uid=1000(logmgmt) gid=1000(logmgmt) groups=1000(logmgmt),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),111(syslog),122(lpadmin),135(lxd),136(sambashare)
logmgmt@syslogserver:~$ sudo apt install grafana
[sudo] password for logmgmt:
패키지 목록을 읽는 중입니다... 완료
의존성 트리를 만드는 중입니다... 완료
상태 정보를 읽는 중입니다... 완료

No apt package "grafana", but there is a snap with that name.
Try "snap install grafana"

E: grafana 패키지를 찾을 수 없습니다
logmgmt@syslogserver:~$ sudo snap install grafana
grafana 6.7.4 from Canonical✓ installed
logmgmt@syslogserver:~$ ps -ef | grep grafana
root      195358       1  3 14:09 ?        00:00:01 /snap/grafana/36/bin/grafana-server -homepath /snap/grafana/36
logmgmt   195407  167612  0 14:10 pts/0    00:00:00 grep --color=auto grafana
logmgmt@syslogserver:~$

 

'기술 노트 > ubuntu' 카테고리의 다른 글

grafana admin 계정  (0) 2023.12.21
snap으로 grafana 설치 후 grafana.ini 설정  (0) 2023.12.21
snmp-exporter-0.25 설치하기  (0) 2023.12.21
snmp-mibs-downloader snmp snmpd 다운로드  (0) 2023.12.21
prometheus.yml 설정  (0) 2023.12.21

최신 버전 다운로드 받기

저는 ubuntu에서 설치하기 위해 아래 파일을 다운로드 했습니다.

snmp_exporter-0.25.0.linux-amd64.tar.gz

https://github.com/prometheus/snmp_exporter/releases

 

Releases · prometheus/snmp_exporter

SNMP Exporter for Prometheus. Contribute to prometheus/snmp_exporter development by creating an account on GitHub.

github.com

 

root@syslogserver:/opt# wget https://github.com/prometheus/snmp_exporter/releases/download/v0.25.0/snmp_exporter-0.25.0.linux-amd64.tar.gz
--2023-12-21 12:08:50--  https://github.com/prometheus/snmp_exporter/releases/download/v0.25.0/snmp_exporter-0.25.0.linux-amd64.tar.gz
Resolving github.com (github.com)... 20.200.245.247
Connecting to github.com (github.com)|20.200.245.247|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/31185891/aaa12aa4-ebfa-4e22-b061-b274132432f3?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20231221%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231221T030851Z&X-Amz-Expires=300&X-Amz-Signature=518fc3871a119d47abd6a0d64285244b57db69c2e019be3694a25e3ae0378f8f&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=31185891&response-content-disposition=attachment%3B%20filename%3Dsnmp_exporter-0.25.0.linux-amd64.tar.gz&response-content-type=application%2Foctet-stream [following]
--2023-12-21 12:08:51--  https://objects.githubusercontent.com/github-production-release-asset-2e65be/31185891/aaa12aa4-ebfa-4e22-b061-b274132432f3?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20231221%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231221T030851Z&X-Amz-Expires=300&X-Amz-Signature=518fc3871a119d47abd6a0d64285244b57db69c2e019be3694a25e3ae0378f8f&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=31185891&response-content-disposition=attachment%3B%20filename%3Dsnmp_exporter-0.25.0.linux-amd64.tar.gz&response-content-type=application%2Foctet-stream
Resolving objects.githubusercontent.com (objects.githubusercontent.com)... 185.199.111.133, 185.199.110.133, 185.199.109.133, ...
Connecting to objects.githubusercontent.com (objects.githubusercontent.com)|185.199.111.133|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 8441503 (8.0M) [application/octet-stream]
Saving to: ‘snmp_exporter-0.25.0.linux-amd64.tar.gz’

snmp_exporter-0.25.0.linux-amd64.tar.gz           100%[===========================================================================================================>]   8.05M  --.-KB/s    in 0.1s

2023-12-21 12:08:52 (63.5 MB/s) - ‘snmp_exporter-0.25.0.linux-amd64.tar.gz’ saved [8441503/8441503]

root@syslogserver:/opt# ls -al
total 8252
drwxr-xr-x  2 root root    4096 12월 21 12:08 .
drwxr-xr-x 20 root root    4096 11월 28 13:53 ..
-rw-r--r--  1 root root 8441503 12월 10 19:07 snmp_exporter-0.25.0.linux-amd64.tar.gz
root@syslogserver:/opt# tar zxvf ./snmp_exporter-0.25.0.linux-amd64.tar.gz
snmp_exporter-0.25.0.linux-amd64/
snmp_exporter-0.25.0.linux-amd64/snmp.yml
snmp_exporter-0.25.0.linux-amd64/LICENSE
snmp_exporter-0.25.0.linux-amd64/NOTICE
snmp_exporter-0.25.0.linux-amd64/snmp_exporter
root@syslogserver:/opt#
root@syslogserver:/opt# mv ./snmp_exporter-0.25.0.linux-amd64 ./snmp_exporter
root@syslogserver:/opt#

 

설정은 아래 참조

snmp-exporter-0.25 버전에서는 아래와 같은 방식으로 수정하네요.

/opt/snmp_exporter/snmp.yml 파일 맨 상단에 있습니다.

# WARNING: This file was auto-generated using snmp_exporter generator, manual changes will be lost.
auths:
#  public_v1:
#    community: public
#    security_level: noAuthNoPriv
#    auth_protocol: MD5
#    priv_protocol: DES
#    version: 1
  public_v2:
    community: public
#    security_level: noAuthNoPriv
#    auth_protocol: MD5
#    priv_protocol: DES
    version: 2
modules:
  apcups:
    walk:

 

위 설정이 안되면 아래 링크를 참조하세요~

https://dirt-spoon.tistory.com/77

 

snmp_exporter 설정

설정 파일 위치는 설치자에 따라 다를 겁니다. 제가 설치한 방법을 따라 하셨다면 아래의 경로에 해당 파일이 존재 합니다. "/opt/snmp_exporter/snmp.yml" 워낙 방대해서 기본 설정이외 수정한 부분을

dirt-spoon.tistory.com

 

snmp_exporter 프로세스 만들기

  • user: snmp_exporter
  • Process: snmp_exporter
root@syslogserver:/opt/snmp_exporter# ln -s /opt/snmp_exporter/snmp_exporter /usr/local/bin/snmp_exporter
root@syslogserver:/opt/snmp_exporter# useradd --system snmp_exporter
root@syslogserver:/opt/snmp_exporter# cd /etc/systemd/system/
root@syslogserver:/opt/snmp_exporter# echo '
[Unit]
Description=Prometheus SNMP Exporter Service
After=network.target

[Service]
Type=simple
User=snmp_exporter
ExecStart=/usr/local/bin/snmp_exporter --config.file="/opt/snmp_exporter/snmp.yml"

