Get the VRRP-A Status via SNMP or aXAPI

kgh · July 2012

Hello,

I would like to get the vrrp-a status from some ax devices running2.6.1-GR1-P2 . So I am able to
login to the active vrrp-a unit without trying to connect to both to get the active one. Is there a way to monitor the vrrp-a status ( active / standby ) via snmp or aXAPI? I did not find a snmp OID or the REST Api path for these values.

Kind regards
Klaus

danguijun · July 2012

Hi Klaus, you could use the “cli.show_info” Method through API pointing to one of the devices.

This method process commands under EXEC mode.

Example Response
Request as:
URL:
https://192.168.100.44:443/services/rest/V2/?session_id=ff52ffff07ffff58ffff46ff4fffff&method=cli.show_info

HTTP Action:
POST

Response Fields:
Standard plain text CLI output

Example:
Process ‘show version’ and ‘help’ in aXAPI:

HTTP POST Body:
show ver
help

Considering you want to get the vrrp-a status of both devices, you could use on the HTTP POST Body the following command:

show vrrp-a

In case you want more details regarding the vrrp-a status between devices, you could use also:

show vrrp-a detail

Hope it helps

Cheers,

Danguijun

JackofallTrades · July 2012

Below is a python script that will allow you to accomplish what you desire.

 #this package is for common API task
import urllib
from xml.dom import minidom
class UrlBuilder:
def __init__(self,domain, path, params):
self.domain = domain
self.path = path
self.params = params
def withPath(self,path):
self.path = path
return self
def withParams(self,params):
self.params = params
return self
def __str__(self):
return 'https://' + self.domain + self.path + self.params
# or return urlparse.urlunparse( ( "http", self.domain, self.path, self.params, "", "" )
def build(self):
return self.__str__()
class auth:
@classmethod
def sessionID(cls, host, username, password):
services_path = "/services/rest/V2/"
builder_auth_params = ''
sid_url = UrlBuilder(host, services_path, builder_auth_params)
method = 'authenticate'
authparams = urllib.urlencode({
'method': method,
'username': username,
'password': password
})
sessionID = minidom.parse(urllib.urlopen(sid_url.__str__(), authparams)).getElementsByTagName('session_id')[0].childNodes[0].nodeValue
return sessionID
@classmethod
def sessionClose(cls, host, sid):
method = "method=session.close"
response = req.get(host, method, sid)
return response
class path:
@classmethod
def v2(cls):
return "/services/rest/V2/"
@classmethod
def sessionID(cls):
return "?session_id="
class req:
@classmethod
def get(cls,host, method, sid):
url = UrlBuilder(host, path.v2(), path.sessionID() + sid + "&" + method.__str__() + "&format=json")
data = urllib.urlopen(url.__str__()).read()
return data
@classmethod
def post(cls, host, method, sid, config):
#print host, method, sid, config
#exit()
url = UrlBuilder(host, path.v2(), path.sessionID() + sid + "&" + method.__str__() + "&format=json")
#body = urllib.urlencode(config)
#print body
data = urllib.urlopen(url.__str__(),config).read()
return data
class partition:
@classmethod
def active(cls, host, sid, name):
data = req.get(host, 'method=system.partition.active&name='+name, sid)
return data
username = "admin"
password = "a10"
host = "172.21.21.254"
'''
Separate request by \n
'''
config = "show vrrp-a \n sh int br \n show session"
sid = auth.sessionID(host, username, password)
vrrpStatus = req.post(host, 'method=cli.show_info', sid, config)
print vrrpStatus

Output:
show vrrp-a
vrid default
Unit State Weight Priority
1 (Local) Active 65534 150
vrid that is running: default

kgh · August 2012

Thanks for your feedback I will test it

Kind regards
Klaus

kgh · August 2012

Hello JackofallTrades,

I tried to connect wiht your script. I am running ubunut 12.04 which is using openssl v1.0.1.

I always get this error.
[Errno socket error] [Errno 1] _ssl.c:504: error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version

The A10 webserver is only supporting TLSv1.0 , but openssl is using tlsv1.2.
When I connect with openssl s_client -tls1 host:port it is working

I also tried it whit pyculr running against gnutls, with the error.
I found no way to define in pycurl or urrlib the tls vesion 1.0 ?

