Huawei Router Configuration Polls Fails

[Filipp Sudanov]

Note these lines in configuration poll:

[15.01.2021 12:10:10]    Checking SNMP...
[15.01.2021 12:10:24]    No response from SNMP agent

For some reasons netxms is not able to receive response from that router. There are two options:

• problems with network/firewall/etc so that packets are not getting to where they should
• this router does not understand the way how netxms created SNMP request and does not reply.

I would suggest capturing communication between netxms and this router using tcpdump or Wireshark. If you need help in doing that, please inform, if your netxms is running on linux or windows.

[Mazhar Bokhari]

Thanks, Yes I need your help in capturing communication between NetXMS and the router.
I am using a Windows machine for NetXMS.

[Mazhar Bokhari]

Hi Filipp,

Please find the attached communication snap between the router and the NetXMS server.

Thanks,
Mazhar

---

[Mazhar Bokhari]

More Snaps for better understanding.

---

[Mazhar Bokhari]

One more

---

[Filipp Sudanov]

TCP connection to port 44818 happens on the next step of configuration poll - that's an attempt to connect via Ethernet/IP protocol. It's a protocol used in industrial devices. Your router is answering with RST - it says that this port is closed. This is normal.
The part related to SNMP is above. You can see that NetXMS is sending SNMP request that have three OIDs in it - 1.3.6.1.2.1.1.2.0 and so on. The is no reply, so the request is being repeated multiple time.

It could be that the router does not like that three OIDs are requested simultaneously. You can try turning on server configuration parameter SNMP.Discovery.SeparateProbeRequests, then only one OID will be requested at a time.

[Mazhar Bokhari]

I have enabled SNMP.Discovery.SeparateProbeRequests parameter and restarted the server service but no luck.

 

[gokiwi]

Would you not have to add the non standard snmp ports to the snmp configuration under Network Credentials ?

[Filipp Sudanov]

Are you sure that the other monitoring software is using exactly SNMP, not some proprietary protocol? Does it use standard SNMP port?
You can try capturing communication of that software to the router with Wireshark and compare what network packets it's actually sending.

also you can try getting some data via SNMP using snmpget package from netsnmp software https://sourceforge.net/projects/net-snmp/files/net-snmp binaries/5.5-binaries/net-snmp-5.5.0-2.x64.exe/download

[Mazhar Bokhari]

The problem is fixed now by permitting server IP in ACL on the router for accepting the SNMP queries.

Thank You Filipp.