[Install]
WantedBy=multi-user.target' > /etc/systemd/system/snmp-exporter.service
root@syslogserver:/opt/snmp_exporter# ls -al /etc/systemd/system | grep snmp
-rw-r--r--  1 root root  237 12월 21 12:19 snmp-exporter.service
root@syslogserver:/opt/snmp_exporter# systemctl daemon-reload
root@syslogserver:/opt/snmp_exporter# systemctl enable snmp-exporter.service
Created symlink /etc/systemd/system/multi-user.target.wants/snmp-exporter.service → /etc/systemd/system/snmp-exporter.service.
root@syslogserver:/opt/snmp_exporter#

 

프로세스 확인하기

root@syslogserver:/opt/snmp_exporter# systemctl restart snmp-exporter.service
root@syslogserver:/opt/snmp_exporter# ps -ef | grep snmp-exporter
root      188764  167915  0 12:23 pts/5    00:00:00 grep --color=auto snmp-exporter
root@syslogserver:/opt/snmp_exporter#

'기술 노트 > ubuntu' 카테고리의 다른 글

snap으로 grafana 설치 후 grafana.ini 설정  (0) 2023.12.21
grafana 설치하기  (1) 2023.12.21
snmp-mibs-downloader snmp snmpd 다운로드  (0) 2023.12.21
prometheus.yml 설정  (0) 2023.12.21
Prometheus 설치  (1) 2023.12.21

snmp-exporter 설치 전 설치하기

mib 정보나 snmpget 같은 명령어를 위해서 설치합니다~

root@syslogserver:/etc/logstash/pattern.d# apt install snmp-mibs-downloader snmp snmpd
패키지 목록을 읽는 중입니다... 완료
의존성 트리를 만드는 중입니다... 완료
상태 정보를 읽는 중입니다... 완료
The following additional packages will be installed:
  smistrip
제안하는 패키지:
  snmptrapd
다음 새 패키지를 설치할 것입니다:
  smistrip snmp snmp-mibs-downloader snmpd
0개 업그레이드, 4개 새로 설치, 0개 제거 및 15개 업그레이드 안 함.
5,407 k바이트 아카이브를 받아야 합니다.
이 작업 후 6,271 k바이트의 디스크 공간을 더 사용하게 됩니다.
계속 하시겠습니까? [Y/n] y
받기:1 http://kr.archive.ubuntu.com/ubuntu jammy-updates/main amd64 snmpd amd64 5.9.1+dfsg-1ubuntu2.6 [60.3 kB]
받기:2 http://kr.archive.ubuntu.com/ubuntu jammy/universe amd64 smistrip all 0.4.8+dfsg2-16 [7,904 B]
받기:3 http://kr.archive.ubuntu.com/ubuntu jammy-updates/main amd64 snmp amd64 5.9.1+dfsg-1ubuntu2.6 [176 kB]
받기:4 http://kr.archive.ubuntu.com/ubuntu jammy/multiverse amd64 snmp-mibs-downloader all 1.5 [5,163 kB]
내려받기 5,407 k바이트, 소요시간 3초 (1,871 k바이트/초)
패키지를 미리 설정하는 중입니다...
Selecting previously unselected package snmpd.
(데이터베이스 읽는중 ...현재 284928개의 파일과 디렉터리가 설치되어 있습니다.)
Preparing to unpack .../snmpd_5.9.1+dfsg-1ubuntu2.6_amd64.deb ...
Unpacking snmpd (5.9.1+dfsg-1ubuntu2.6) ...
Selecting previously unselected package smistrip.
Preparing to unpack .../smistrip_0.4.8+dfsg2-16_all.deb ...
Unpacking smistrip (0.4.8+dfsg2-16) ...
Selecting previously unselected package snmp.
Preparing to unpack .../snmp_5.9.1+dfsg-1ubuntu2.6_amd64.deb ...
Unpacking snmp (5.9.1+dfsg-1ubuntu2.6) ...
Selecting previously unselected package snmp-mibs-downloader.
Preparing to unpack .../snmp-mibs-downloader_1.5_all.deb ...
Unpacking snmp-mibs-downloader (1.5) ...
smistrip (0.4.8+dfsg2-16) 설정하는 중입니다 ...
snmp (5.9.1+dfsg-1ubuntu2.6) 설정하는 중입니다 ...
snmpd (5.9.1+dfsg-1ubuntu2.6) 설정하는 중입니다 ...
adduser: Warning: The home directory `/var/lib/snmp' does not belong to the user you are currently creating.
Created symlink /etc/systemd/system/multi-user.target.wants/snmpd.service → /lib/systemd/system/snmpd.service.
snmp-mibs-downloader (1.5) 설정하는 중입니다 ...

Downloading documents and extracting MIB files.
This will take some minutes.

In case this process fails, it can always be repeated later by executing
/usr/bin/download-mibs again.

