SNMP on ER8411
Hello all,
This is to follow up on the SNMP issue on TP-Link ER8411, recently highlighted in a previous thread.
https://community.tp-link.com/en/business/forum/topic/604876
I'm using PRTG to monitor all our network devices (including the TP-Link device). However, I cannot monitor the utilization of interfaces, processors, etc.
Is there a way to get those (via SNMP) to my PRTG?
Out of curiosity, I scanned our router to see whether SNMP port 161 was opened. To my surprise, it wasn't, even though I had enabled the SNMP setting. There is no firewall in front of the router. My Access Control, Remote Management and SNMP settings are set and enabled. Therefore, any suggestion for me to fix this issue?
Thank you.
NMAP scan result
Starting Nmap 7.95 ( nmaporg ) at 2024-09-02 17:33 Malay Peninsula Standard Time
NSE: Loaded 157 scripts for scanning.
NSE: Script Pre-scanning.
Initiating NSE at 17:34
Completed NSE at 17:34, 0.00s elapsed
Initiating NSE at 17:34
Completed NSE at 17:34, 0.00s elapsed
Initiating NSE at 17:34
Completed NSE at 17:34, 0.00s elapsed
Initiating Ping Scan at 17:34
Scanning 10.22.2.248 [4 ports]
Completed Ping Scan at 17:34, 0.15s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 17:34
Completed Parallel DNS resolution of 1 host. at 17:34, 0.03s elapsed
Initiating SYN Stealth Scan at 17:34
Scanning 10.22.2.248 [1000 ports]
Discovered open port 443/tcp on 10.22.2.248
Discovered open port 80/tcp on 10.22.2.248
Discovered open port 2000/tcp on 10.22.2.248
Discovered open port 5060/tcp on 10.22.2.248
Completed SYN Stealth Scan at 17:34, 1.94s elapsed (1000 total ports)
Initiating UDP Scan at 17:34
Scanning 10.22.2.248 [1000 ports]
Increasing send delay for 10.22.2.248 from 0 to 50 due to max_successful_tryno increase to 5
Increasing send delay for 10.22.2.248 from 50 to 100 due to max_successful_tryno increase to 6
Warning: 10.22.2.248 giving up on port because retransmission cap hit (6).
Increasing send delay for 10.22.2.248 from 100 to 200 due to 11 out of 11 dropped probes since last increase.
Discovered open port 500/udp on 10.22.2.248
Increasing send delay for 10.22.2.248 from 200 to 400 due to 11 out of 12 dropped probes since last increase.
UDP Scan Timing: About 6.24% done; ETC: 17:42 (0:07:46 remaining)
Increasing send delay for 10.22.2.248 from 400 to 800 due to 11 out of 18 dropped probes since last increase.
UDP Scan Timing: About 9.31% done; ETC: 17:44 (0:09:54 remaining)
UDP Scan Timing: About 12.57% done; ETC: 17:46 (0:10:33 remaining)
UDP Scan Timing: About 18.26% done; ETC: 17:47 (0:11:16 remaining)
UDP Scan Timing: About 29.59% done; ETC: 17:49 (0:10:31 remaining)
UDP Scan Timing: About 35.93% done; ETC: 17:49 (0:09:45 remaining)
UDP Scan Timing: About 41.76% done; ETC: 17:49 (0:08:57 remaining)
UDP Scan Timing: About 47.50% done; ETC: 17:49 (0:08:09 remaining)
UDP Scan Timing: About 52.87% done; ETC: 17:49 (0:07:22 remaining)
UDP Scan Timing: About 58.53% done; ETC: 17:49 (0:06:32 remaining)
UDP Scan Timing: About 63.96% done; ETC: 17:49 (0:05:42 remaining)
UDP Scan Timing: About 66.70% done; ETC: 17:55 (0:07:09 remaining)
UDP Scan Timing: About 71.30% done; ETC: 17:55 (0:06:04 remaining)
UDP Scan Timing: About 76.21% done; ETC: 17:54 (0:04:57 remaining)
UDP Scan Timing: About 81.20% done; ETC: 17:54 (0:03:52 remaining)
UDP Scan Timing: About 86.24% done; ETC: 17:54 (0:02:48 remaining)
UDP Scan Timing: About 91.36% done; ETC: 17:54 (0:01:44 remaining)
UDP Scan Timing: About 96.40% done; ETC: 17:54 (0:00:43 remaining)
Completed UDP Scan at 17:54, 1227.80s elapsed (1000 total ports)
Initiating Service scan at 17:54
Scanning 19 services on 10.22.2.248
Discovered open port 4500/udp on 10.22.2.248
Discovered open|filtered port 4500/udp on 10.22.2.248 is actually open
Service scan Timing: About 30.00% done; ETC: 17:57 (0:02:25 remaining)
Service scan Timing: About 35.00% done; ETC: 17:59 (0:03:00 remaining)
Completed Service scan at 17:56, 102.68s elapsed (20 services on 1 host)
Initiating OS detection (try #1) against 10.22.2.248
Retrying OS detection (try #2) against 10.22.2.248
Initiating Traceroute at 17:56
Completed Traceroute at 17:56, 0.06s elapsed
Initiating Parallel DNS resolution of 5 hosts. at 17:56
Completed Parallel DNS resolution of 5 hosts. at 17:56, 0.03s elapsed
NSE: Script scanning 10.22.2.248.
