoring the extra data and just interpret the first four octets, but this might cause problems with other devices that have faulty IP-MIB implementations, or it could cause potential problems if the same IP address appears multiple times with different ifIndex values attached to it. I would at the very least report this as a bug to Fortigate. -- Sincerely, Morten Brekkevold Sikt – Norwegian Agency for Shared Services in Education and Research

4 4

Re: Fortigate firewall
by Morten Brekkevold 10 Jan '23

10 Jan '23

On Mon, 9 Jan 2023 11:42:42 +0100 Biselx Nicolas <nicolas.biselx(a)epfl.ch> wrote: > In attachement, the debug with the list of ports It did find some 118 interfaces on the Fortigate, but no IP address information. Apparently, if found nothing useful in the IP-MIB: > 2023-01-09 11:27:03,353 [DEBUG plugins.prefix.prefix] [inventory fortigate] Trying address tables from IP-MIB > 2023-01-09 11:27:03,371 [WARNING plugins.prefix.prefix] [inventory fortigate] device has strange SNMP implementation of IP-MIB; ignoring retrieved IP address data: IPv4 address length is not 4: OID('.1.10.0.2.49.143') > 2023-01-09 11:27:03,371 [DEBUG plugins.prefix.prefix] [inventory fortigate] Found 0 addresses in IP-MIB: set() That is, it seems to have found *something*, but it didn't quite conform to that is expected in the MIB (the 1.10.0.2.49.143 value is invalid, as it is marked as a 4-octet IP address, but it contains 5 octets). Do you have the NET-SNMP command line tools and basic MIBs available on your system? Might be interesting to get a raw view of that the device presents, using something like these two commands: snmptable -v2c <community> <fortigate-ip-addr> IP-MIB::ipAddrTable snmptable -v2c <community> <fortigate-ip-addr> IP-MIB::ipAddressTable -- Sincerely, Morten Brekkevold Sikt – Norwegian Agency for Shared Services in Education and Research

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Nav-users