RFC1155-SMI: 119 lines.
RFC1213-MIB: 2613 lines.
NOTE: SMUX: ignored.
SMUX-MIB: 158 lines.
CLNS-MIB: 1294 lines.
RFC1381-MIB: 1007 lines.
RFC1382-MIB: 2627 lines.
RFC1414-MIB: 131 lines.
SNMPv2-PARTY-MIB: 1410 lines.
SNMPv2-M2M-MIB: 807 lines.
MIOX25-MIB: 708 lines.
PPP-LCP-MIB: 764 lines.
PPP-SEC-MIB: 289 lines.
PPP-IP-NCP-MIB: 203 lines.
PPP-BRIDGE-NCP-MIB: 429 lines.
FDDI-SMT73-MIB: 2126 lines.
TOKEN-RING-RMON-MIB: 2302 lines.
SOURCE-ROUTING-MIB: 450 lines.
DECNET-PHIV-MIB: 3030 lines.
DSA-MIB: 642 lines.
DPI20-MIB: 47 lines.
IBM-6611-APPN-MIB: 5112 lines.
DNS-SERVER-MIB: 1078 lines.
DNS-RESOLVER-MIB: 1196 lines.
UPS-MIB: 1899 lines.
CHARACTER-MIB: 646 lines.
RS-232-MIB: 788 lines.
PARALLEL-MIB: 286 lines.
SNA-NAU-MIB: 2765 lines.
SIP-MIB: 1099 lines.
Modem-MIB: 1340 lines.
RDBMS-MIB: 1377 lines.
RIPv2-MIB: 532 lines.
APPLETALK-MIB: 3398 lines.
SNA-SDLC-MIB: 2761 lines.
TOKENRING-MIB: 836 lines.
TOKENRING-STATION-SR-MIB: 175 lines.
TCPIPX-MIB: 331 lines.
SNMPv2-USEC-MIB: 238 lines.
MIP-MIB: 2127 lines.
DOT12-IF-MIB: 772 lines.
DLSW-MIB: 3560 lines.
APPC-MIB: 5104 lines.
SNMP-REPEATER-MIB: 3265 lines.
FRAME-RELAY-DTE-MIB: 992 lines.
ISDN-MIB: 1260 lines.
DIAL-CONTROL-MIB: 1270 lines.
RSVP-MIB: 2660 lines.
INTEGRATED-SERVICES-MIB: 750 lines.
INTEGRATED-SERVICES-GUARANTEED-MIB: 218 lines.
APPN-DLUR-MIB: 632 lines.
HPR-MIB: 1270 lines.
DOT12-RPTR-MIB: 1978 lines.
SYSAPPL-MIB: 1539 lines.
IPOA-MIB: 1654 lines.
IPATM-IPMC-MIB: 3244 lines.
IPV6-TCP-MIB: 211 lines.
IPV6-UDP-MIB: 141 lines.
APPN-MIB: 5611 lines.
APPN-TRAP-MIB: 477 lines.
EBN-MIB: 702 lines.
IPV6-TC: 67 lines.
IPV6-MIB: 1443 lines.
IPV6-ICMP-MIB: 529 lines.
DS0-MIB: 305 lines.
DS0BUNDLE-MIB: 311 lines.
ATM-ACCOUNTING-INFORMATION-MIB: 402 lines.
ACCOUNTING-CONTROL-MIB: 768 lines.
ATM-TC-MIB: 713 lines.
ATM-MIB: 2995 lines.
TN3270E-MIB: 1953 lines.
TN3270E-RT-MIB: 896 lines.
APPLICATION-MIB: 2995 lines.
SNMPv2-SMI: 344 lines.
NOTE: FIZBIN-MIB: ignored.
SNMPv2-TC: 772 lines.
SNMPv2-CONF: 322 lines.
HPR-IP-MIB: 487 lines.
WWW-MIB: 1272 lines.
DIRECTORY-SERVER-MIB: 772 lines.
SMON-MIB: 1254 lines.
ADSL-TC-MIB: 113 lines.
ADSL-LINE-MIB: 4328 lines.
ETHER-CHIPSET-MIB: 532 lines.
NHRP-MIB: 2596 lines.
Job-Monitoring-MIB: 1652 lines.
FLOW-METER-MIB: 1901 lines.
AGENTX-MIB: 527 lines.
SLAPM-MIB: 2842 lines.
SNMP-USM-DH-OBJECTS-MIB: 532 lines.
VRRP-MIB: 789 lines.
NETWORK-SERVICES-MIB: 626 lines.
MTA-MIB: 1226 lines.
HOST-RESOURCES-MIB: 1540 lines.
HOST-RESOURCES-TYPES: 389 lines.
RMON-MIB: 3980 lines.
FIBRE-CHANNEL-FE-MIB: 1781 lines.
HCNUM-TC: 118 lines.
IF-MIB: 1814 lines.
IF-INVERTED-STACK-MIB: 149 lines.
PTOPO-MIB: 804 lines.
IPMROUTE-STD-MIB: 869 lines.
IGMP-STD-MIB: 516 lines.
PIM-MIB: 889 lines.
COPS-CLIENT-MIB: 844 lines.
FRNETSERV-MIB: 2479 lines.
FR-ATM-PVC-SERVICE-IWF-MIB: 1066 lines.
RTP-MIB: 981 lines.
DISMAN-EVENT-MIB: 1882 lines.
DISMAN-EXPRESSION-MIB: 1182 lines.
NOTIFICATION-LOG-MIB: 753 lines.
IPV6-MLD-MIB: 417 lines.
FR-MFR-MIB: 888 lines.
PINT-MIB: 573 lines.
DOCS-BPI-MIB: 1569 lines.
INTERFACETOPN-MIB: 1023 lines.
DISMAN-SCRIPT-MIB: 1764 lines.
SFLOW-MIB: 389 lines.
CIRCUIT-IF-MIB: 369 lines.
FRSLD-MIB: 1768 lines.
DISMAN-SCHEDULE-MIB: 699 lines.
HC-RMON-MIB: 3149 lines.
DSMON-MIB: 4449 lines.
DIFFSERV-DSCP-TC: 64 lines.
DIFFSERV-MIB: 3514 lines.
GSMP-MIB: 1582 lines.
L2TP-MIB: 2664 lines.
SNMP-FRAMEWORK-MIB: 526 lines.
SNMP-MPD-MIB: 145 lines.
NOTE: : ignored.
SNMP-TARGET-MIB: 660 lines.
SNMP-NOTIFICATION-MIB: 589 lines.
SNMP-PROXY-MIB: 294 lines.
NOTE: : ignored.
SNMP-USER-BASED-SM-MIB: 912 lines.
SNMP-VIEW-BASED-ACM-MIB: 830 lines.
SNMPv2-PDU: 133 lines.
SNMPv2-TM: 176 lines.
SNMPv2-MIB: 854 lines.
TRANSPORT-ADDRESS-MIB: 421 lines.
ENTITY-SENSOR-MIB: 440 lines.
HC-ALARM-MIB: 707 lines.
ADSL-LINE-EXT-MIB: 1169 lines.
APS-MIB: 1659 lines.
MALLOC-MIB: 1364 lines.
SNMP-COMMUNITY-MIB: 505 lines.
OPT-IF-MIB: 6616 lines.
SONET-MIB: 2360 lines.
PerfHist-TC-MIB: 178 lines.
IPV6-FLOW-LABEL-MIB: 58 lines.
ATM2-MIB: 3220 lines.
POWER-ETHERNET-MIB: 621 lines.
EtherLike-MIB: 1862 lines.
HC-PerfHist-TC-MIB: 222 lines.
VDSL-LINE-MIB: 2844 lines.
APM-MIB: 2127 lines.
DIFFSERV-CONFIG-MIB: 243 lines.
NOTE: IANA-PRINTER-MIB: ignored.
Printer-MIB: 4389 lines.
NOTE: IANA-FINISHER-MIB: ignored.
Finisher-MIB: 869 lines.
MPLS-TC-STD-MIB: 635 lines.
MPLS-TE-STD-MIB: 2483 lines.
MPLS-LSR-STD-MIB: 2106 lines.
MPLS-FTN-STD-MIB: 1030 lines.
MPLS-LDP-STD-MIB: 2408 lines.
MPLS-LDP-ATM-STD-MIB: 757 lines.
MPLS-LDP-FRAME-RELAY-STD-MIB: 641 lines.
MPLS-LDP-GENERIC-STD-MIB: 321 lines.
ROHC-MIB: 1133 lines.
ROHC-UNCOMPRESSED-MIB: 197 lines.
ROHC-RTP-MIB: 636 lines.
SNMP-USM-AES-MIB: 62 lines.
TRIP-TC-MIB: 132 lines.
TRIP-MIB: 2007 lines.
SCTP-MIB: 1342 lines.
ALARM-MIB: 1127 lines.
NOTE: IANA-ITU-ALARM-TC-MIB: ignored.