Initiating NSE at 17:56
NSOCK ERROR [1339.4190s] mksock_bind_addr(): Bind to 0.0.0.0:4500 failed (IOD #4): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1340.6660s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #58): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1340.9030s] mksock_bind_addr(): Bind to 0.0.0.0:4500 failed (IOD #64): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1342.0860s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #76): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1342.3070s] mksock_bind_addr(): Bind to 0.0.0.0:4500 failed (IOD #77): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1343.5100s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #78): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1343.7620s] mksock_bind_addr(): Bind to 0.0.0.0:4500 failed (IOD #79): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1344.9580s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #82): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1346.6590s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #83): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1353.8900s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #85): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1368.0420s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #87): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1382.0540s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #89): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1396.0870s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #91): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1410.1010s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #93): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1424.1220s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #95): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1438.1530s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #97): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1452.1730s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #99): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1466.1980s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #101): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1480.2200s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #103): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1494.2520s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #105): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1508.2820s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #107): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
NSOCK ERROR [1522.2990s] mksock_bind_addr(): Bind to 0.0.0.0:500 failed (IOD #109): An attempt was made to access a socket in a way forbidden by its access permissions. (10013)
Completed NSE at 17:59, 196.94s elapsed
Initiating NSE at 17:59
Completed NSE at 17:59, 1.19s elapsed
Initiating NSE at 17:59
Completed NSE at 17:59, 0.00s elapsed
Nmap scan report for 10.22.2.248
Host is up (0.047s latency).
Not shown: 995 closed tcp ports (reset), 984 closed udp ports (port-unreach)
PORT STATE SERVICE VERSION
80/tcp open http OpenWrt uHTTPd (TP-LINK router http config)
|_http-title: Site doesn't have a title (text/html).
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
443/tcp open ssl/http OpenWrt uHTTPd (TP-LINK router http config)
| ssl-cert: Subject: commonName=TP-Link/stateOrProvinceName=ShenZhen/countryName=CN
| Issuer: commonName=TP-Link/stateOrProvinceName=ShenZhen/countryName=CN
| Public Key type: rsa
| Public Key bits: 1024
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2018-01-01T08:00:22
| Not valid after: 2037-09-18T08:00:22
| MD5: 884c:96c2:2565:296f:5791:f65b:8e46:6097
|_SHA-1: 2f69:b83e:b482:8dd3:32b7:3a33:5e8e:c4ed:6f91:4540
|_ssl-date: TLS randomness does not represent time
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Site doesn't have a title (text/html).
445/tcp filtered microsoft-ds
2000/tcp open tcpwrapped
5060/tcp open tcpwrapped
53/udp open|filtered domain
500/udp open isakmp StrongSwan ISAKMP
4500/udp open isakmp StrongSwan ISAKMP
5050/udp open|filtered mmcc
5060/udp open|filtered sip
17207/udp open|filtered unknown
19650/udp open|filtered unknown
21344/udp open|filtered unknown
21383/udp open|filtered unknown
30697/udp open|filtered unknown
37602/udp open|filtered unknown
38615/udp open|filtered unknown
40708/udp open|filtered unknown
40732/udp open|filtered unknown
49194/udp open|filtered unknown
49201/udp open|filtered unknown
Device type: general purpose|storage-misc|firewall|proxy server|broadband router|PBX|WAP
Running (JUST GUESSING): Linux 2.6.X|3.X (91%), Dell embedded (89%), Cisco embedded (89%), Riverbed embedded (89%), Zhone embedded (89%), Ruckus embedded (89%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/h:dell:dr4100 cpe:/o:linux:linux_kernel:2.6 cpe:/h:cisco:sa520 cpe:/h:riverbed:steelhead_200 cpe:/h:cisco:uc320w cpe:/h:ruckus:7363 cpe:/o:linux:linux_kernel:3.0
Aggressive OS guesses: Linux 2.6.32 (91%), Linux 2.6.18 (91%), Linux 2.6.9 - 2.6.18 (90%), Linux 2.6.9 (90%), Linux 2.6.5 (89%), Dell DR4100 backup appliance (89%), Cisco SA520 firewall (Linux 2.6) (89%), Linux 2.6.28 (89%), Linux 2.6.8 (89%), Linux 2.6.9 - 2.6.27 (89%)
No exact OS matches for host (test conditions non-ideal).
Uptime guess: 2.462 days (since Sat Aug 31 06:54:55 2024)
Network Distance: 6 hops
TCP Sequence Prediction: Difficulty=261 (Good luck!)
IP ID Sequence Generation: All zeros
Service Info: OS: Linux; Device: broadband router; CPE: cpe:/o:linux:linux_kernel
TRACEROUTE (using port 3389/tcp)
HOP RTT ADDRESS
1 1.00 ms 10.250.95.254
2 1.00 ms xxx.xxx.xxx.xxx
3 1.00 ms xxx.xxx.xxx.xxx
4 1.00 ms xxx.xxx.xxx.xxx
5 45.00 ms xxx.xxx.xxx.xxx
6 46.00 ms 10.22.2.248
NSE: Script Post-scanning.
Initiating NSE at 17:59
Completed NSE at 17:59, 0.00s elapsed
Initiating NSE at 17:59
Completed NSE at 17:59, 0.00s elapsed
Initiating NSE at 17:59
Completed NSE at 17:59, 0.00s elapsed
Read data files from: C:\Program Files (x86)\Nmap
OS and Service detection performed. Please report any incorrect results at nmaporg/submit .
Nmap done: 1 IP address (1 host up) scanned in 1537.52 seconds
Raw packets sent: 2590 (121.993KB) | Rcvd: 2118 (120.184KB)
Access Control settings
Remote Management settings
SNMP settings
