Atheros SNMP Telnet Commands? (HTML Post)

Hi,

Apologies for the HTML. I tried posting this in plain ASCII, but the spacing became a complete mess.
I've been wanting to play around with SNMP for some time, but just got around to after playing with Wallwatcher.
One of my routers works fine, but can't seem to get a bunch of WAPs I have to work. The WAPs are D-Link DWL-7100AP TriMode (802.11a/g/b).

Supposibly, the DWL-7100AP supports SNMP. The product description says it has SNMP support. It is written all over D-Link's website and even the retail box. However, there is no interface for SNMP in it's web config interface. The only interface for SNMP configuration is through telnet.

I've looked everywhere for documentation on how to use these commands. Up and down the web with google and NG archives with Deja. Nothing out there except for a few other sporadic posts -- asking the same thing.

Its self-explanatory to an extent, but without any documentation I'm still left in the cold. All I know is that for SNMP you need to setup some sort of group, user, and point it to a host -- which I'm assuming is a PC running an SNMP client for the "traps" to be sent to.

D-Link's response when asked for documentation:
"Telnet commands are not supported by D-Link Tech Support."

Translated: "We are quick to write 'SNMP support' on the retail box, but if you want to actually use it, we have no clue how!"

Below is a captured buffer from a telnet session. Text in italics are commands that I entered. I chose "open" for the name of a group and "test" for the name of a user. I chose "No Authorization Protocol" and "No Private Protocol" because I'm just wanting to see the thing actually work first and, quite frankly, I have absolutetly no idea what either of those two are.

It seems a user/group was added and should be pointed towards a host IP, but that host IP "aint gettin' nuthin."

Am I missing how to actually enable SNMP? I don't see any command reference to enable or disable. Maybe its enabled automatically when a host IP is put into the table? I have no clue.

D-Link and even Atheros offer no documentation, what-so-ever. I suppose you are supposed to just guess? "It's a mystery wrapped in a riddle inside an enigma. Even the f'n developers don't know how it works."

In addition to SNMP, there is a whole swatch of "set" commands (basically the same stuff as you can config through web) and "tftp" commands. Those are all straight forward though.

Anyone know how this actually works?

Thanks!


------------------------------------
D-Link Access Point login: ********
Password: ********

Atheros Access Point Rev 3.3.0.156
D-Link Access Point wlan0 -> snmp
snmp adduser -- Add Us
snmp deluser -- Delete
snmp showuser -- Show U
snmp setauthkey -- Set Us
snmp setprivkey -- Set User Private Key
snmp addgroup -- Add User Group
snmp delgroup -- Delete User Group
snmp showgroup -- Show U
snmp addview -- Add Us
snmp delview -- Delete User View
snmp showview -- Show U
snmp addcomm -- Add Co
snmp delcomm -- Delete Communication String
snmp showcomm -- Show Communication String
snmp addhost -- Add Host To Notify List
snmp delhost -- Delete
snmp showhost -- Show H
snmp authtrap -- Set Au
snmp sendtrap -- Send W
snmp load_default -- Load S
Not enough parameters!
D-Link Access Point wlan0 -> snmp showgroup

SNMP Group Settings

Group Name ReadView Name WriteView Name NotifyView Name SNMP Security
---------- --------------- --------------- --------------- ---- -------------
initial restricted restricted v3 NoAuth,NoPriv
ReadGroup CommunityView CommunityView v1 NoAuth,NoPriv
ReadGroup CommunityView CommunityView v2 NoAuth,NoPriv
WriteGroup CommunityView CommunityView CommunityView v1 NoAuth,NoPriv
WriteGroup CommunityView CommunityView CommunityView v2 NoAuth,NoPriv

Total Entries: 5

D-Link Access Point wlan0 -> snmp addgroup

snmp addgroup < GroupName<string>
Security Level<1/2/3>
(1:noauth_nopriv/2:auth
ReadView<string>(none:NULL) WriteView<string>(none:NULL)
NotifyView<string>(none:NULL) >

D-Link Access Point wlan0 -> snmp addgroup snmp addgroup open 1 CommunityView CommunityView CommunityView

Group has created successfully

D-Link Access Point wlan0 -> snmp showgroup

SNMP Group Settings

Group Name ReadView Name WriteView Name NotifyView Name SNMP Security
---------- --------------- --------------- --------------- ---- -------------
open CommunityView CommunityView CommunityView v3 NoAuth,NoPriv
initial restricted restricted v3 NoAuth,NoPriv
ReadGroup CommunityView CommunityView v1 NoAuth,NoPriv
ReadGroup CommunityView CommunityView v2 NoAuth,NoPriv
WriteGroup CommunityView CommunityView CommunityView v1 NoAuth,NoPriv
WriteGroup CommunityView CommunityView CommunityView v2 NoAuth,NoPriv