ITU-ALARM-TC-MIB: 86 lines.
ITU-ALARM-MIB: 486 lines.
ARC-MIB: 396 lines.
DS3-MIB: 1786 lines.
TE-MIB: 1679 lines.
INET-ADDRESS-MIB: 402 lines.
NAT-MIB: 2391 lines.
POLICY-BASED-MANAGEMENT-MIB: 2060 lines.
TCP-MIB: 785 lines.
DOCS-IETF-SUBMGT-MIB: 672 lines.
FC-MGMT-MIB: 2205 lines.
VDSL-LINE-EXT-SCM-MIB: 420 lines.
VDSL-LINE-EXT-MCM-MIB: 662 lines.
TUNNEL-MIB: 738 lines.
UDP-MIB: 549 lines.
DOCS-IETF-BPI2-MIB: 3451 lines.
ENTITY-MIB: 1411 lines.
SSPM-MIB: 1029 lines.
TPM-MIB: 1916 lines.
BRIDGE-MIB: 1472 lines.
TE-LINK-STD-MIB: 1745 lines.
VPN-TC-STD-MIB: 72 lines.
ENTITY-STATE-TC-MIB: 169 lines.
ENTITY-STATE-MIB: 332 lines.
BGP4-MIB: 1232 lines.
IP-FORWARD-MIB: 1277 lines.
IP-MIB: 4993 lines.
MOBILEIPV6-MIB: 3984 lines.
RSTP-MIB: 306 lines.
HDSL2-SHDSL-LINE-MIB: 2503 lines.
DOCS-IETF-QOS-MIB: 3060 lines.
P-BRIDGE-MIB: 1157 lines.
Q-BRIDGE-MIB: 2367 lines.
MPLS-LC-ATM-STD-MIB: 336 lines.
MPLS-LC-FR-STD-MIB: 263 lines.
IFCP-MGMT-MIB: 1015 lines.
MPLS-L3VPN-STD-MIB: 1588 lines.
FCIP-MGMT-MIB: 1037 lines.
T11-FC-NAME-SERVER-MIB: 1136 lines.
T11-TC-MIB: 67 lines.
T11-FC-FABRIC-ADDR-MGR-MIB: 1241 lines.
ISIS-MIB: 4317 lines.
SCSI-MIB: 2758 lines.
AGGREGATE-MIB: 477 lines.
TIME-AGGREGATE-MIB: 375 lines.
RMON2-MIB: 5711 lines.
ISCSI-MIB: 3097 lines.
IPS-AUTH-MIB: 1156 lines.
DOCS-IF-MIB: 5291 lines.
DOCS-IETF-CABLE-DEVICE-NOTIFICATION-MIB: 1453 lines.
DISMAN-PING-MIB: 1561 lines.
DISMAN-TRACEROUTE-MIB: 1850 lines.
DISMAN-NSLOOKUP-MIB: 509 lines.
MSDP-MIB: 1182 lines.
T11-FC-ROUTE-MIB: 448 lines.
T11-FC-FSPF-MIB: 1170 lines.
LMP-MIB: 3185 lines.
DOCS-CABLE-DEVICE-MIB: 3141 lines.
RADIUS-AUTH-CLIENT-MIB: 710 lines.
RADIUS-AUTH-SERVER-MIB: 774 lines.
RADIUS-ACC-CLIENT-MIB: 638 lines.
RADIUS-ACC-SERVER-MIB: 727 lines.
RADIUS-DYNAUTH-CLIENT-MIB: 767 lines.
RADIUS-DYNAUTH-SERVER-MIB: 699 lines.
PKTC-IETF-MTA-MIB: 2081 lines.
ADSL2-LINE-TC-MIB: 729 lines.
ADSL2-LINE-MIB: 5476 lines.
RAQMON-MIB: 1417 lines.
RAQMON-RDS-MIB: 672 lines.
T11-FC-VIRTUAL-FABRIC-MIB: 523 lines.
OSPF-MIB: 4164 lines.
OSPF-TRAP-MIB: 584 lines.
SIP-TC-MIB: 177 lines.
SIP-COMMON-MIB: 1913 lines.
SIP-UA-MIB: 200 lines.
SIP-SERVER-MIB: 869 lines.
SNMP-IEEE802-TM-MIB: 40 lines.
GMPLS-TC-STD-MIB: 124 lines.
GMPLS-TE-STD-MIB: 1749 lines.
NOTE: IANA-GMPLS-TC-MIB: ignored.
GMPLS-LSR-STD-MIB: 503 lines.
GMPLS-LABEL-STD-MIB: 689 lines.
DS1-MIB: 3015 lines.
IPSEC-SPD-MIB: 2682 lines.
MAU-MIB: 1740 lines.
NOTE: IANA-MAU-MIB: ignored.
DOT3-EPON-MIB: 2532 lines.
DOT3-OAM-MIB: 2115 lines.
TCP-ESTATS-MIB: 2941 lines.
T11-FC-FABRIC-CONFIG-SERVER-MIB: 1717 lines.
T11-FC-FABRIC-LOCK-MIB: 490 lines.
T11-FC-ZONE-SERVER-MIB: 2638 lines.
ISNS-MIB: 3243 lines.
T11-FC-RSCN-MIB: 751 lines.
URI-TC-MIB: 133 lines.
PIM-STD-MIB: 3746 lines.
IF-CAP-STACK-MIB: 284 lines.
EFM-CU-MIB: 2995 lines.
UDPLITE-MIB: 513 lines.
PKTC-IETF-SIG-MIB: 3021 lines.
LANGTAG-TC-MIB: 56 lines.
IPMCAST-MIB: 2391 lines.
MIDCOM-MIB: 2260 lines.
PIM-BSR-MIB: 699 lines.
T11-FC-SP-TC-MIB: 637 lines.
T11-FC-SP-AUTHENTICATION-MIB: 920 lines.
T11-FC-SP-ZONING-MIB: 550 lines.
T11-FC-SP-POLICY-MIB: 4274 lines.
T11-FC-SP-SA-MIB: 2483 lines.
SYSLOG-TC-MIB: 202 lines.
PKTC-IETF-EVENT-MIB: 1163 lines.
NEMO-MIB: 1739 lines.
MGMD-STD-MIB: 1524 lines.
RSERPOOL-MIB: 1439 lines.
PW-TC-STD-MIB: 288 lines.
SNMP-TSM-MIB: 234 lines.
SNMP-SSH-TM-MIB: 329 lines.
NOTE: IANA-PWE3-MIB: ignored.
PW-STD-MIB: 2438 lines.
PW-MPLS-STD-MIB: 914 lines.
PW-ENET-STD-MIB: 491 lines.
PW-TDM-MIB: 1336 lines.
PW-ATM-MIB: 1205 lines.
OSPFV3-MIB: 3951 lines.
VDSL2-LINE-TC-MIB: 1479 lines.
VDSL2-LINE-MIB: 7189 lines.
SYSLOG-MSG-MIB: 598 lines.
DVB-RCS-MIB: 3329 lines.
FORCES-MIB: 391 lines.
IPFIX-MIB: 1677 lines.
NOTE: IPFIX-SELECTOR-MIB: ignored.
CAPWAP-BASE-MIB: 2618 lines.
CAPWAP-DOT11-MIB: 369 lines.
patching file ADSL-LINE-MIB
patching file DLSW-MIB
patching file DSA-MIB
patching file FDDI-SMT73-MIB
patching file HPR-MIB
patching file MIP-MIB
patching file Modem-MIB
patching file PPP-LCP-MIB
patching file RDBMS-MIB
patching file RFC1414-MIB
patching file SNA-NAU-MIB
patching file TCPIPX-MIB
patching file UPS-MIB
patching file SMUX-MIB
patching file IPATM-IPMC-MIB
IANA-PWE3-MIB: 137 lines.
NOTE: PW-STD-MIB: ignored.
NOTE: IPFIX-MIB: ignored.
IPFIX-SELECTOR-MIB: 173 lines.
IANAifType-MIB: 685 lines.
IANA-LANGUAGE-MIB: 126 lines.
IANA-ADDRESS-FAMILY-NUMBERS-MIB: 170 lines.
IANA-RTPROTO-MIB: 102 lines.
IANATn3270eTC-MIB: 303 lines.
IANA-MALLOC-MIB: 69 lines.
IANA-CHARSET-MIB: 361 lines.
IANA-PRINTER-MIB: 2111 lines.
IANA-FINISHER-MIB: 286 lines.
IANA-ITU-ALARM-TC-MIB: 335 lines.
IANA-GMPLS-TC-MIB: 359 lines.
IANA-IPPM-METRICS-REGISTRY-MIB: 818 lines.
IANA-MAU-MIB: 984 lines.
Processing triggers for man-db (2.10.2-1) ...
root@syslogserver:/etc/logstash/pattern.d#

