Files
PipoCanaja b4741442c5 VRP: implement NAC data polling (#9592)
* VRP: implement NAC data polling

* typo

* Add and alter ports_nac table

* SQL syntax

* Adding fields in the GUI

* Set the default column visibility depending on OS

* ./build-schema.php

* Add vlan support for Cisco and correct ios_nac testdata

* Improve date display and column ordering

* Add vrp_nac testdata

* revert old DB schema

* db in migration syntax

* build-schema

* moment.duration() for time_left and time_elapsed
2019-01-19 11:26:52 -06:00

127 lines
5.3 KiB
PHP

<?php
/**
* Vrp.php
*
* Huawei VRP
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
*
* @package LibreNMS
* @link http://librenms.org
* @copyright 2018 Tony Murray
* @author Tony Murray <murraytony@gmail.com>
*/
namespace LibreNMS\OS;
use LibreNMS\Device\Processor;
use LibreNMS\Interfaces\Discovery\ProcessorDiscovery;
use LibreNMS\Interfaces\Polling\NacPolling;
use LibreNMS\OS;
use App\Models\PortsNac;
class Vrp extends OS implements ProcessorDiscovery, NacPolling
{
/**
* Discover processors.
* Returns an array of LibreNMS\Device\Processor objects that have been discovered
*
* @return array Processors
*/
public function discoverProcessors()
{
$device = $this->getDevice();
$processors_data = snmpwalk_cache_multi_oid($device, 'hwEntityCpuUsage', array(), 'HUAWEI-ENTITY-EXTENT-MIB', 'huawei');
if (!empty($processors_data)) {
$processors_data = snmpwalk_cache_multi_oid($device, 'hwEntityMemSize', $processors_data, 'HUAWEI-ENTITY-EXTENT-MIB', 'huawei');
$processors_data = snmpwalk_cache_multi_oid($device, 'hwEntityBomEnDesc', $processors_data, 'HUAWEI-ENTITY-EXTENT-MIB', 'huawei');
}
d_echo($processors_data);
$processors = array();
foreach ($processors_data as $index => $entry) {
if ($entry['hwEntityMemSize'] != 0) {
d_echo($index.' '.$entry['hwEntityBomEnDesc'].' -> '.$entry['hwEntityCpuUsage'].' -> '.$entry['hwEntityMemSize']."\n");
$usage_oid = '.1.3.6.1.4.1.2011.5.25.31.1.1.1.1.5.'.$index;
$descr = $entry['hwEntityBomEnDesc'];
$usage = $entry['hwEntityCpuUsage'];
if (empty($descr) || str_contains($descr, 'No') || str_contains($usage, 'No')) {
continue;
}
$processors[] = Processor::discover(
$this->getName(),
$this->getDeviceId(),
$usage_oid,
$index,
$descr,
1,
$usage
);
}
}
return $processors;
}
/**
* Discover the Network Access Control informations (dot1X etc etc)
*
*/
public function pollNac()
{
$nac = collect();
// We collect the first table
$portAuthSessionEntry = snmpwalk_cache_oid($this->getDevice(), 'hwAccessTable', [], 'HUAWEI-AAA-MIB');
if (!empty($portAuthSessionEntry)) {
// If it is not empty, lets add the Extended table
$portAuthSessionEntry = snmpwalk_cache_oid($this->getDevice(), 'hwAccessExtTable', $portAuthSessionEntry, 'HUAWEI-AAA-MIB');
// We cache a port_ifName -> port_id map
$ifName_map = $this->getDeviceModel()->ports()->pluck('port_id', 'ifName');
// update the DB
foreach ($portAuthSessionEntry as $authId => $portAuthSessionEntryParameters) {
$mac_address = strtolower(implode(array_map('zeropad', explode(':', $portAuthSessionEntryParameters['hwAccessMACAddress']))));
$port_id = $ifName_map->get($portAuthSessionEntryParameters['hwAccessInterface'], 0);
if ($port_id <=0) {
continue; //this would happen for an SSH session for instance
}
$nac->put($mac_address, new PortsNac([
'port_id' => $ifName_map->get($portAuthSessionEntryParameters['hwAccessInterface'], 0),
'mac_address' => $mac_address,
'auth_id' => $authId,
'domain' => $portAuthSessionEntryParameters['hwAccessDomain'],
'username' => ''.$portAuthSessionEntryParameters['hwAccessUserName'],
'ip_address' => $portAuthSessionEntryParameters['hwAccessIPAddress'],
'authz_by' => ''.$portAuthSessionEntryParameters['hwAccessType'],
'authz_status' => ''.$portAuthSessionEntryParameters['hwAccessAuthorizetype'],
'host_mode' => is_null($portAuthSessionEntryParameters['hwAccessAuthType'])?'default':$portAuthSessionEntryParameters['hwAccessAuthType'],
'timeout' => $portAuthSessionEntryParameters['hwAccessSessionTimeout'],
'time_elapsed' => $portAuthSessionEntryParameters['hwAccessOnlineTime'],
'authc_status' => $portAuthSessionEntryParameters['hwAccessCurAuthenPlace'],
'method' => ''.$portAuthSessionEntryParameters['hwAccessAuthtype'],
'vlan' => $portAuthSessionEntryParameters['hwAccessVLANID'],
]));
}
}
return $nac;
}
}