Total Entries: 6

D-Link Access Point wlan0 -> snmp showuser

EngineID: 800000ab03001195b72518

Username Group Name SNMP Version Auth-Protocol Priv-Protocol
--------------- --------------- ------------ ------------- -------------
initial initial V3 None None

Total Entries: 1

D-Link Access Point wlan0 -> snmp adduser

snmp adduser < UserName<string> GroupName<string>
AuthProtocol<1/2/3>(1:n
AuthKey<string>(Keys/no
PrivProtocol<1/2>(1:non
PrivKey<string>(Keys/none) >

D-Link Access Point wlan0 -> snmp adduser test open 1 none 1 none

Add user successful!

D-Link Access Point wlan0 -> snmp showuser

EngineID: 800000ab03001195b72518

Username Group Name SNMP Version Auth-Protocol Priv-Protocol
--------------- --------------- ------------ ------------- -------------
test open V3 None None
initial initial V3

Total Entries: 2

D-Link Access Point wlan0 -> snmp showhost

SNMP Host Table is empty !

D-Link Access Point wlan0 -> snmp addhost

snmp addhost < TrapHostIP<string> SnmpType<1/2/3>(1:v3/2:v2c/3:v3)
AuthType<0/1/2/3>
(0:v1,v2c/1:v3,noauth_n
/3:v3,auth_priv)
AuthString<string>(CommunityString:v1,v2c/UserName:v3) >


D-Link Access Point wlan0 -> snmp addhost 192.168.0.120 3 1 test

Add host successfully

D-Link Access Point wlan0 -> snmp showhost

SNMP Host Table
Host IP Address SNMP Version Community Name / SNMPv3 User Name
--------------- ------------------ ---------------------------------
192.168.0.120 V3 NoAuth,NoPriv test

Total Entries: 1

D-Link Access Point wlan0 -> r
Rebooting AP...
------------------------------------

[POSTED TO alt.internet.wireless - REPLY ON USENET PLEASE]

In <Mz_Pf.16609$(E-Mail Removed)> on Thu, 09 Mar 2006 18:35:24
GMT, "Eric" <(E-Mail Removed)> wrote:

>Apologies for the HTML. I tried posting this in plain ASCII, but the spacing became a complete mess.
>[SNIP]

Not a good reason. Please get a better newsreader.

--
Best regards, SEE THE FAQ FOR ALT.INTERNET.WIRELESS AT
John Navas <http://en.wikibooks.org/wiki/FAQ_for_alt.internet.wireless>

Yes, its working!

Sorry for the HTML in the previous post, just wanted to make sure the telnet
text capture remained readable.
It may be helpful to someone in the future looking to do the same thing with
these AP's.

Looks like my guesswork with the SNMP telnet commands actually did work, but
Wallwatcher watching catching the SNMP.

Installed another program called "PRTG Traffic Grapher" and immiedietly got
excited when seeing the SNMP autosensor find the WAP I had "configured".
Not believing it could be that easy, I pointed the program to IP's of other
WAPs (same model) on my network but hadn't "configured" them through telnet.
To my suprise and delight, the autosensor failed to see them.

Got it back to the configed WAP and watching all the traffic. Whats cool is
that the SNMP automatically sensed that the WAP had three points for where
traffic passes: 802.11a, 802.11g/b, and the ethernet port.

Going beyond that, I had a .MIB file for this particular WAP, but until
using this program didn't really know what the heck to do with it. The
program allows for you to import .MIB's, of which I did, and now it is
seeing all sorts of cool stuff from the WAP. (Assuming a .MIB is a database
of OID's. Still learning here.)

I'm still in play mode, learning how this all works before configuring
everything permenantly. Its just cool that know I know it does work.

Bunch of unanswered questions, but I "think" I should be on the path of
figuring them out now. Even if it takes "trial and error". The
"Authorization Protocol" and "Private Protocol" things (which I have no clue
what actually are yet) kind of bug me because I'm assuming that what I'm
doing now is out in the clear and open. Also unsure if this SNMP stuff
just stays local on the LAN or goes out onto the WAN. Think I'll be able
to figure all that out though.

Anyway, if you got stuff that does SNMP, give it a try -- especially if
there is a custom .MIB for it. The generic "database" gives quite a bit of
useful information (mainly traffic), but with the imported .MIB it is
relaying all kinds of info.