'기술 노트 > ubuntu' 카테고리의 다른 글

grafana 설치하기  (1) 2023.12.21
snmp-exporter-0.25 설치하기  (0) 2023.12.21
prometheus.yml 설정  (0) 2023.12.21
Prometheus 설치  (1) 2023.12.21
kibana 설정하기  (1) 2023.12.05
root@syslogserver:/usr/share/snmp/mibs# cat /etc/prometheus/prometheus.yml
# Sample config for Prometheus.

global:
  scrape_interval:     15s # Set the scrape interval to every 15 seconds. Default is every 1 minute.
  evaluation_interval: 15s # Evaluate rules every 15 seconds. The default is every 1 minute.
  # scrape_timeout is set to the global default (10s).

  # Attach these labels to any time series or alerts when communicating with
  # external systems (federation, remote storage, Alertmanager).
  external_labels:
      monitor: 'example'

# Alertmanager configuration
alerting:
  alertmanagers:
  - static_configs:
    - targets: ['192.168.000.000:9093'] # prometheus Server IP

# Load rules once and periodically evaluate them according to the global 'evaluation_interval'.
rule_files:
  # - "first_rules.yml"
  # - "second_rules.yml"

# A scrape configuration containing exactly one endpoint to scrape:
# Here it's Prometheus itself.
scrape_configs:
  # The job name is added as a label `job=<job_name>` to any timeseries scraped from this config.
  - job_name: 'prometheus'

    # Override the global default and scrape targets from this job every 5 seconds.
    scrape_interval: 5s
    scrape_timeout: 5s

    # metrics_path defaults to '/metrics'
    # scheme defaults to 'http'.

    static_configs:
      - targets: ['192.168.000.000:9090'] # prometheus Server IP

  - job_name: 'snmp'
    static_configs:
      - targets: ['192.168.000.000'] # AXGATE UTM IP
        labels:
         device: axgate
    metrics_path: /snmp
    params:
      module: [if_mib]
      community: [00000]
    relabel_configs:
      - source_labels: [__address__]
        target_label: __param_target
      - source_labels: [__param_target]
        target_label: instance
      - target_label: __address__
        replacement: 192.168.000.000:9116  # The SNMP exporter's real hostname:port.
  - job_name: 'grafana_metrics'
    scrape_interval: 5s
    scrape_timeout: 5s

    static_configs:
      - targets: ['192.168.000.000:3000'] # prometheus Server IP

'기술 노트 > ubuntu' 카테고리의 다른 글

snmp-exporter-0.25 설치하기  (0) 2023.12.21
snmp-mibs-downloader snmp snmpd 다운로드  (0) 2023.12.21
Prometheus 설치  (1) 2023.12.21
kibana 설정하기  (1) 2023.12.05
logstash 설정하기  (1) 2023.12.04

