- Nav-users - lister.unit.no

Alert profiles : how to read/check filters values ? set schedules ?
by FOUR Ludovic (EXT) 15 Sep '23

15 Sep '23

Hello, With the last version NAV 5.7, we can now create filters and raise alarms from Juniper chassis led (red or yellow) in the alert profiles. Thank you :) I'm trying to create new filters, but I can't check if it works really Can we list the values of all filters somewhere, for each device ? (Psql request ?) I trying to create an alert profile to send specific alarms at specific time for a specific group of users In my test profile, I can add a time period and choose start time (with valid format HH:MM or HH), and add subscriptions. In profile details the time periods valid during is 07:30 - 07:30 I don't know how to set a schedule from my subscriptions, for example from 7:30am (7h30) to 9pm (21h00) in weekdays. Regards, Ludovic FOUR CNRS / Faculté de Pharmacie Strasbourg France

2 1

default Dashboard
by Marcos Tadeu 13 Sep '23

13 Sep '23

HI, The first dashboard appear without user login How change the default dashboard ? TIA!

1 1

Announcement: NAV 5.7.0 released
by Morten Brekkevold 07 Sep '23

07 Sep '23

The first feature release of the 5.7 series of NAV is now out! The source code is available for download at GitHub [1]. New packages for Debian 10 (Buster) and 11 (Bullseye) are available in our APT repository [2] as usual. We haven't started building packages for Debian 12 (Bookworm) yet, but hope to do so by the end of 2023. Please be extra aware of config file changes. Look out for `*.dpkg-dist` files in `/etc/nav` and make sure to update your running config. Added ===== - Even more complex and flexible configuration of NAV logging is now supported through logging.yml (#2659) - Added howto guide for log configuration (#2660) - Currently non-functional (aka. "blacklisted") alert sender mechanisms are now flagged in the Alert Profiles tool wherever an affected alert address is displayed (#2653, #2664, #2677, #2678) - Added support for polling and alerting on Juniper chassis and system alerts (#2358, #2388) - Juniper only provides alert counters via SNMP, no alert details, unfortunately. - Since NAV doesn't support alert state updates, a new eventengine plugin handles alert count transitions by resolving old alerts and creating new ones (#2432, #2519) - Added a new contains_address filter to the prefix API endpoint, to enable lookup of matching prefix/vlan details from a single IP or subnet address (#2577, #2578) - Defined and added abstract methods for Power-over-Ethernet configuration to PortAdmin management handler classes (#2636) - These are needed for the upcoming vendor specific implementations of PoE config in PortAdmin. - Implemented configuration file parsing for upcoming local JWT token feature (#2568) Fixed ===== User-visible fixes ------------------ - Properly dispose of outgoing alert notifications to invalid alert addresses (#2661) - Fixed crash when attempting to log device errors with an empty comment in the Device History tool (#2579, #2580) - Fixed bad styling and missing linebreaks in traceback section of the 500 error page (#2607, #2628) - Show help text instead of error when running nav command without arguments (#2601, #2603) - Prevent users from entering invalid sysObjectID values when editing Netbox types in SeedDB (#2584, #2566) - Removed upper version bound for Pillow image manipulation library, to fix security warnings (#2567) - Alerts that cannot be sent due to blacklisted media plugins will no longer fill up alertengine.log every 30 seconds, unless DEBUG level logging is enabled (#1787, #2652) - DNS lookups in ipdevinfo are now properly case insensitive (#2615, #2650) - Alert Profiles will now properly require Slack alert addresses to be valid URLs (#2657) - 5 minute and 15 minute load average values will now be collected correctly for Juniper devices (#2671, #2672) - Fix cabling API, which broke due to internal refactorings (#2621) - Only install NAV's custom epollreactor2 in ipdevpoll if running on Linux (#2503, #2604) - Stops ipdevpoll from crashing on BSDs. Developer-centric fixes ----------------------- - Moved more of NAV's packaging definition to pyproject.toml (#2655) - Pin pip to version 23.1.0 for CI pipelines to continue working (#2647) - Improve ipdevpoll logging of SQL queries and from Twisted library (#2640) - Stop making skipped validation tests for non HTML content (#2623) - Version-locked indirect dependencies of test suites (#2622, #2617) - Improve SNMP forwarding/proxying container setup, including adding IPv6 support (#2637, #2516) - Documented a recipe for establishing SNMP tunnels when testing devices on otherwise unreachable networks (#2426, #2435) - Run Django development web server in "insecure" mode to improve simulation of a production environment when debug flag is turned off (#2625) - Added a proper docstring to bootstrap_django() function (#2619, #2168) - Stop restoring stale tox environment caches in GitHub workflows (#2605) - Added tests for ipdevpoll worker euthanization (#2599, #2548) - Added tests to ensure snmptrapd can properly look up a NAV router that sends traps from one of its non-management IP addresses (#2500, #2510) - Avoid redundant graphite time formatting strings by re-using constant (#2588, #2543) - Make detection of running in a virtualenv more compatible with modern toolchain (#2573) - Revert to having tox run its own dependency installer (#2572) - Added explicit back-relation names for several Django ORM models (#2544, #2546, #2547, #2549, #2550, #2551) Release notes ============= We always advise you to have a look at NAV's accompanying release notes [3] before upgrading. Happy NAVing everyone! Links ===== [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-7 -- Sincerely, Morten Brekkevold Sikt – Norwegian Agency for Shared Services in Education and Research

