SNMP with CARP MIB?

topi

pfSense doesn't integrate CARP MIB to monitoring state of CARP interfaces

it's possible to add this MIB in future releases or manually?

thanks

jimp

Nothing special about monitoring CARP interfaces. They show up like any other interface, and up=Master, down=Backup.

topi

@jimp:

Nothing special about monitoring CARP interfaces. They show up like any other interface, and up=Master, down=Backup.

yes, i know it, i'm monitoring them this way, but i'm interested in the CARP-MIB (http://www.packetmischief.ca/openbsd-snmp-mibs/#carpmib)

thanks anyway

jimp

That is for net-snmp, we run bsnmpd so their code/mib wouldn't work.

bsnmpd does have a pf MIB:
http://files.chi.pfsense.org/jimp/BEGEMOT-PF-MIB.txt
and also
http://files.chi.pfsense.org/jimp/BEGEMOT-HOSTRES-MIB.txt

dtsomp

Would you be so kind enough to explain the "up=Master,down=Backup" thing a bit more? Or is there a link somewhere to bring us n00bs up to date? :)

jimp

Best way is to illustrate it, like so:

Master:

vip1: flags=49 <up,loopback,running>metric 0 mtu 1500
        inet x.x.x.12 netmask 0xffffff80 
        carp: MASTER vhid 1 advbase 1 advskew 0</up,loopback,running>

Backup:

vip1: flags=49 <up,loopback,running>metric 0 mtu 1500
        inet x.x.x.12 netmask 0xffffff80 
        carp: BACKUP vhid 1 advbase 1 advskew 100</up,loopback,running>

SNMP Response:

From Master:

$ snmpget -On -v 2c -c mystuff x.x.x.15 IF-MIB::ifDescr.9  
.1.3.6.1.2.1.2.2.1.2.9 = STRING: vip1
$ snmpget -On -v 2c -c mystuff x.x.x.15 IF-MIB::ifOperStatus.9      
.1.3.6.1.2.1.2.2.1.8.9 = INTEGER: up(1)

From Backup:

$ snmpget -On -v 2c -c mystuff x.x.x.16 IF-MIB::ifDescr.11
.1.3.6.1.2.1.2.2.1.2.11 = STRING: vip1
$ snmpget -On -v 2c -c mystuff x.x.x.16 IF-MIB::ifOperStatus.11     
.1.3.6.1.2.1.2.2.1.8.11 = INTEGER: dormant(5)

The Interface status for the vip interface is different depending on whether it's in the master or backup state, you can poll that interface status to determine if a box is down or to find which one is master or backup.

dtsomp

Thanks, that was illuminating.