Prometheus 설치하기

logmgmt@syslogserver:~$ sudo apt install prometheus
패키지 목록을 읽는 중입니다... 완료
의존성 트리를 만드는 중입니다... 완료
상태 정보를 읽는 중입니다... 완료
The following additional packages will be installed:
  fonts-glyphicons-halflings javascript-common libio-pty-perl libipc-run-perl libjs-bootstrap libjs-bootstrap4 libjs-d3 libjs-eonasdan-bootstrap-datetimepicker libjs-jquery libjs-jquery-hotkeys
  libjs-moment libjs-moment-timezone libjs-mustache libjs-popper.js libjs-rickshaw libjs-sizzle libtime-duration-perl moreutils node-jquery prometheus-node-exporter
  prometheus-node-exporter-collectors smartmontools
제안하는 패키지:
  apache2 | lighttpd | httpd gsmartcontrol smart-notifier mailx | mailutils
다음 새 패키지를 설치할 것입니다:
  fonts-glyphicons-halflings javascript-common libio-pty-perl libipc-run-perl libjs-bootstrap libjs-bootstrap4 libjs-d3 libjs-eonasdan-bootstrap-datetimepicker libjs-jquery libjs-jquery-hotkeys
  libjs-moment libjs-moment-timezone libjs-mustache libjs-popper.js libjs-rickshaw libjs-sizzle libtime-duration-perl moreutils node-jquery prometheus prometheus-node-exporter
  prometheus-node-exporter-collectors smartmontools
0개 업그레이드, 23개 새로 설치, 0개 제거 및 15개 업그레이드 안 함.
26.1 M바이트 아카이브를 받아야 합니다.
이 작업 후 280 M바이트의 디스크 공간을 더 사용하게 됩니다.
계속 하시겠습니까? [Y/n] y
받기:1 http://kr.archive.ubuntu.com/ubuntu jammy/main amd64 libjs-jquery all 3.6.0+dfsg+~3.5.13-1 [321 kB]
받기:2 http://kr.archive.ubuntu.com/ubuntu jammy/universe amd64 libjs-jquery-hotkeys all 0~20130707+git2d51e3a9+dfsg-2ubuntu1 [11.4 kB]
받기:3 http://kr.archive.ubuntu.com/ubuntu jammy/universe amd64 fonts-glyphicons-halflings all 1.009~3.4.1+dfsg-2 [117 kB]
받기:4 http://kr.archive.ubuntu.com/ubuntu jammy/main amd64 javascript-common all 11+nmu1 [5,936 B]
받기:5 http://kr.archive.ubuntu.com/ubuntu jammy/universe amd64 libjs-popper.js all 1.16.1+ds-5 [53.8 kB]
받기:6 http://kr.archive.ubuntu.com/ubuntu jammy/universe amd64 libjs-bootstrap4 all 4.6.0+dfsg1-4 [534 kB]
받기:7 http://kr.archive.ubuntu.com/ubuntu jammy/universe amd64 libjs-bootstrap all 3.4.1+dfsg-2 [124 kB]
받기:8 http://kr.archive.ubuntu.com/ubuntu jammy-updates/universe amd64 libjs-moment all 2.29.1+ds-3ubuntu0.2 [146 kB]
받기:9 http://kr.archive.ubuntu.com/ubuntu jammy/universe amd64 libjs-eonasdan-bootstrap-datetimepicker all 4.17.47-5 [28.4 kB]
받기:10 http://kr.archive.ubuntu.com/ubuntu jammy/universe amd64 libjs-moment-timezone all 0.5.34+dfsg-1+2021e [759 kB]
받기:11 http://kr.archive.ubuntu.com/ubuntu jammy/universe amd64 libjs-mustache all 2.3.2-2 [20.6 kB]
받기:12 http://kr.archive.ubuntu.com/ubuntu jammy/universe amd64 libjs-d3 all 3.5.17-4 [132 kB]
받기:13 http://kr.archive.ubuntu.com/ubuntu jammy/universe amd64 libjs-rickshaw all 1.5.1.dfsg-5 [646 kB]
받기:14 http://kr.archive.ubuntu.com/ubuntu jammy-updates/universe amd64 prometheus amd64 2.31.2+ds1-1ubuntu1.22.04.2 [18.3 MB]
받기:15 http://kr.archive.ubuntu.com/ubuntu jammy-updates/universe amd64 prometheus-node-exporter amd64 1.3.1-1ubuntu0.22.04.2 [3,887 kB]
받기:16 http://kr.archive.ubuntu.com/ubuntu jammy/main amd64 libio-pty-perl amd64 1:1.15-2build2 [35.1 kB]
받기:17 http://kr.archive.ubuntu.com/ubuntu jammy/main amd64 libipc-run-perl all 20200505.0-1 [89.8 kB]
받기:18 http://kr.archive.ubuntu.com/ubuntu jammy/universe amd64 libjs-sizzle all 2.3.6+ds+~2.3.3-1 [32.3 kB]
받기:19 http://kr.archive.ubuntu.com/ubuntu jammy/main amd64 libtime-duration-perl all 1.21-1 [13.1 kB]
받기:20 http://kr.archive.ubuntu.com/ubuntu jammy/universe amd64 moreutils amd64 0.66-1 [63.3 kB]
받기:21 http://kr.archive.ubuntu.com/ubuntu jammy/universe amd64 node-jquery all 3.6.0+dfsg+~3.5.13-1 [160 kB]
받기:22 http://kr.archive.ubuntu.com/ubuntu jammy/universe amd64 prometheus-node-exporter-collectors all 0+git20211024.8eeeffb-1 [27.1 kB]
받기:23 http://kr.archive.ubuntu.com/ubuntu jammy/main amd64 smartmontools amd64 7.2-1build2 [583 kB]
내려받기 26.1 M바이트, 소요시간 11초 (2,298 k바이트/초)
Selecting previously unselected package libjs-jquery.
(데이터베이스 읽는중 ...현재 283647개의 파일과 디렉터리가 설치되어 있습니다.)
Preparing to unpack .../00-libjs-jquery_3.6.0+dfsg+~3.5.13-1_all.deb ...
Unpacking libjs-jquery (3.6.0+dfsg+~3.5.13-1) ...
Selecting previously unselected package libjs-jquery-hotkeys.
Preparing to unpack .../01-libjs-jquery-hotkeys_0~20130707+git2d51e3a9+dfsg-2ubuntu1_all.deb ...
Unpacking libjs-jquery-hotkeys (0~20130707+git2d51e3a9+dfsg-2ubuntu1) ...
Selecting previously unselected package fonts-glyphicons-halflings.
Preparing to unpack .../02-fonts-glyphicons-halflings_1.009~3.4.1+dfsg-2_all.deb ...
Unpacking fonts-glyphicons-halflings (1.009~3.4.1+dfsg-2) ...
Selecting previously unselected package javascript-common.
Preparing to unpack .../03-javascript-common_11+nmu1_all.deb ...
Unpacking javascript-common (11+nmu1) ...
Selecting previously unselected package libjs-popper.js.
Preparing to unpack .../04-libjs-popper.js_1.16.1+ds-5_all.deb ...
Unpacking libjs-popper.js (1.16.1+ds-5) ...
Selecting previously unselected package libjs-bootstrap4.
Preparing to unpack .../05-libjs-bootstrap4_4.6.0+dfsg1-4_all.deb ...
Unpacking libjs-bootstrap4 (4.6.0+dfsg1-4) ...
Selecting previously unselected package libjs-bootstrap.
Preparing to unpack .../06-libjs-bootstrap_3.4.1+dfsg-2_all.deb ...
Unpacking libjs-bootstrap (3.4.1+dfsg-2) ...
Selecting previously unselected package libjs-moment.
Preparing to unpack .../07-libjs-moment_2.29.1+ds-3ubuntu0.2_all.deb ...
Unpacking libjs-moment (2.29.1+ds-3ubuntu0.2) ...
Selecting previously unselected package libjs-eonasdan-bootstrap-datetimepicker.
Preparing to unpack .../08-libjs-eonasdan-bootstrap-datetimepicker_4.17.47-5_all.deb ...
Unpacking libjs-eonasdan-bootstrap-datetimepicker (4.17.47-5) ...
Selecting previously unselected package libjs-moment-timezone.
Preparing to unpack .../09-libjs-moment-timezone_0.5.34+dfsg-1+2021e_all.deb ...
Unpacking libjs-moment-timezone (0.5.34+dfsg-1+2021e) ...
Selecting previously unselected package libjs-mustache.
Preparing to unpack .../10-libjs-mustache_2.3.2-2_all.deb ...
Unpacking libjs-mustache (2.3.2-2) ...
Selecting previously unselected package libjs-d3.
Preparing to unpack .../11-libjs-d3_3.5.17-4_all.deb ...
Unpacking libjs-d3 (3.5.17-4) ...
Selecting previously unselected package libjs-rickshaw.
Preparing to unpack .../12-libjs-rickshaw_1.5.1.dfsg-5_all.deb ...
Unpacking libjs-rickshaw (1.5.1.dfsg-5) ...
Selecting previously unselected package prometheus.
Preparing to unpack .../13-prometheus_2.31.2+ds1-1ubuntu1.22.04.2_amd64.deb ...
Unpacking prometheus (2.31.2+ds1-1ubuntu1.22.04.2) ...
Selecting previously unselected package prometheus-node-exporter.
Preparing to unpack .../14-prometheus-node-exporter_1.3.1-1ubuntu0.22.04.2_amd64.deb ...
Unpacking prometheus-node-exporter (1.3.1-1ubuntu0.22.04.2) ...
Selecting previously unselected package libio-pty-perl.
Preparing to unpack .../15-libio-pty-perl_1%3a1.15-2build2_amd64.deb ...
Unpacking libio-pty-perl (1:1.15-2build2) ...
Selecting previously unselected package libipc-run-perl.
Preparing to unpack .../16-libipc-run-perl_20200505.0-1_all.deb ...
Unpacking libipc-run-perl (20200505.0-1) ...
Selecting previously unselected package libjs-sizzle.
Preparing to unpack .../17-libjs-sizzle_2.3.6+ds+~2.3.3-1_all.deb ...
Unpacking libjs-sizzle (2.3.6+ds+~2.3.3-1) ...
Selecting previously unselected package libtime-duration-perl.
Preparing to unpack .../18-libtime-duration-perl_1.21-1_all.deb ...
Unpacking libtime-duration-perl (1.21-1) ...
Selecting previously unselected package moreutils.
Preparing to unpack .../19-moreutils_0.66-1_amd64.deb ...
Unpacking moreutils (0.66-1) ...
Selecting previously unselected package node-jquery.
Preparing to unpack .../20-node-jquery_3.6.0+dfsg+~3.5.13-1_all.deb ...
Unpacking node-jquery (3.6.0+dfsg+~3.5.13-1) ...
Selecting previously unselected package prometheus-node-exporter-collectors.
Preparing to unpack .../21-prometheus-node-exporter-collectors_0+git20211024.8eeeffb-1_all.deb ...
Unpacking prometheus-node-exporter-collectors (0+git20211024.8eeeffb-1) ...
Selecting previously unselected package smartmontools.
Preparing to unpack .../22-smartmontools_7.2-1build2_amd64.deb ...
Unpacking smartmontools (7.2-1build2) ...
smartmontools (7.2-1build2) 설정하는 중입니다 ...
Created symlink /etc/systemd/system/smartd.service → /lib/systemd/system/smartmontools.service.
Created symlink /etc/systemd/system/multi-user.target.wants/smartmontools.service → /lib/systemd/system/smartmontools.service.
javascript-common (11+nmu1) 설정하는 중입니다 ...
libjs-popper.js (1.16.1+ds-5) 설정하는 중입니다 ...
libio-pty-perl (1:1.15-2build2) 설정하는 중입니다 ...
fonts-glyphicons-halflings (1.009~3.4.1+dfsg-2) 설정하는 중입니다 ...
libjs-moment (2.29.1+ds-3ubuntu0.2) 설정하는 중입니다 ...
libjs-sizzle (2.3.6+ds+~2.3.3-1) 설정하는 중입니다 ...
prometheus-node-exporter (1.3.1-1ubuntu0.22.04.2) 설정하는 중입니다 ...
Created symlink /etc/systemd/system/multi-user.target.wants/prometheus-node-exporter.service → /lib/systemd/system/prometheus-node-exporter.service.
libjs-d3 (3.5.17-4) 설정하는 중입니다 ...
libjs-moment-timezone (0.5.34+dfsg-1+2021e) 설정하는 중입니다 ...
libipc-run-perl (20200505.0-1) 설정하는 중입니다 ...
libtime-duration-perl (1.21-1) 설정하는 중입니다 ...
libjs-bootstrap4 (4.6.0+dfsg1-4) 설정하는 중입니다 ...
libjs-jquery (3.6.0+dfsg+~3.5.13-1) 설정하는 중입니다 ...
libjs-mustache (2.3.2-2) 설정하는 중입니다 ...
libjs-jquery-hotkeys (0~20130707+git2d51e3a9+dfsg-2ubuntu1) 설정하는 중입니다 ...
node-jquery (3.6.0+dfsg+~3.5.13-1) 설정하는 중입니다 ...
libjs-bootstrap (3.4.1+dfsg-2) 설정하는 중입니다 ...
libjs-eonasdan-bootstrap-datetimepicker (4.17.47-5) 설정하는 중입니다 ...
moreutils (0.66-1) 설정하는 중입니다 ...
libjs-rickshaw (1.5.1.dfsg-5) 설정하는 중입니다 ...
prometheus-node-exporter-collectors (0+git20211024.8eeeffb-1) 설정하는 중입니다 ...
Created symlink /etc/systemd/system/timers.target.wants/prometheus-node-exporter-apt.timer → /lib/systemd/system/prometheus-node-exporter-apt.timer.
Created symlink /etc/systemd/system/timers.target.wants/prometheus-node-exporter-ipmitool-sensor.timer → /lib/systemd/system/prometheus-node-exporter-ipmitool-sensor.timer.
Created symlink /etc/systemd/system/timers.target.wants/prometheus-node-exporter-mellanox-hca-temp.timer → /lib/systemd/system/prometheus-node-exporter-mellanox-hca-temp.timer.
Created symlink /etc/systemd/system/timers.target.wants/prometheus-node-exporter-nvme.timer → /lib/systemd/system/prometheus-node-exporter-nvme.timer.
Created symlink /etc/systemd/system/timers.target.wants/prometheus-node-exporter-smartmon.timer → /lib/systemd/system/prometheus-node-exporter-smartmon.timer.
prometheus (2.31.2+ds1-1ubuntu1.22.04.2) 설정하는 중입니다 ...
Created symlink /etc/systemd/system/multi-user.target.wants/prometheus.service → /lib/systemd/system/prometheus.service.
Processing triggers for fontconfig (2.13.1-4.2ubuntu5) ...
Processing triggers for man-db (2.10.2-1) ...
logmgmt@syslogserver:~$

