878 lines
33 KiB
PHP
878 lines
33 KiB
PHP
<?php
|
|
/**
|
|
* Observium
|
|
*
|
|
* This file is part of Observium.
|
|
*
|
|
* @package observium
|
|
* @subpackage entities
|
|
* @copyright (C) 2006-2013 Adam Armstrong, (C) 2013-2022 Observium Limited
|
|
*
|
|
*/
|
|
|
|
/**
|
|
* Validate BGP peer
|
|
*
|
|
* @param array $peer BGP peer array from discovery or polling process
|
|
* @param array $device Common device array
|
|
* @return boolean TRUE if peer array valid
|
|
*/
|
|
function is_bgp_peer_valid($peer, $device) {
|
|
$valid = TRUE;
|
|
|
|
if (isset($peer['admin_status']) && empty($peer['admin_status'])) {
|
|
$valid = FALSE;
|
|
print_debug("Peer ignored (by empty Admin Status).");
|
|
}
|
|
|
|
if ($valid && !(is_numeric($peer['as']) && $peer['as'] != 0)) {
|
|
$valid = FALSE;
|
|
print_debug("Peer ignored (by invalid AS number '".$peer['as']."').");
|
|
}
|
|
|
|
if ($valid && !get_ip_version($peer['ip'])) {
|
|
$valid = FALSE;
|
|
print_debug("Peer ignored (by invalid Remote IP '".$peer['ip']."').");
|
|
}
|
|
|
|
return $valid;
|
|
}
|
|
|
|
/**
|
|
* Detect is BGP AS number in private range, see:
|
|
* https://tools.ietf.org/html/rfc6996
|
|
* https://tools.ietf.org/html/rfc7300
|
|
*
|
|
* @param string|int $as AS number
|
|
* @return boolean TRUE if AS number in private range
|
|
*/
|
|
function is_bgp_as_private($as) {
|
|
$as = bgp_asdot_to_asplain($as); // Convert ASdot to ASplain
|
|
|
|
// Note 65535 and 5294967295 not really Private ASNs,
|
|
// this is Reserved for use by Well-known Communities
|
|
$private = ($as >= 64512 && $as <= 65535) || // 16-bit private ASn
|
|
($as >= 4200000000 && $as <= 5294967295); // 32-bit private ASn
|
|
|
|
return $private;
|
|
}
|
|
|
|
/**
|
|
* Convert AS number from asplain to asdot format (for 32bit ASn).
|
|
*
|
|
* @param string|int|array $as AS number in plain or dot format
|
|
* @return string|array AS number in dot format (for 32bit ASn)
|
|
*/
|
|
function bgp_asplain_to_asdot($as) {
|
|
if (is_array($as)) {
|
|
// Recursive for arrays
|
|
$return = [];
|
|
foreach ($as as $entry) {
|
|
$return[] = bgp_asplain_to_asdot($entry);
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
if (str_contains($as, '.') || // Already asdot format
|
|
($as < 65536)) { // 16bit ASn no need to formatting
|
|
return $as;
|
|
}
|
|
|
|
$as2 = $as % 65536;
|
|
$as1 = ($as - $as2) / 65536;
|
|
|
|
return (int)$as1 . '.' . (int)$as2;
|
|
}
|
|
|
|
/**
|
|
* Convert AS number from asdot to asplain format (for 32bit ASn).
