LAN Network

Cisco Firewall monitoring will be supported since XorMon v2.3.0
It is ready for testing. Anyone willing to test it? Contact us at support@xorux.com.
Fortinet monitoring will be supported since XorMon v2.3.0
It is ready for testing. Anyone willing to test it? Contact us at support@xorux.com.

Product uses SNMP v1,2c,3 read-only access (port 161 UDP) to get data from LAN switches.
Generally all network devices having SNMP MIBs compatible with Cisco should work.

  • Enable SNMP communication from XorMon server to all LAN switches on port 161, UDP
    Connections are always initiated from XorMon server side

  • SNMP v3 setup:
    Perl SNMP v3 compatibility Auth & Priv support matrix

    • Cisco: follow XorMon setup example or the Cisco official one

    • HPE Aruba:
      • AuthPriv and AuthPass passwords to be a minimum of 8 characters.
      • User on the switch itself needs to be placed in a specific SNMPv3 group (see config below)
      • SNMPv3 server on the switch might respond on the first IP address configured only on the switch.
        (unsure whether this is a limitation, bug, or due to the actual management interface not being configured, use that IP or modify your DNS to point to it)
      snmp-server contact "<contact>" location "<location>"
      snmpv3 enable
      snmpv3 only
      snmpv3 user xormon auth sha <AuthPass> priv aes <PrivPass>
      snmpv3 group managerpriv user "xormon" sec-model ver3        
      
  • To monitor VLAN must be enabled on the switch this:
    $ interface vlan { vlan-id | vlan-range}
    
  • Add switches into configuration:
    Settings icon ➡ Devices ➡ Network ➡ LAN ➡ New ➡ Vendor:device ...
    Cisco LAN monitoring

  • Troubleshooting:
    This must work from cmd line, it must provide name of the switch (place your IP and community string)
    snmpwalk -v 2c -c public 192.168.1.1 1.3.6.1.2.1.1.5