-Eric

On Thu, 09 Mar 2006 22:57:22 GMT, "Eric" <(E-Mail Removed)> wrote:

>Anyway, if you got stuff that does SNMP, give it a try -- especially if
>there is a custom .MIB for it. The generic "database" gives quite a bit of
>useful information (mainly traffic), but with the imported .MIB it is
>relaying all kinds of info.

Generic 802.11 MIB [IEEE802dot11-MIB] from Cisco.
http://www.LearnByDestroying.com/cru...02dot11-MIB.my

--
# Jeff Liebermann 150 Felker St #D Santa Cruz CA 95060
# 831-336-2558 (E-Mail Removed)
# http://802.11junk.com (E-Mail Removed)
# http://www.LearnByDestroying.com AE6KS

"Jeff Liebermann" wrote in message...
>
> Generic 802.11 MIB [IEEE802dot11-MIB] from Cisco.
> http://www.LearnByDestroying.com/cru...02dot11-MIB.my
>
> --
> # Jeff Liebermann 150 Felker St #D Santa Cruz CA 95060
> # 831-336-2558 (E-Mail Removed)
> # http://802.11junk.com (E-Mail Removed)
> # http://www.LearnByDestroying.com AE6KS

Oh, cool, thanks! Definetly will play with that MIB later as well. I
didn't even know that MIB's were nothing more than just text files until
looking at that one, as all the ones I've been playing with (including
DLink's) were extended with .mib Makes sense though. The descriptions in
that file should prove quite helpful. Found enough reference material to
believe I should get the authentication and private protocols licked too.
Still learning this stuff, but its pretty neat. Actually it seems much more
simple than I thought it was going to be. :^)

Man, now that I'm seeing really good data and statistics, seeing (like you
always say) how bad (and inefficient) repeating really is! Yeah, it
"works", but underneath its really like a nasty "kludge". I'll be running
more CAT5 soon.

Thanks again!
-Eric

"Eric" <(E-Mail Removed)> hath wroth:

>"Jeff Liebermann" wrote in message...
>> Generic 802.11 MIB [IEEE802dot11-MIB] from Cisco.
>> http://www.LearnByDestroying.com/cru...02dot11-MIB.my

>Oh, cool, thanks! Definetly will play with that MIB later as well. I
>didn't even know that MIB's were nothing more than just text files until
>looking at that one, as all the ones I've been playing with (including
>DLink's) were extended with .mib

Just rename the file. The .MIB extension screws up when a web browser
tried to view it directly. Use a different extension for downloads
and rename.

Also, DWL-900AP+ MIB.
http://www.LearnByDestroying.com/crud/DWL900APMIB.mib
This uses a TI ACX100 chip. Not the same as Atheros. Might be worth
digging through.

>Makes sense though. The descriptions in
>that file should prove quite helpful. Found enough reference material to
>believe I should get the authentication and private protocols licked too.
>Still learning this stuff, but its pretty neat. Actually it seems much more
>simple than I thought it was going to be. :^)

I think you have a DWL-7100AP. Note that Dlink sells an SNMP
monitoring package:
http://www.dlink.com/products/?sec=0&pid=121
No clue on the price. You can get the trial version for free:
http://www.dlink.com/products/d-view...equestform.asp
My guess is you can borrow the MIB files from the package.

This is lifted from my reply to a question on SNMP and traffic
monitoring using various tools. Might be of interest:

MRTG (multirouter traffic grapher)
http://people.ee.ethz.ch/~oetiker/webtools/mrtg/

RRDTool (Round Robin Database Tool)
http://people.ee.ethz.ch/~oetiker/webtools/rrdtool/

Both of these will extract SNMP statistics from your wireless access
point and plot pretty pictures. MRTG is very easy to setup and runs
mostly on PERL. RRDTool is more complex, but had better pictures with
more detail and features. Either will work.

RRDTool and wireless setup:
http://martybugs.net/wireless/rrdtool/
http://martybugs.net/linux/rrdtool/traffic.cgi
http://openfire.coloradocollege.edu/mrtg/how.html (Cisco 1200)

Example of MRTG used to monitor wireless traffic:
http://www.ima.umn.edu/stats/mrtg/wireless.html (click on any
graph)
http://www.ima.umn.edu/stats/mrtg/wirewall.html (firewall)
http://openfire.coloradocollege.edu/mrtg/wireless.html (user count)
http://barnes.bloomu.edu/mrtg/wireless.html (user count)