Here my pyculr part with all the options I tried.

import pycurl
from StringIO import StringIO

response = StringIO()

conn = pycurl.Curl()
conn.setopt(pycurl.URL, url)
conn.setopt(pycurl.VERBOSE,1)
conn.setopt(pycurl.WRITEFUNCTION, response.write)
conn.setopt(pycurl.SSL_VERIFYPEER, 0)
conn.setopt(pycurl.SSL_VERIFYHOST, 0)
conn.setopt(pycurl.SSLVERSION, pycurl.SSLVERSION_TLSv1)
conn.setopt(pycurl.SSL_CIPHER_LIST,"NONE:+VERS-TLS1.0:+AES-128-CBC:+RSA:+SHA1:+COMP-NULL")
#conn.setopt(pycurl.SSL_CIPHER_LIST, "+VERS-TLS1.0:!VERS-TLS1.1:!VERSTLS1.2")
#conn.setopt(pycurl.SSLVERSION,pycurl.SSLVERSION_SSLv2)
#conn.setopt(pycurl.SSLVERSION,pycurl.SSLVERSION_DEFAULT)
try:
conn.perform()
xmlstring=response.getvalue()
httperror=False
except pycurl.error as error:
httperror=str(error)
xmlstring=False
#
return xmlstring,httperror

Have you any idea how to define this ?

Kind regards
Klaus

kgh · August 2012

Here is the gnutls error message.

* gnutls_handshake() failed: A TLS fatal alert has been received.
* Closing connection #0
Error Message: (35, 'gnutls_handshake() failed: A TLS fatal alert has been received.')

JackofallTrades · August 2012

I will look into this and try to get something back by next week. On first look it seems that there might be a limitation in urllib to address this issue. It might have to do with the fact that th AX webserver may not know who to negotiate to a lower version of TSL.

We will see.

kgh · August 2012

I found a solution that works for me :

http://bugs.python.org/issue11220

Kind regards
Klaus

kgh · August 2012

With this definition it is working:

self.sock = ssl.wrap_socket(sock, self.key_file, self.cert_file, ssl_version=ssl.PROTOCOL_TLSv1)

kgh · October 2012

Hello JackofallTrades,

I hope you could help me again. Because of the SSL problem in ubunut version 12.04 I am trying to connect via urllib2. But the post seems not to work. It always send the sssion_id and the method.

postdata="show version"
request=urllib2.Request(url,postdata)
#request
response=urllib2.urlopen(request)
#convert to string
xmlstring=response.read()

The "show audit" log show that the postdata is not transfered.
axapi: [/services/rest/V2/] GET[session_id=831d4228fc3be3e922bfb8825ea324&method=cli.show_info] POST[session_id=831d4228fc3be3e922bfb8825ea324&method=cli.show_info]

The documentation to urllib2 wants a tuple of data for a post.

------
http://docspy2zh.readthedocs.org/en/latest/library/urllib2.html

urllib2.urlopen(url[, data][, timeout])
data may be a string specifying additional data to send to the server, or None if no such data is needed. Currently HTTP requests are the only ones that use data; the HTTP request will be a POST instead of a GET when the data parameter is provided. data should be a buffer in the standard application/x-www-form-urlencoded format. The urllib.urlencode() function takes a mapping or sequence of 2-tuples and returns a string in this format. urllib2 module sends HTTP/1.1 requests with Connection:close header included.

------

What kind of tuple must be send to the axapi ?
???? = show version

Kind regards
Klaus

kgh · October 2012

Hello ,

could some help me on this issue ?

Kind regards
Klaus

kgh · October 2012

Hello,

I have tested now with wget and got the error message. Invalid username/password.

------
<error code="2007" msg="Invalid username/password."
------

show audit output is listing open a cli session
------
Oct 12 2012 10:03:03 Session[1] closed
Oct 12 2012 10:03:03 [bla01] axapi: [/services/rest/V2/] GET[session_id=05149c7afcf5566d8701f8d6b95bf8&method=cli.show_info&format=json] POST[session_id=05149c7afcf5566d8701f8d6b95bf8&method=cli.show_info&format=json]
Oct 12 2012 10:03:03 A cli session[1] opened, username: bla01, remote host: 127.0.0.1
------

Anything was running in this session.

------

#sh admin session
Id User Name Start Time Source IP Type Partition Authen Role Cfg
------------------------------------------------------------------------------------------------------------
2 bla01 09:45:06 CEST Fri Oct 12 2012 1.1.1.1 WEBSERVICE Radius ReadWriteAdmin No

------

I am running version
64-bit Advanced Core OS (ACOS) version 2.6.1-GR1-P4, build 22 (Aug-14-2012,22:13)

I have attached the debug output from wget.

Is it a problem if I authenticate the user against a remote system ?

Kind regards
Klaus

JackofallTrades · October 2012

Klaus,

Sorry for the late reply. I can not reproduce the errors on my machine.

