topic Re: SNMP configuration disappearing in Firewall and Security Management

SNMP configuration disappearing

FASIUDDIN — Tue, 07 Sep 2021 12:16:44 GMT

Hello,

I have added new SNMP IP in firewall via CLI like add snmp traps receiver X.X.X.X version v2 community Y.Y.Y.Y but after sometimes its automatically disappearing the configuration from device.

Please let me if you have any idea about this.

Re: SNMP configuration disappearing

PhoneBoy — Tue, 07 Sep 2021 16:35:36 GMT

Unlike the WebUI, when configuring via clish, save config must be executed to make configuration changes persistent.
Otherwise they won’t be persistent.

Re: SNMP configuration disappearing

FASIUDDIN — Tue, 07 Sep 2021 16:43:50 GMT

after adding the new SNMP IP obviously we have to save the configuration.

I have saved the configuration save config command.

then logged off and logged in Back 30 min later configuration will be disappeared.

Re: SNMP configuration disappearing

the_rock — Tue, 07 Sep 2021 21:40:20 GMT

Phoneboy made a very good point...clish always requires entering "save config" after you are done configuring things. Without it, it wont save anything.

Re: SNMP configuration disappearing

PhoneBoy — Tue, 07 Sep 2021 21:38:53 GMT

If you've, in fact made these changes as you've said, there should be evidence of this in /var/log/messages.
Likewise, if someone is changing it back, there should be evidence there as well.

Also, when you issue the necessary configuration via clish, you should see it reflected in /etc/syslog.conf.
If you don't, then do an lsattr /etc/syslog.conf and see if the "i" flag is shown (immutable).
If it is, then any change you make in Gaia won't be reflected.
Then you can run chattr -i /etc/syslog.conf to remove it.

Re: SNMP configuration disappearing

FASIUDDIN — Wed, 08 Sep 2021 08:51:37 GMT

Hi PhoneBoy,

Thanks for update, I have run the above command and below are the result.

1. I have checked the logs for stat /etc/syslog.conf and below are the result.

Access: 2021-09-08 10:58:18.000000000 +1000
Modify: 2016-10-21 05:25:25.000000000 +1100
Change: 2016-10-21 05:25:25.000000000 +1100

2, And i have run the this command lsattr /etc/syslog.conf to check the flag and below are the result.

------------- /etc/syslog.conf

Re: SNMP configuration disappearing

PhoneBoy — Sun, 12 Sep 2021 05:23:11 GMT

What about when you make the config change via clish?
Can you see that /etc/syslog.conf has changed?
Can you see those changes mentioned in /var/log/messages?
And when the change is reverted, do you see changes being undone?

Also, what version/JHF level is the gateway in question?

Re: SNMP configuration disappearing

FASIUDDIN — Mon, 13 Sep 2021 15:39:04 GMT

Issue got resolved by removing old scrip from device. Thank you

Re: SNMP configuration disappearing

the_rock — Mon, 13 Sep 2021 16:33:21 GMT

Good to know, thanks for updating us.