Check_nwc_health privprotocol aes192

jayan021 · June 17, 2024, 8:01am

Hi Experts,

I am trying to monitor F5 firewall devices using check_nwc_health.
Due to environment requirements, I need to use sha256 and aes192.

While executing the checks, I am getting error:

CRITICAL - cannot create session object: The privProtocol “aes192” is unknown

Could you please help to know how to resolve this ?

Regards
Jay

moreamazingnick · June 17, 2024, 10:32am

you can try to patch the GLplugin Perl Module

github.com

lausser/GLPlugin/blob/master/lib/Monitoring/GLPlugin/SNMP.pm

package Monitoring::GLPlugin::SNMP;
our @ISA = qw(Monitoring::GLPlugin);
# ABSTRACT: helper functions to build a snmp-based monitoring plugin

use strict;
use File::Basename;
use Digest::MD5 qw(md5_hex);
use JSON;
use File::Slurp qw(read_file);
use Module::Load;
use AutoLoader;
our $AUTOLOAD;

use constant { OK => 0, WARNING => 1, CRITICAL => 2, UNKNOWN => 3 };

{
  our $mode = undef;
  our $plugin = undef;
  our $blacklist = undef;
  our $session = undef;

This file has been truncated. show original

or use plugin compatible encryption

 --authpassword
   The authentication password for SNMPv3
 --authprotocol
   The authentication protocol for SNMPv3 (md5|sha)
 --privpassword
   The password for authPriv security level
 --privprotocol
   The private protocol for SNMPv3 (des|aes|aes128|3des|3desde)

jayan021 · June 18, 2024, 9:33am

Thank you for the inputs.
I patched the GLplugin, however, still have the same error.
Do I need to update NET::SNMP or any other packages on my Satellite VM which is running on Rhel ?
Current NET::SNMP version is 5.9.1

Regards
Jay

moreamazingnick · June 18, 2024, 2:39pm

Can’t see your patch, so I have no idea waht you changed

Vani2468 · July 14, 2024, 1:15am

I am seeing similar issue. Were you able to fix it.

Unknown protocol SHA256.

jayan021 · July 29, 2024, 5:25am

No. It didn’t.
Later I contacted device vendor and they agreed to release patch to support aes128. However aes192 will be required and will be trying to enabling it later.