Cisco page on MRTG monitoring:

http://www.cisco.com/univercd/cc/td/...mssol/mrtg.htm

You are probably going to need the Cisco MIBs for your equipment:
http://www.cisco.com/public/sw-cente...mtk/mibs.shtml
http://downloads.somix.com/mibs/cisco-mibs.zip
http://www.snmplink.org/src/MIBs.html

It's kinda difficult to troubleshoot SNMP problem with MRTG or
RRDTool. For troubleshooting, you use a MIB browser such as GetIF
2.3.1:
http://www.wtcs.org/snmp4tpc/getif.htm
The trick to using it is to copy your MIB files into the:
c:\program files\getif 2.3.1\mibs\
directory. Then, erase the file:
.index (note the leading dot).
GetIF will recreate the .index file on startup. Do this every time
you add anything to the mibs directory. Point GetIF at the IP address
of the access point. Use the correct read-only community name
(usually public). Hit the MBrowser tab and select "Start". You
should get a long list of OID's (object identifiers) and their values.
If you loaded all the necessary MIB databases, then you should get
descriptions in addition to OID numbers. If this works, then you have
access to SNMP in your access point.

There are also some handy Linux tools that have been ported to
Windoze. See Net-SNMP at:
http://net-snmp.sourceforge.net

There are also some notes on MIB support for net-snmp which includes
mention of Atheros MIB's. See:
http://www.avantcom.com/snmp80211.aspx
http://www.avantcom.com/snmpAVC80211.aspx

--
Jeff Liebermann (E-Mail Removed)
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

In message <(E-Mail Removed)>, Jeff Liebermann
<(E-Mail Removed)> wrote:

> Just rename the file. The .MIB extension screws up when a web browser
> tried to view it directly. Use a different extension for downloads
> and rename.
>
> Also, DWL-900AP+ MIB.
> http://www.LearnByDestroying.com/crud/DWL900APMIB.mib
> This uses a TI ACX100 chip. Not the same as Atheros. Might be worth
> digging through.
>
>
> I think you have a DWL-7100AP. Note that Dlink sells an SNMP
> monitoring package:
> http://www.dlink.com/products/?sec=0&pid=121
> No clue on the price. You can get the trial version for free:
> http://www.dlink.com/products/d-view...equestform.asp
> My guess is you can borrow the MIB files from the package.
>
> This is lifted from my reply to a question on SNMP and traffic
> monitoring using various tools. Might be of interest:
>
> MRTG (multirouter traffic grapher)
> http://people.ee.ethz.ch/~oetiker/webtools/mrtg/
>
> RRDTool (Round Robin Database Tool)
> http://people.ee.ethz.ch/~oetiker/webtools/rrdtool/
>
> Both of these will extract SNMP statistics from your wireless access
> point and plot pretty pictures. MRTG is very easy to setup and runs
> mostly on PERL. RRDTool is more complex, but had better pictures with
> more detail and features. Either will work.
>
> RRDTool and wireless setup:
> http://martybugs.net/wireless/rrdtool/
> http://martybugs.net/linux/rrdtool/traffic.cgi
> http://openfire.coloradocollege.edu/mrtg/how.html (Cisco 1200)
>
> Example of MRTG used to monitor wireless traffic:
> http://www.ima.umn.edu/stats/mrtg/wireless.html (click on any
> graph)
> http://www.ima.umn.edu/stats/mrtg/wirewall.html (firewall)
> http://openfire.coloradocollege.edu/mrtg/wireless.html (user count)
> http://barnes.bloomu.edu/mrtg/wireless.html (user count)
>
> Cisco page on MRTG monitoring:
>
>
http://www.cisco.com/univercd/cc/td/...mssol/mrtg.htm
>
> You are probably going to need the Cisco MIBs for your equipment:
> http://www.cisco.com/public/sw-cente...mtk/mibs.shtml
> http://downloads.somix.com/mibs/cisco-mibs.zip
> http://www.snmplink.org/src/MIBs.html
>
> It's kinda difficult to troubleshoot SNMP problem with MRTG or
> RRDTool. For troubleshooting, you use a MIB browser such as GetIF
> 2.3.1:
> http://www.wtcs.org/snmp4tpc/getif.htm
> The trick to using it is to copy your MIB files into the:
> c:\program files\getif 2.3.1\mibs\
> directory. Then, erase the file:
> .index (note the leading dot).
> GetIF will recreate the .index file on startup. Do this every time
> you add anything to the mibs directory. Point GetIF at the IP address
> of the access point. Use the correct read-only community name
> (usually public). Hit the MBrowser tab and select "Start". You
> should get a long list of OID's (object identifiers) and their values.
> If you loaded all the necessary MIB databases, then you should get
> descriptions in addition to OID numbers. If this works, then you have
> access to SNMP in your access point.
>
> There are also some handy Linux tools that have been ported to
> Windoze. See Net-SNMP at:
> http://net-snmp.sourceforge.net
>
> There are also some notes on MIB support for net-snmp which includes
> mention of Atheros MIB's. See:
> http://www.avantcom.com/snmp80211.aspx
> http://www.avantcom.com/snmpAVC80211.aspx
>
> --
> Jeff Liebermann (E-Mail Removed)
> 150 Felker St #D http://www.LearnByDestroying.com
> Santa Cruz CA 95060 http://802.11junk.com
> Skype: JeffLiebermann AE6KS 831-336-2558
--

