From: trango <ke...@po...> - 2004-11-06 15:43:32
|
Max Baker wrote: >Hi Kesy, > >On Fri, Nov 05, 2004 at 09:19:21AM +0100, trango wrote: > > >>How to get mac address from catalyst 4506 for interfaces with enable >>port-security. >>Functions fw_mac, bs_mac can't do this. >>Is SNMP::Info support port security or do I have to hack code myself? >>I am not perl ace - maybe there is any easier way to solve this proble? >> >> > >I'm not sure if port-security is the issue here. Are you familiar with the >cisco community string indexing ? It's where you have to connect to each >VLAN with a separate SNMP connection and treat it like a new device. Then >you poll fw_mac and bs_mac on each of those VLANs. > >See netdisco for an example, look at macsuck() and walk_fwtables() in the >'netdisco' executable. > >Also see the documentation in SNMP::Info::Layer2::Catalyst for a link on the >community string indexing problem. > >-m > > > > Hi, I know I have to add vlan_id to community for vlans (community@vlan_id) , but it seems the problem is in "dot1dBasePortIfIndex" because for interfaces with port security it returns 0 (zero) so it is not possible to identify the phisical interface. I think it is necessary to use CISCO-PORT-SECURITY-MIB and for example cpsIfSecureLastMacAddress . I added "cpsIfSecureLastMacAddress" to file Bridge.pm and now I can grab mac address, but I am not sure if direct modification SNMP::Info files is good way to solve problem? Thanks for reply, Kesy ---------------------------------------------------------------------- Startuj z INTERIA.PL!!! >>> http://link.interia.pl/f1837 |