 

Prometheus 웹 접속하기

http://{서버IP}:9090 

'기술 노트 > ubuntu' 카테고리의 다른 글

snmp-mibs-downloader snmp snmpd 다운로드  (0) 2023.12.21
prometheus.yml 설정  (0) 2023.12.21
kibana 설정하기  (1) 2023.12.05
logstash 설정하기  (1) 2023.12.04
elasticsearch 설정하기  (0) 2023.12.04

ubuntu 카테고리가 더 최신자료 입니다~

기존 설치들은 전부 CentOS에서 진행했다가, OS Update 이슈로 Ubuntu로 전부 재설치하면서 다시 기록을 남기고 있습니다.

 

참고하세요!

'일상 > 블로그 설명' 카테고리의 다른 글

아이랑  (1) 2023.08.28
장비 모니터링 구축 목표  (0) 2023.03.21
개인정보보호법  (0) 2023.03.06
모니터링 시스템 구축 목표  (0) 2023.02.16
기술 노트  (0) 2023.02.15

fortigate에서 syslog를 logserver에서 전송하려는데 계속 아래와 같은 오류가 발생하네요.

 

이 메시지가 발생할 경우 아래와 같이 설정을 해 주니 정상적으로 적용됩니다.

 

위의 명령어를 실행해도 cli로 설정 값을 확인하면 표시되지는 않아요.

1f-utm (setting) # show
config log syslogd setting
    set status enable
    set server "192.168.000.000"
    set source-ip "192.168.000.001"
end

 

윈도우 서버간 통신을 자동스크립트를 생성하여 파일 배포 및 명령어 실행 시 패스워드를 하드코딩해서 넣으면 보안취약점으로 지적을 받습니다.

이때 패스워드를 파일로 암호화하여 저장해 두고, 변수로 선언하여 사용하는 방법이 있네요.

 

암호화 파일 만들기

PS C:\WINDOWS\system32> Read-Host -AsSecureString | ConvertFrom-SecureString | Out-File -FilePath c:\cred.txt
************* # 패스워드 입력
PS C:\WINDOWS\system32>

 

cred.txt 내용 보기

01000000d08c9ddf0115d1118c7a00c04fc297eb010000000b464dafe9afab4a8b426b3595128ba00000000002000000000003660000c000000010000000be62cdae82fc8a4f2cd7bf2ea3089ac60000000004800000a000000010000000a2b5f4768a73d76011a84bc70dd5e9c610000000c73efee628af3c133ad0e42befb36257140000001d386d28f83d911c3b4aac2f323d824a1627c2a6

 

암호화된 파일 읽어오기

$cred = Get-Content c:\cred.txt -ErrorAction Stop | ConvertTo-SecureString
$cred = [System.Runtime.InteropServices.Marshal]::SecureStringToCoTaskMemUnicode($cred)
$cred = [System.Runtime.InteropServices.Marshal]::PtrToStringUni($cred)

 

다른 서버에서 cred.txt 파일을 복호화 하니까 오류가 나네요.

