Changes between Version 3 and Version 4 of administration/cacti

Timestamp:

Apr 10, 2009, 11:40:52 PM (14 years ago)

Author:

greg

Comment:

--

administration/cacti

@@ -1 +1 @@
 monitor.silverfilecorp.com:2240
 (no login yet, need to get into sudoers)
+= Cacti Server and Remote Host Setup =
+== Initial Cacti Server Setup ==
+''This part needs to be done only once''
+
+Create a new user named 'cacti' to run the ssh tunnels
+{{{
+###create the user and home directory -m = make home directory
+pw useradd cacti -m
+###set the password for cacti
+passwd cacti
+}}}
+
+Create the private/public key for authentication
+{{{
+###This should be run from the cacti server logged in as the cacti user
+###Press enter twice to accept the defaults. Use no pass phrase.
+ssh-keygen -t rsa
+}}}
+
+Create a bash script to open up the ssh tunnels. We need to figure out the best way to close the 
+tunnels before this script runs once we have many SilverFile boxes to monitor. If the script is run while 
+the existing tunnels are open, additional tunnels will be opened up which will get messy. 
+Perhaps a perl or python script would be better for this.
+{{{
+###This should be run from the cacti server logged in as the cacti user.
+#!/bin/sh
+rm /home/cacti/tunnel.log
+###Server1.remotesilverfilebox.com
+### Each additional SilverFile box will get an entry like this one. The tunnel port number will
+###increase by one and the box address will be unique. 
+ssh -N -L 16000:127.0.0.1:161 snmp@server1.remotesilverfilebox.com >> /home/cacti/tunnel.log &
+###Example of next remote host
+###ssh -N -L 16001:127.0.0.1:161 snmp@server2.remotesilverfilebox.com >> /home/cacti/tunnel.log &
+}}}
+
+That's it until we have a remote host to monitor.
+
+== Remote Host setup ==
+Setup snmp and a no-login user to tranfer the data to the Cacti server
+
+Install snmp and some snmp utilities
+{{{
+###Install snmp and run it as a daemon
+apt-get install snmpd
+###Optional, intall some tools to use for testing if you want
+apt-get install snmp
+}}}
+Create a backup of the conf file and add our settings
+{{{
+###Make a copy of the original
+cp /etc/snmp/snmpd.conf /etc/snmp/snmpd.conf.orig
+###Edit snmpd.conf
+vim /etc/snmp/snmpd.conf
+}}}
+Change (or comment out and add a new line) the line starting with com2sec so it reads:
+  com2sec readonly default public (where public is the name of our community string)
+And add the following line to switch the port from upd to tcp
+   agentaddress tcp:161
+
+Restart the snmpd daemon
+{{{
+/etc/init.d/snmpd restart
+}}}
+Optional: Test that snmp is producing data
+{{{
+snmpwalk -v 1 -c public tcp:localhost:161
+}}}
+Make a new user for the ssh tunnel to connect to.
+{{{
+###add a regular user w/login for now. We'll remove login-ability later
+adduser snmp
+###Give snmp a password for now. write it down for later.
+passwd snmp
+}}}
+That's all on the remote client for now. 
+
+== Setup access to remote hosts from the cacti server ==
+
+Login as the ssh tunnel user and copy the public rsa key to the remote host.
+{{{
+###While logged in as ssh tunnel user.
+###This will connect to the remote host, create the ~/.ssh directory on the remote host and create then write
+###the public rsa key to the file ~/.ssh/authorized_keys. If the authorized_keys file already exists the key will 
+###be appended to the file.
+cat ~/.ssh/id_rsa.pub | ssh snmp@krs.bit-box.com 'mkdir .ssh && cat >>.ssh/authorized_keys'
+}}}
+
+Edit the tunnels.ssh file by adding the new host in a line similar to the others. Increase the 16000 range port by 
+one and use the new host's url. Save the file. make the file executable
+{{{
+chmod +x tunnels.sh
+}}}
+
+At this point it might be best to just initiate the tunnel from the command line. Once we get a script that
+will kill all the existing tunnels and then re-establish them all we'll be able to just run the script. For now
+Just copy the line you added to the script and run it from the command line.
+
+Now just log into the Cacti web-admin and configure the new client. Click on Devices and add a new device. The settings should be:
+Description: server1.silverfilecorp.com
+Hostname: tcp:127.0.0.1
+Host Template: ucd/net SNMP Host
+SNMP Community: public
+SNMP Version: Version 2
+SNMP Port: 16000 
+
+Make sure you put in the specific Description, Community and the SNMP Port for that host.
+
+Next configure the graphs you want. Seperate wiki
+
+
+
+
+
+
+
+
+
+