innovaphone wiki - User contributions [en]

Reference13r2:Services/SNMP

2020-02-13T07:23:06Z

Tsvatek:

The VoIP device allows the operating state to be monitored using '''SNMP''' (Simple Network Management Protocol with version 1 and 3). Standard MIB II and a manufacturer-specific MIB (Management Information Base) are supported. Detailed information about this MIB can be obtained from a certified innovaphone dealer or downloaded directly in the download area of the innovaphone homepage. It is included in the folder "tools" of the "apps" package together with other applications and firmware. File name: INNO-MIB-V7.TXT (http://download.innovaphone.com/ice/6.00/).

innovaphone uses the standard Ports for SNMP, UDP Port 161 and UDP Port 162 for SNMP traps, and they are not changeable.

Note: SNMP traps will not be send before an uptime of 90 seconds(will be collected in this time). Due to DHCP negotiation awaiting

{|
|valign=top nowrap=true|'''Enable:'''
| Enable the SNMP service (default: deactivated).
|-
|valign=top nowrap=true|'''Enable SNMPv1:'''
| SNMPv1 must be explicitely activated (default: deactivated).
|-
|valign=top nowrap=true|'''Community:'''
| If the standard community name public is not being used, a different community name can be entered in this field.
|-
|valign=top nowrap=true|'''Device Name:'''
| For more detailed information, a device name can be specified here for the SNMP agent.
|-
|valign=top nowrap=true|'''Contact:'''
| As can a contact person (Contact).
|-
|valign=top nowrap=true|'''Location:'''
| As can a location (Location).
|-
|valign=top nowrap=true|'''Authentication Trap:'''
| Access via SNMP is only possible if the correct community name is entered. If this check box is checked, a trap is generated in the case of access with an incorrect community name.
|-
|valign=top nowrap=true|'''Trap Destination:'''
| Destinations for trap messages also have to be defined if the device is to trigger the traps defined in the manufacturer-specific innovaphone MIB.
|-
|valign=top nowrap=true|'''Allowed Networks:'''
| To increase security, access to the device can be restricted by restricting SNMP access to a defined list of computers or IP address ranges. To disable SNMP access completely just enter ''0.0.0.0'' as ''Address'' and ''255.255.255.255'' as ''Mask''.
|-
|valign=top nowrap=true|'''SNMPv3/Engine ID:'''
| Informative: This agent's engine id according to RFC3411
|-
|valign=top nowrap=true|'''SNMPv3/Authentication:'''
| Choose from ''MD5'', ''SHA1''. A selection of ''NONE'' will force the encryption setting to ''NONE'', also.
|-
|valign=top nowrap=true|'''SNMPv3/Encryption:'''
| Choose from ''DES'', ''AES128''.
|-
|valign=top nowrap=true|'''SNMPv3/User,Password(Auth),Password(Crypt):'''
| Enter the credentials for this agent's authoritative engine. Two different passwords are configurable. One password for authentication and a different one for privacy/encryption.
|}

'''In V7 the SNMP Traps are enhanced'''

All events with type =Alarm are send via SNMP traps.
SNMP Trap delivers: code,severity,txt (e.g interface down) and Alarm –source (e.g IP0/ETH1)

innoDiagAlarm TRAP-TYPE
ENTERPRISE innovaphone
VARIABLES {
trapGaugeParm, -- Alarm Code
trapDisplayStringParm, -- Alarm Source
trapGaugeParm, -- Severity: indeterminate(0),major(1),critical(2)
trapDisplayStringParm -- Alarm Text
}
DESCRIPTION
"This trap corresponds to an alarm under Administration/Diagnostics/Alarms"
::= 6

innoDiagAlarmClear TRAP-TYPE
ENTERPRISE innovaphone
VARIABLES {
trapGaugeParm, -- Alarm Code
trapDisplayStringParm -- Alarm Source
}
DESCRIPTION
"This trap corresponds to an alarm clearing under Administration/Diagnostics/Alarms"
::= 7

===Testing SNMPv3 from a Linux host===
The following tests are based on Debian 9.

====snmpwalk====
Under Linux you can use snmpwalk to check the connection and read the OID tree. Replace the variables in the square brackets with the values of the snmp configuration on the innovaphone gateway.
<code type="bash">
# snmpwalk -v 3 -a SHA -A [Password(Auth)] -l authPriv -u [User] -x AES -X [Password(Crypt)] [IP address]
</code>

====SNMPv3 Traps====
Under Linux you can receive SNMPv3 traps using snmptrapd. The following example shows a snmptrapd.conf in /etc/snmp/. Replace the variables in the square brackets with the values of the snmp configuration on the innovaphone gateway.
<code type="bash">
createUser -e [engineID] [User] SHA [Password(Auth)] AES [Password(Crypt)]
authUser log,execute,net [User] priv
</code>