PS C:\Users\Administrator> $cred = Get-Content c:\cred.txt -ErrorAction Stop | ConvertTo-SecureString
ConvertTo-SecureString : Key not valid for use in specified state.
At line:1 char:53
+ ...  = Get-Content c:\cred.txt -ErrorAction Stop | ConvertTo-SecureString
+                                                    ~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidArgument: (:) [ConvertTo-SecureString], CryptographicException
    + FullyQualifiedErrorId : ImportSecureString_InvalidArgument_CryptographicError,Microsoft.PowerShell.Commands.Conv
   ertToSecureStringCommand

PS C:\Users\Administrator>

 

활용 방안

#powhershell에서만 적용
# 변수에 저장된 패스워드 파일로 해당 서버의 자격증명을 생성
cmdkey /generic:192.168.000.000 /user:administrator /pass:$cred

# 생성한 자격증명의 서버에 패스워드 없이 접속하기
mstsc /v 192.168.000.000

'기술 노트 > Windows' 카테고리의 다른 글

Windows 로그인 OTP 적용하기  (1) 2024.10.10
출력문에서 필드 변수 선언하기  (0) 2024.01.18
virtualbox 설치하기  (0) 2023.09.27
Windows PC 시간 예약해서 끄기  (0) 2023.06.23
가상 OS 설치하기  (0) 2023.05.10

하나씩 따라하시면 됩니다!

제가 설정한 모델은 1830 24G PoE+ (JL813A) 입니다.

 

HPE OfficeConnect Switch 1820 시리즈와 UI만 다를 뿐, 거의 같네요.

 

웹 페이지 접속하기 (내 PC IP를 192.168.1.2 ~ 192.168.1.254 중 선택)

스위치의 기본 IP는 192.168.1.1 입니다.

초기 설정을 위해 웹을 접속하기 위해서는 내 PC의 IP를 "192.168.1.2 ~ 192.168.1.254" 중 IP를 설정

 

http://192.168.1.1에 접속하니 아래와 같이 나옵니다.

  • For local management의 "CONNECT" 클릭
  • 혹시라도 로그인 화면이 나오지 않는다면 수동으로 http://192.168.1.1 로 로그인 해 주세요.

  • ID/PW: admin / 없음

처음 로그인할 경우 ID/PW 설정 절차 팝업 메뉴가 뜹니다.

기본으로 설정된 계정 정보 및 패스워드를 변경합니다.

  • 기본적으로 정보보안측면에서는 기본 계정 및 "admin" 같은 유추가 쉬운 계정은 사용이 불가합니다.
  • 기본적으로 설정된 패스워드가 없어서, 반드시 접속을 위한 패스워드를 설정하셔야 합니다.

 

스위치 설정하기 (Setup Network → Get Connected)

  • 스위치 관리를 위한 IP 설정합니다.
  • 웹 접속을 위한 HTTP/HTTPS 접속을 설정합니다. (HTTP: Disable, HTTPS: Enable)

 

장비 log 설정 및 Syslog 설정하기 (Diagnostics → Logging)

  • 기본설정으로는 장비의 log가 설정되어 있어, 장비 상태를 파악할 수 있습니다.
    (Buffered Logging: Disabled → Enabled / Serverity Threshold: Info)
  • 별도의 로그 서버가 있는 경우 syslog 설정으로 로그 관리가 가능합니다.

 

VLAN 추가하기 (VLAN → VLAN Configuration → VLAN Configuration)

저는 무선 연결을 위하여 구매한 장비입니다. VLAN 설정으로 SSID별 통신 영역을 구분하기 위하여 설정했습니다.

  • 일반 통신(업무망): VLAN 1
  • 업무망 통신 이외: VLAN 10

  • 위 화면에서 "Add"를 누르면 아래의 화면처럼 나옵니다.
  • VLAN를 위한 숫자를 기입하시고 "Apply"를 누르시면 됩니다.

 

VLAN 포트 맵핑하기 (VLAN → VLAN Configuration → VLAN Membership - By VLAN)

  • Tagging 라인을 보시면 됩니다. VLAN에 대한 포트별 사용 설정입니다.
    • Tagged: 2개 이상의 vlan 통신이 가능
    • Untagged: 1개의 vlan 통신이 가능
    • Excluded: 사용 불가
    • Port1 ~ Port23, TRK1: VLAN1(Tagged) 사용가능하도록 설정
    • Port24는 Trunk Port로 설정할 예정
    [VLAN1]
  • 포트별 롤 설정입니다.

  • [VLAN10] 포트도 VLAN1과 동일하게 Port 롤을 설정 합니다.

 

TRUNK 포트 설정하기 (Switching → Trunk Configuration)

  • TRK1에 Port 24를 Members에 넣어줍니다.

'기술 노트 > NETWORK' 카테고리의 다른 글

GNS3에 랜 추가하기  (0) 2024.10.13
HPE 1820 8G PoE+ (J9982A) 설정하기  (1) 2023.12.06
UTM 2대를 내부 통신으로 연결하기  (1) 2023.06.08
CBW 140AC 설정하기  (0) 2023.02.23

무선의 업무망과 게스트망을 분리하려고 합니다.

SSID의 설정에 VLAN을 부여하고, VLAN에 따른 정책에 따라 네트워크의 통신을 관리하려고 합니다.

특이사항으로 VLAN 1도 별도의 인터페이스를 설정해줘야 하는군요.

이 특이사항이 없었다면, 글 남기지 않았을 겁니다.

 

VLAN 인터페이스 상태

  • VLAN을 설정하는 물리적인 인터페이스에는 별도의 IP를 설정하지 않아도 됩니다.
  • wireless에 별도의 IP를 사용하셔도 문제없이 통신이 됩니다.

 

위 캡쳐된 interface에 대한 정보입니다.

  • 192.168.001.1/24 / VLAN 설정 안한 통신
  • 192.168.002.1/24 / VLAN 1 설정한 통신
  • 192.168.003.1/24 / VLAN 10 설정한 통신

 

fortigate # show system interface 
port7   static   0.0.0.0 0.0.0.0  0.0.0.0 0.0.0.0  up   disable   physical  disable   
port8   static   0.0.0.0 0.0.0.0  0.0.0.0 0.0.0.0  up   disable   physical  disable   
wireless   static   0.0.0.0 0.0.0.0  192.168.001.1 255.255.255.0  up   disable   hard-switch  disable   
wireless_guest   static   0.0.0.0 0.0.0.0  192.168.002.1 255.255.255.0  up   disable   vlan  disable   
wireless_work   static   0.0.0.0 0.0.0.0  192.168.003.1 255.255.255.0  up   disable   vlan  disable   

fortigate #

 

+ Recent posts