ssh tunneling+cacti监控远程主机 问题

justin033

RT


通过cacti监控本地主机，是没问题。想通过ssh tunneling来开通到远程主机10.10.10.8的一个通道。通过ssh mysql@10.10.10.8是正常能登录的。

ssh tunneling命令如下：

ssh -N -L 16000:127.0.0.1:161 -L 16001:127.0.0.1:11211 mysql@10.10.10.8 >> /tmp/tunnel.log &

在10.10.10.8远程主机通过snmpwalk命令正常显示net-snmp信息。
[mysql@edm ~]$ snmpwalk -v 1 127.0.0.1 -c public system
SNMPv2-MIB::sysDescr.0 = STRING: Linux edm.elink-u.com 2.6.18-164.el5 #1 SMP Thu Sep 3 03:28:30 EDT 2009 x86_64
SNMPv2-MIB::sysObjectID.0 = OID: NET-SNMP-MIB::netSnmpAgentOIDs.10
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (296570) 0:49:25.70
SNMPv2-MIB::sysContact.0 = STRING: Root <jianfeng.xu@yinhoo.com> (configure /etc/snmp/snmp.local.conf)
SNMPv2-MIB::sysName.0 = STRING: edm.elink-u.com
SNMPv2-MIB::sysLocation.0 = STRING: Unknown (edit /etc/snmp/snmpd.conf)
SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORID.1 = OID: SNMPv2-MIB::snmpMIB
SNMPv2-MIB::sysORID.2 = OID: TCP-MIB::tcpMIB
SNMPv2-MIB::sysORID.3 = OID: IP-MIB::ip
SNMPv2-MIB::sysORID.4 = OID: UDP-MIB::udpMIB
SNMPv2-MIB::sysORID.5 = OID: SNMP-VIEW-BASED-ACM-MIB::vacmBasicGroup
SNMPv2-MIB::sysORID.6 = OID: SNMP-FRAMEWORK-MIB::snmpFrameworkMIBCompliance
SNMPv2-MIB::sysORID.7 = OID: SNMP-MPD-MIB::snmpMPDCompliance
SNMPv2-MIB::sysORID.8 = OID: SNMP-USER-BASED-SM-MIB::usmMIBCompliance
SNMPv2-MIB::sysORDescr.1 = STRING: The MIB module for SNMPv2 entities
SNMPv2-MIB::sysORDescr.2 = STRING: The MIB module for managing TCP implementations
SNMPv2-MIB::sysORDescr.3 = STRING: The MIB module for managing IP and ICMP implementations
SNMPv2-MIB::sysORDescr.4 = STRING: The MIB module for managing UDP implementations
SNMPv2-MIB::sysORDescr.5 = STRING: View-based Access Control Model for SNMP.
SNMPv2-MIB::sysORDescr.6 = STRING: The SNMP Management Architecture MIB.
SNMPv2-MIB::sysORDescr.7 = STRING: The MIB for Message Processing and Dispatching.
SNMPv2-MIB::sysORDescr.8 = STRING: The management information definitions for the SNMP User-based Security Model.
SNMPv2-MIB::sysORUpTime.1 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.2 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.3 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.4 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.5 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.6 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.7 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.8 = Timeticks: (0) 0:00:00.00

其中cacti设置远程主机10.10.10.8参数如下：

Description: 10.10.10.8
Hostname: 10.10.10.8
Host Template: ucd/net SNMP Host
SNMP Community: public
SNMP Version: Version 1
SNMP Port: 16000


远程主机10.10.10.8的snmp.conf如下：
#       sec.name  source          community
com2sec notConfigUser  127.0.0.1       public

####
# Second, map the security name into a group name:

#       groupName      securityModel securityName
group   notConfigGroup v1           notConfigUser
group   notConfigGroup v2c           notConfigUser

####
# Third, create a view for us to let the group have rights to:

# Make at least  snmpwalk -v 1 localhost -c public system fast again.
#       name           incl/excl     subtree         mask(optional)
#view    systemview    included   .1.3.6.1.2.1.1
#view    systemview    included   .1.3.6.1.2.1.25.1.1
view all included   .1

####
# Finally, grant the group read-only access to the systemview view.

#       group          context sec.model sec.level prefix read   write  notif
access  notConfigGroup ""      any       noauth    exact  all none none




问题：cacti的10.10.10.8主机设置，一直指示SNMP ERROR。我想可能是ssh tunneling的问题，通过snmpwalk -v 1 127.0.0.1:16000 -c public system，没net-snmp信息显示。。。不知道有兄弟有没有遇到过，请教，谢谢！！！

[ 本帖最后由 justin033 于 2010-1-30 23:51 编辑 ]

justin033

[root@db2 ~]# snmpwalk -v 1 127.0.0.0:16000 -c public system         
snmpwalk: Failure in sendto (Sub-id not found: (top) -> system) (Permission denied)


继续寻找问题原因