Now the snmptrapd daemon must be activated and started.
<code type="bash">
# systemctl enable snmptrapd.service
# systemctl start snmptrapd.service
</code>

After a restart of the snmptrapd daemon it should listen on Port 162 and you can receive the traps in syslog. Also make sure that the Linux firewall does not block ports 161 and 162.
<code type="bash">
# netstat -ntulp | grep :162
udp 0 0 0.0.0.0:162 0.0.0.0:* 28086/snmptrapd
</code>

<code type="bash">
# tail -f /var/log/syslog
</code>

Alternatively you can start snmptrapd directly from the command line. The events are displayed directly on the console. The snmptrapd service must be stopped before.
<code type="bash">
# systemctl stop snmptrapd.service
</code>
<code type="bash">
# snmptrapd -f -Lo
</code>

'''Important Note: After each change to /etc/snmp/snmptrap.conf, you must also clean up /var/lib/snmp/snmptrapd.conf (or /var/net-snmp/snmptrapd.conf). Scroll down! There are many blank rows in it. This persistent file is automatically created and used when smnptrapd starts, but is not automatically cleaned. Because of the required write permissions to this directory, snmptraced must be started as root.'''

====Helpful documents====

http://net-snmp.sourceforge.net/wiki/index.php/TUT:Configuring_snmptrapd_to_receive_SNMPv3_notifications

https://support.nagios.com/kb/article/snmp-trap-snmptrapd-service-88.html

===Testing from a Windows host===
iReasoning MIB Browser Professional could be a good choice. The program also includes a SNMPv3 Trap Recorder.

===Decoding of encrypted SNMPv3 packets in Wireshark===
Encrypted SNMPv3 packets can be decrypted by setting the credentials in the Wireshark Protocol Preferences.

[[Image:Wireshark_snmp_decode.jpg]]

File:Wireshark snmp decode.jpg

2020-02-13T07:20:45Z

Tsvatek:

2020-02-11T09:42:18Z

Tsvatek:

Reference13r2:Services/SNMP

2020-02-11T09:35:27Z

Tsvatek:

2019-09-30T18:55:23Z

Tsvatek:

==Applies To==
This information applies to

innovaphone PBX, V7 and later



==More Information==

===Problem Details===
Some customers require a ''Push to Talk'' feature. This essentially is a multi-party conference where all members are in mute-mode normally. Only if one member wants to speak, the PTT button will be pressed which turns off local-mute as long as the button is pushed.

===System Requirements===
You will need a PBX and a gateway with [[Reference:Administration/Gateway/Interfaces#Conferencing_interface_.28CONF.29 | conferencing device]]. The endpoints you use must support auto-local-mute mode and PTT button.

''Auto-local-mute'' is a feature where the device when initiating or receiving a conference call goes into mute mode initially. ''PTT Button'' is a button on the device that switches mute mode off as long as the button is pressed.

===Configuration===
In an innovaphone PBX setup, you would create a [[Reference7:Administration/PBX/Objects/Call Broadcast Conference|PBX Conference object]] and tick the ''Allow Announcement Calls'' or ''Call always as Announcement Call'' check mark.

The PTT session can be initiated by any device that is able to call into the conference object. If it supports announcement calls, the auto-off-hook can be initiated call-by-call, if not, it will be done for each conference on this object.

=== Known Problems ===
innovaphone IP phones have the ''auto-local-mute'' function, but they don't have a PTT button (as it does not make too much sense for fixed line devices). You can however use the microphone key to turn on/off mute. There are handsets available in the market which have a PTT button and should be compatible with fixed line innovaphone IP phones ([[User:Ckl|ckl]] 16:15, 4 February 2010 (CET) we are in the process of evaluating this - stay tuned).

There is currently no known solution for the IP72. You may want to have a look at Ascom's i75 though.

=== PTT Headsets ===
There are a number of Jabra headsets that support PTT. The Mute button can be configured using the Jabra Direct software. Please note that the headsets do PTT internally in the control unit and do not pass it on to e.g. the softphone. This has the advantage that the phone can be used for normal non-PTT conversations with the handset.

Jabra has named the following headsets:
- Jabra Engage 50 + Jabra Engage Link
- Jabra Biz 2300
- Jabra Biz 2400II CC
- Jabra Link 260

[[Image:Example.jpg]]

== Related Articles ==
[[Howto:Create Conference facility]] 
[[Reference7:Administration/PBX/Objects/Call Broadcast Conference]] 
[[Reference7:Administration/Gateway/Interfaces#Conferencing_interface_.28CONF.29]] 
[[Reference8:Configuration/Registration/Preferences]] 
[[Reference8:Configuration/Registration/Function-Keys/Dial]] 

[[Category:Howto|{{PAGENAME}}]]