|
|
*
|
|
* @param string|int|array $as AS number in plain or dot format
|
|
* @return string|array AS number in plain format (for 32bit ASn)
|
|
*/
|
|
function bgp_asdot_to_asplain($as) {
|
|
if (is_array($as)) {
|
|
// Recursive for arrays
|
|
$return = [];
|
|
foreach ($as as $entry) {
|
|
$return[] = bgp_asdot_to_asplain($entry);
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
if (!str_contains($as, '.')) { // Already asplain format
|
|
return $as;
|
|
}
|
|
|
|
list($as1, $as2) = explode('.', $as, 2);
|
|
$as = $as1 * 65536 + $as2;
|
|
|
|
return (string) $as;
|
|
}
|
|
|
|
/**
|
|
* @param array $device
|
|
*
|
|
* @return array
|
|
*/
|
|
function get_bgp_localas_array($device) {
|
|
global $config, $attribs;
|
|
|
|
if (OBS_PROCESS_NAME === 'poller') {
|
|
// In poller return cached array
|
|
if (isset($attribs['bgp_localas'])) {
|
|
print_debug("Get Cached BGP LocalAs array.");
|
|
$return = safe_json_decode($attribs['bgp_localas']);
|
|
print_debug_vars($return);
|
|
return $return;
|
|
}
|
|
if (safe_empty($device['bgpLocalAs']) || $device['bgpLocalAs'] == 0) {
|
|
// Old empty peers (before rewrite or caching)
|
|
print_debug("BGP not discovered on device.");
|
|
return [];
|
|
}
|
|
} else {
|
|
$db_bgp_localas = get_entity_attrib('device', $device['device_id'], 'bgp_localas');
|
|
}
|
|
|
|
// use correct MIBs order:
|
|
// first always CISCO-BGP4-MIB (before BGP4-MIB)
|
|
// second BGP4-MIB, then all others
|
|
$bgp_mibs = [];
|
|
foreach (get_device_mibs_permitted($device) as $mib) {
|
|
// check bgp definitions
|
|
if (!isset($config['mibs'][$mib]['bgp'])) { continue; }
|
|
|
|
if ($mib === 'CISCO-BGP4-MIB') {
|
|
array_unshift($bgp_mibs , $mib);
|
|
} elseif ($mib === 'BGP4-MIB') {
|
|
if ($bgp_mibs[0] === 'CISCO-BGP4-MIB') {
|
|
// put BGP4-MIB after CISCO-BGP4-MIB
|
|
array_splice($bgp_mibs, 1, 0, $mib);
|
|
} else {
|
|
array_unshift($bgp_mibs, $mib);
|
|
}
|
|
} else {
|
|
$bgp_mibs[] = $mib;
|
|
}
|
|
}
|
|
print_debug_vars($bgp_mibs);
|
|
|
|
if (empty($bgp_mibs)) {
|
|
if (!safe_empty($db_bgp_localas)) {
|
|
// Clean cache when BGP removed
|
|
del_entity_attrib('device', $device['device_id'], 'bgp_localas');
|
|
}
|
|
return [];
|
|
}
|
|
|
|
// Common LocalAs before all
|
|
$bgp4_local_as = snmp_get_oid($device, 'bgpLocalAs.0', 'BGP4-MIB');
|
|
$bgp4_mib = is_numeric($bgp4_local_as);
|
|
|
|
$entries = [];
|
|
foreach ($bgp_mibs as $mib) {
|
|
$def = $config['mibs'][$mib]['bgp'];
|
|
|
|
// Main
|
|
if ($mib === 'CISCO-BGP4-MIB') {
|
|
// Cisco can report Afi/Safi but without cbgpLocalAs.0 and cbgpPeer2RemoteAs,
|
|
// Not sure, probably check cbgpPeerAcceptedPrefixes / cbgpPeer2AcceptedPrefixes here
|
|
if ($local_as = snmp_get_oid($device, 'cbgpLocalAs.0', $mib)) {
|
|
$ctest = snmp_getnext_oid($device, 'cbgpPeer2AcceptedPrefixes', $mib);
|
|
$cisco_version = safe_empty($ctest) ? 1 : 2;