1 0

VLANs from PaloAlto router ports missing
by Philipp Petermann 03 Jul '23

03 Jul '23

Hi, At our university we use the portadmin "vlan_auth" feature to restrict access to certain VLANs for certain organizations. Now we have the problem that a VLAN that we want to give access to is missing in NAV and we couldn't find a way to just add this VLAN. From what I understand VLANs are added automatically by ipdevpoll from detected router ports. Now the reason for this missing VLAN most probably is the fact that it is routed on a PaloAlto firewall. This firewall exists in NAV as type "Palo Alto Networks PA-5200 (Palo Alto Networks PA-5200 series firewall from PaloAlto)" (sysobjectid 1.3.6.1.4.1.25461.2.3.23) but no router ports are reported (count 0). So my questions at this point are: - Is there a way to manually add VLANs so the can be used by "vlan_auth"? - Is my assumption correct that the VLAN is missing because the PaloAlto router ports are not correctly detected? - Should PaloAlto router ports normally be detected with NAV? - If so, how can I fix this? And if not, is there any workaround available? - Is https://github.com/Uninett/nav/pull/2613 a solution to this? We are currently using NAV 5.5.2 Thanks and best regards, -- Philipp Petermann Universität Basel | ITS | NINS Spitalstrasse 41 | 4056 Basel | Schweiz Tel. +41 61 207 15 74

4 3

update 5.6.1-2
by Marcos Tadeu 23 Jun '23

23 Jun '23

Hello, When I update , the script disable the nav service and saw to update the database manually. What I need to do? tks

2 1

SELECT to verify MAC on VLAN
by Marcos Tadeu 12 Jun '23

12 Jun '23

Hello, I need to verify nine hundred MAC address. These need to appears on interfaces with one especific VLAN ID, on pid or trunk (tag) If appears on one interface without the VLAN, I need to list sysname and port of switch. It is an job to do using an SELECT on the NAV database. Can anyone help me to write the SELECT? Tia, -- Marcos

2 4

found multiple interface matches for LLDPNeighbor
by Marcos Tadeu 30 Mai '23

30 Mai '23

Hello, Can be a bug on SW firmware? 2023-05-26 13:01:27,181 [INFO plugins.lldp.lldpneighbor] [topo GRA-O-Dist-A5510-3-24.sw] found multiple interface matches for <LLDPNeighbor identified=True netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw') interfaces=[Interface(id=6200, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='1', ifdescr='1 Gigabit - Level', iftype=6), Interface(id=6202, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='2', ifdescr='2 Gigabit - Level', iftype=6), Interface(id=6206, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='3', ifdescr='3 Gigabit - Level', iftype=6), Interface(id=6208, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='4', ifdescr='4 Gigabit - Level', iftype=6), Interface(id=6212, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='5', ifdescr='5 Gigabit - Level', iftype=6), Interface(id=6213, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='6', ifdescr='6 Gigabit - Level', iftype=6), Interface(id=6216, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='7', ifdescr='7 Gigabit - Level', iftype=6), Interface(id=6220, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='8', ifdescr='8 Gigabit - Level', iftype=6), Interface(id=6222, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='9', ifdescr='9 Gigabit - Level', iftype=6), Interface(id=6225, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='10', ifdescr='10 Gigabit - Level', iftype=6), Interface(id=6229, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'), ifname='11', ifdescr='11 Gigabit - Level', iftype=6), Interface(id=6232, netbox=Netbox(id=167, sysname='GRA-O-3-HP-6-2.sw'),

2 1

how to see VLAN on trunk port, with API?
by Marcos Tadeu 30 Mai '23

30 Mai '23

Hello, I can see VLAN , and if is trunk, with API interface. how to see VLANs on trunk port, with API? Tia, -- Marcos _______________________________________________ Nav-users mailing list -- nav-users(a)lister.sikt.no To unsubscribe send an email to nav-users-leave(a)lister.sikt.no

2 1

how to see port combo?
by Marcos Tadeu 30 Mai '23

30 Mai '23

Hi, The combo-group creates an "port backup". This is example on Aruba 5500: How to see it on NAV ? Regards, -- Marcos

2 3

pping.conf - does groups_excluded= work?
by Ingeborg Hellemo 25 Mai '23

25 Mai '23

pping.conf lets you spread the pping-task over several hosts via the use of groups_included and groups_excluded. We use this feature because we have some hosts only reachable through a tunnel. The groups_included works fine: Our second pping-host only pings the host in the device group specified. But our main NAV host still pings all hosts, even though the exact same device group is listed in groups_excluded. --Ingeborg -- Ingeborg Østrem Hellemo -- ingeborg.hellemo(a)uit.no Dep. of Information Technology --- Univ. of Tromsø

2 1