Hi,

Thanks. Great resources. I'll certaintly make use of them. Sorry to be
short here, but on a handheld.

SNMP is pretty cool. Foundation is simple enough, but is pretty efficient.
I was more curious than anything else to see it in action. Helpful on my
little piddly home networks, imagine must be really cool on big com/edu/gov
wide area nets using real network equipment.

Cheers,
Eric

In message <XY_Pf.532064$(E-Mail Removed)>, John
Navas <(E-Mail Removed)> wrote:

> >Apologies for the HTML. I tried posting this in plain ASCII, but the
spacing became a complete mess.
> >[SNIP]
>
> Not a good reason. Please get a better newsreader.
>
> --
> Best regards, SEE THE FAQ FOR ALT.INTERNET.WIRELESS AT
> John Navas <http://en.wikibooks.org/wiki/FAQ_for_alt.internet.wireless>
--

I'd be happy to do just that. Know of one that can properly handle ASCII
buffer dumps without mangling the spacing? Tried many different readers
in the past to do just that, but all mangled the text -- especially tables.

I hate HTML posts as much as anyone else, but seems the only way to force
a fixed font so text doesn't mangle.

Thanks

"Eric" <(E-Mail Removed)> hath wroth:

>--

You might also want to fix your style as adding a signature delimiter
(as above) at the beginning of the message effectively truncates any
replies at that point. Don't do that.

>I'd be happy to do just that. Know of one that can properly handle ASCII
>buffer dumps without mangling the spacing?

I'll assume Windoze. If Unix, Linux, or Mac, kindly disclose.
Forte Agent:
http://www.forteinc.com
Currently, I'm using Fixedsys 9pt for the message body. It's also a
good idea to avoid using tabs as different readers handle these in
different ways.

>Tried many different readers
>in the past to do just that, but all mangled the text -- especially tables.

They will all try to autowrap text beyond about column 75. The trick
is to insert a character that is normally used for quoting. Forte
will not autowrap anything that begins with one of these. I use "|"
but ">" and ":" will also work (and perhaps a few other).

>I hate HTML posts as much as anyone else, but seems the only way to force
>a fixed font so text doesn't mangle.

Perhaps it would be best if you followed a variation of the golden
rule. Don't post garbage that you would not want to read or see
yourself.


--
Jeff Liebermann (E-Mail Removed)
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

"Jeff Liebermann" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> "Eric" <(E-Mail Removed)> hath wroth:
>
> >--
>
> You might also want to fix your style as adding a signature delimiter
> (as above) at the beginning of the message effectively truncates any
> replies at that point. Don't do that.
>
> >I'd be happy to do just that. Know of one that can properly handle ASCII
> >buffer dumps without mangling the spacing?
>
> I'll assume Windoze. If Unix, Linux, or Mac, kindly disclose.
> Forte Agent:
> http://www.forteinc.com
> Currently, I'm using Fixedsys 9pt for the message body. It's also a
> good idea to avoid using tabs as different readers handle these in
> different ways.
>
> >Tried many different readers
> >in the past to do just that, but all mangled the text -- especially
tables.
>
> They will all try to autowrap text beyond about column 75. The trick
> is to insert a character that is normally used for quoting. Forte
> will not autowrap anything that begins with one of these. I use "|"
> but ">" and ":" will also work (and perhaps a few other).
>
> >I hate HTML posts as much as anyone else, but seems the only way to force
> >a fixed font so text doesn't mangle.
>
> Perhaps it would be best if you followed a variation of the golden
> rule. Don't post garbage that you would not want to read or see
> yourself.
>
>
> --
> Jeff Liebermann (E-Mail Removed)
> 150 Felker St #D http://www.LearnByDestroying.com
> Santa Cruz CA 95060 http://802.11junk.com
> Skype: JeffLiebermann AE6KS 831-336-2558

Thanks, I'll give that a try. (And also fix Ink Spot CE from doing the
'--'.)