|
|
$entries[] = [ 'mib' => $mib, 'oid' => 'cbgpLocalAs.0', 'LocalAs' => snmp_dewrap32bit($local_as), 'cisco_version' => $cisco_version ];
|
|
} else {
|
|
$local_as = snmp_getnext_oid($device, 'cbgpPeer2LocalAs', $mib);
|
|
// cbgpPeer2LocalAs in many devices is zero, but peers exist
|
|
if (is_numeric($local_as)) {
|
|
$entries[] = [ 'mib' => $mib, 'oid' => 'cbgpPeer2LocalAs', 'LocalAs' => snmp_dewrap32bit($local_as), 'cisco_version' => 2 ];
|
|
} elseif ($bgp4_mib) {
|
|
// Only check AcceptedPrefixes
|
|
$ctest = snmp_getnext_oid($device, 'cbgpPeer2AcceptedPrefixes', $mib);
|
|
$cisco_version = 2;
|
|
if (!snmp_status()) {
|
|
$ctest = snmp_getnext_oid($device, 'cbgpPeerAcceptedPrefixes', $mib);
|
|
$cisco_version = 1;
|
|
// CISCO-BGP4-MIB not exist
|
|
if (!snmp_status()) { continue; }
|
|
}
|
|
$entries[] = [ 'mib' => $mib, 'cisco_version' => $cisco_version ];
|
|
}
|
|
}
|
|
} elseif ($mib === 'BGP4-MIB') {
|
|
if ($bgp4_mib) {
|
|
$entries[] = [ 'mib' => $mib, 'oid' => $def['oids']['LocalAs']['oid'], 'LocalAs' => snmp_dewrap32bit($bgp4_local_as) ];
|
|
}
|
|
} elseif (isset($def['oids']['LocalAs']['oid'])) {
|
|
// Vendor definitions
|
|
$local_as = snmp_get_oid($device, $def['oids']['LocalAs']['oid'], $mib);
|
|
if (is_numeric($local_as)) {
|
|
$entries[] = [ 'mib' => $mib, 'oid' => $def['oids']['LocalAs']['oid'], 'LocalAs' => snmp_dewrap32bit($local_as) ];
|
|
}
|
|
|
|
} elseif (isset($def['oids']['LocalAs']['oid_next'])) {
|
|
// Vendor definitions
|
|
$local_as = snmp_getnext_oid($device, $def['oids']['LocalAs']['oid_next'], $mib);
|
|
if (is_numeric($local_as)) {
|
|
$entries[] = [ 'mib' => $mib, 'oid' => $def['oids']['LocalAs']['oid_next'], 'LocalAs' => snmp_dewrap32bit($local_as) ];
|
|
}
|
|
|
|
} elseif ($bgp4_mib) {
|
|
// When MIB specific LocalAs not exist, but BGP4-MIB already return valid LocasAs
|
|
// append this mib to entries, ie HUAWEI-BGP-VPN-MIB, CUMULUS-BGPUN-MIB
|
|
snmp_getnext_oid($device, $def['oids']['PeerRemoteAs']['oid'], $mib);
|
|
if (snmp_status()) {
|
|
$entry = [ 'mib' => $mib ];
|
|
if ($mib === 'CUMULUS-BGPUN-MIB' && $local_as = snmp_get_oid($device, 'bgpLocalAs', $mib)) {
|
|
// Cumulus OS not always return LocalAs
|
|
$entry['oid'] = 'bgpLocalAs';
|
|
$entry['LocalAs'] = snmp_dewrap32bit($local_as); // .1.3.6.1.4.1.40310.4.2 = INTEGER: 64732
|
|
}
|
|
$entries[] = $entry;
|
|
unset($entry);
|
|
}
|
|
}
|
|
|
|
// Check in Virtual Routing
|
|
$check_vrfs = (safe_empty($device['snmp_context']) && // Device not already with context
|
|
isset($config['os'][$device['os']]['snmp']['virtual']) && $config['os'][$device['os']]['snmp']['virtual'] && // Context permitted for os
|
|
$vrf_contexts = safe_json_decode(get_entity_attrib('device', $device, 'vrf_contexts')));
|
|
|
|
if ($check_vrfs) {
|
|
|
|
$bgp4_mib_vrf = [];
|
|
foreach ($vrf_contexts as $vrf_name => $snmp_virtual) {
