Prometheus : Query SNMP from a CISCO Switch

[@PauloHeaven]

Excellent, I got that working with my Netgear and Mikrotik stuff. This software is among the best while being free and open source, but information on how to make it work with SNMP is a bit scarce or goes over too many aspects, and it looked a bit impossible to realize to me as I was just a bit knowledgeable with Grafana and absolutely not with Prometheus. Turns out I did it and you were the one who explained it clearly enough to make this happen.

[@toshumalhotra]

Very thanks, great video.

[@luchobeto]

what about defining a community different from public ?

[@valerio53061]

Hello Sean, I also follow you on Udemy, I wanted to ask you if it was possible and how do you import MIB of a router like Aethra and create a template, would you evaluate the economic aspect?

[@mystay88]

Thanks!

[@len4210]

You are the boss

[@PrashanAttanayake]

I'm getting the following error "server returned HTTP status 500 Internal Server Error. How can I mitigate this ?

[@sbcode]

how do you get this error? this is a HTTP error, not SNMP

[@PrashanAttanayake]

@@sbcode 1stly i got context deadline exceeded , then I increase scrape interval time to 100s, after that I come across with HTTP status error. Also I check with 9116 port, I got following error as well An error has occurred while serving metrics: **> ** > error collecting metric Desc{fqName: “snmp_error”, help: “Error scraping target”, constLabels: {}, variableLabels: []}: error getting target X.X.0.254: request timeout (after 3 retries)......node exporter working well

[@sbcode]

sorry, I've never seen this problem. It may be a symptom of something else completely unrelated.

[@capitainethug5550]

same for me on cisco 3750g

[@0605hector]

Hi, at min: 4:52min , how did you add basic authentication to Prometheus web page?

[@sbcode]

sbcode.net/prometheus/prometheus-basic-auth/

[@js8905]

Could it somehow be configured to see a Cisco switch attached to a computer with two NIC/networks? One NIC can ping the Prometheus server, and the second NIC has a Cisco with devices that cannot ping the Prometheus sever?

[@sbcode]

use different subnets

[@js8905]

@@sbcode the switch I hope to monitor is on NIC2 of a server-B that has to be physically isolated from the main network on NIC1 of server-B that allows server-B to connect to grafana on server-A. Is there a exporter or method to get performance data from the switch on the NIC2 network to the grafana server on the NIC1 network? Thanks in advance for any help.

[@sbcode]

your problem sounds like network layer problems to solve. Use your cisco documentation to manage VLANs and ACLs. Prometheus/Grafana are application layer and can only access what the network allows. If you want to prevent access to Prometheus/Grafana from end users, you can use various IP blocking techniques such as firewall rules, iptables rules on server, use an Nginx reverse proxy with IP restrictions, and also add Basic Authentication to Prometheus using Nginx. Some of those techniques are discussed here. sbcode.net/prometheus/nginx-prometheus/

[@Tibrus74]

Dommage on ne sait pas comment installer la partie if_mib et le snmp_explorer pour permettre ensuite l'ajout de CI Cisco Voir ou ajouter la communauté snmp dans la conf pour correspondre a celle sur le Cisco

[@sbcode]

see sbcode.net/prometheus/snmp/ and the next pages in the series

[@Tibrus74]

@@sbcode Not easy, but that's work :)

[@luanminh4870]

Hi bro! How do we query SNMP from a Fortigate Firewall?

[@sbcode]

import a fortigate template. Or create your own after looking through all my SNMP tutorials. sbcode.net/zabbix/setup-snmp-host/

[@luanminh4870]

@@sbcode I am using promethues and grafana, non-zabbix

[@sbcode]

How you view SNMP in Grafana depends on which data source you are using. If you want to use Prometheus, then I have many videos on the Prometheus SNMP exporter staring at sbcode.net/prometheus/snmp/ I am not aware of a Fortigate module for the Prometheus SNMP exporter, but there probably is one on the internet somewhere. You could also create your own if you new which OIDs you wanted. My videos show you how to go about creating your own.