Looking at the issue I can not reproduce that error. Below is the code I am using:


import urllib
import json
from xml.dom import minidom
class UrlBuilder:
def __init__(self,domain, path, params):
self.domain = domain
self.path = path
self.params = params
def withPath(self,path):
self.path = path
return self
def withParams(self,params):
self.params = params
return self
def __str__(self):
return 'http://' + self.domain + self.path + self.params
# or return urlparse.urlunparse( ( "http", self.domain, self.path, self.params, "", "" )
def build(self):
return self.__str__()
class auth:
@classmethod
def sessionID(cls, host, username, password):
services_path = "/services/rest/V2/"
builder_auth_params = ''
sid_url = UrlBuilder(host, services_path, builder_auth_params)
method = 'authenticate'
authparams = urllib.urlencode({
'method': method,
'username': username,
'password': password
})
sessionID = minidom.parse(urllib.urlopen(sid_url.__str__(), authparams)).getElementsByTagName('session_id')[0].childNodes[0].nodeValue
return sessionID
@classmethod
def sessionClose(cls, host, sid):
method = "method=session.close"
response = req.getXML(host, method, sid)
return response
class path:
@classmethod
def v2(cls):
return "/services/rest/V2/"
@classmethod
def v1dot1(cls):
return "/services/rest/V1.1/"
@classmethod
def v1(cls):
return "/services/rest/V1/"
@classmethod
def v1dot2(cls):
return "/services/rest/V1.2/"
@classmethod
def sessionID(cls):
return "?session_id="
class req:
@classmethod
def getJson(cls,host, method, sid):
url = UrlBuilder(host, path.v2(), path.sessionID() + sid + "&" + method.__str__() + "&format=json")
data = urllib.urlopen(url.__str__()).read()
return data
@classmethod
def postJson(cls, host, method, sid, config):
#print host, method, sid, config
#exit()
url = UrlBuilder(host, path.v2(), path.sessionID() + sid + "&" + method.__str__() + "&format=json")
#body = urllib.urlencode(config)
#print body
data = urllib.urlopen(url.__str__(),config).read()
return data
@classmethod
def getXML(cls,host, method, sid):
url = UrlBuilder(host, path.v2(), path.sessionID() + sid + "&" + method.__str__() )
data = urllib.urlopen(url.__str__()).read()
return data
@classmethod
def postXML(cls, host, method, sid, config):
#print host, method, sid, config
#exit()
url = UrlBuilder(host, path.v2(), path.sessionID() + sid + "&" + method.__str__() )
#body = urllib.urlencode(config)
#print bod
data = urllib.urlopen(url.__str__(),config).read()
return data
class cli(object):
@classmethod
def show(cls, host, sid, command):
method = "method=cli.show_info"
data = req.postXML(host, method, sid, command)
return data
host = "172.21.21.254"
username = 'admin'
password = 'a10'
commands = ["show version" ]
sid = auth.sessionID(host, username, password)
for cmds in commands:
foo = cli.show(host, sid, cmds)
print foo
auth.sessionClose(host, sid)

Output is:


AX Series Advanced Traffic Manager AX2500
Copyright 2007-2012 by A10 Networks, Inc. All A10 Networks products are
protected by one or more of the following US patents and patents pending:
7716378, 7675854, 7647635, 7552126, 20090049537, 20080229418, 20080040789,
20070283429, 20070271598, 20070180101
64-bit Advanced Core OS (ACOS) version 2.6.1-GR1-P4, build 22 (Aug-14-2012,22:13)
Booted from Hard Disk primary image
Serial Number: AX25051110280131
aFleX version: 2.0.0
aXAPI version: 2.0
Hard Disk primary image (default) version 2.6.1-GR1-P4, build 22
Hard Disk secondary image version 2.6.1, build 484
Compact Flash primary image (default) version 2.4.3-p4, build 17
Compact Flash secondary image version 2.4.3-p4, build 17
Last configuration saved at Oct-9-2012, 14:54
Hardware: 8 CPUs(Stepping 5), Single 74G Hard disk
Memory 6123 Mbyte, Free Memory 1581 Mbyte
Current time is Oct-15-2012, 16:53
The system has been up 0 day, 2 hours, 33 minutes
AX2500#

kgh · October 2012

Hi JackofallTrades,

I found the problem why it is not working in my installation.
I have configured a enable-password in my system. If the enable-password is defined it is not
working. If the enable-password is the default ( a return ) it is working. Could you please try it.
# configure
# (config)#enable-password WORD The password
# Remove the password with
# (config)#no enable-password

Kind regards
Klaus

Get the VRRP-A Status via SNMP or aXAPI

Comments