|
|
print_debug("Check LocalAs in Virtual Routing: $vrf_name...");
|
|
|
|
$device_vrf = snmp_virtual_device($device, $snmp_virtual);
|
|
|
|
// Common LocalAs before all
|
|
$bgp4_local_as = snmp_get_oid($device_vrf, 'bgpLocalAs.0', 'BGP4-MIB');
|
|
$bgp4_mib_vrf[$vrf_name] = is_numeric($bgp4_local_as);
|
|
|
|
if ($mib === 'CISCO-BGP4-MIB') {
|
|
// Cisco can report Afi/Safi but without cbgpLocalAs.0 and cbgpPeer2RemoteAs,
|
|
// Not sure, probably check cbgpPeerAcceptedPrefixes / cbgpPeer2AcceptedPrefixes here
|
|
if ($local_as = snmp_get_oid($device_vrf, 'cbgpLocalAs.0', $mib)) {
|
|
$ctest = snmp_getnext_oid($device_vrf, 'cbgpPeer2AcceptedPrefixes', $mib);
|
|
$cisco_version = safe_empty($ctest) ? 1 : 2;
|
|
$entries[] = [ 'mib' => $mib, 'oid' => 'cbgpLocalAs.0', 'LocalAs' => snmp_dewrap32bit($local_as), 'cisco_version' => $cisco_version,
|
|
'virtual_name' => $vrf_name, 'snmp_context' => $snmp_virtual ];
|
|
} else {
|
|
$local_as = snmp_getnext_oid($device_vrf, 'cbgpPeer2LocalAs', $mib);
|
|
// cbgpPeer2LocalAs in many devices is zero, but peers exist
|
|
if (is_numeric($local_as)) {
|
|
$entries[] = [ 'mib' => $mib, 'oid' => 'cbgpPeer2LocalAs', 'LocalAs' => snmp_dewrap32bit($local_as), 'cisco_version' => 2,
|
|
'virtual_name' => $vrf_name, 'snmp_context' => $snmp_virtual ];
|
|
} elseif ($bgp4_mib_vrf[$vrf_name]) {
|
|
// Only check AcceptedPrefixes
|
|
$ctest = snmp_getnext_oid($device_vrf, 'cbgpPeer2AcceptedPrefixes', $mib);
|
|
$cisco_version = 2;
|
|
if (!snmp_status()) {
|
|
$ctest = snmp_getnext_oid($device_vrf, 'cbgpPeerAcceptedPrefixes', $mib);
|
|
$cisco_version = 1;
|
|
// CISCO-BGP4-MIB not exist
|
|
if (!snmp_status()) { continue; }
|
|
}
|
|
$entries[] = [ 'mib' => $mib, 'cisco_version' => $cisco_version,
|
|
'virtual_name' => $vrf_name, 'snmp_context' => $snmp_virtual ];
|
|
}
|
|
}
|
|
} elseif ($mib === 'BGP4-MIB') {
|
|
if ($bgp4_mib_vrf[$vrf_name]) {
|
|
$entries[] = [ 'mib' => $mib, 'oid' => $def['oids']['LocalAs']['oid'], 'LocalAs' => snmp_dewrap32bit($bgp4_local_as),
|
|
'virtual_name' => $vrf_name, 'snmp_context' => $snmp_virtual ];
|
|
}
|
|
} elseif (isset($def['oids']['LocalAs']['oid'])) {
|
|
|
|
$local_as = snmp_get_oid($device_vrf, $def['oids']['LocalAs']['oid'], $mib);
|
|
if (is_numeric($local_as)) {
|
|
$entries[] = [ 'mib' => $mib, 'oid' => $def['oids']['LocalAs']['oid'], 'LocalAs' => snmp_dewrap32bit($local_as),
|
|
'virtual_name' => $vrf_name, 'snmp_context' => $snmp_virtual ];
|
|
}
|
|
|
|
} elseif (isset($def['oids']['LocalAs']['oid_next'])) {
|
|
|
|
$local_as = snmp_getnext_oid($device_vrf, $def['oids']['LocalAs']['oid_next'], $mib);
|
|
if (is_numeric($local_as)) {
|
|
$entries[] = [ 'mib' => $mib, 'oid' => $def['oids']['LocalAs']['oid_next'], 'LocalAs' => snmp_dewrap32bit($local_as),
|
|
'virtual_name' => $vrf_name, 'snmp_context' => $snmp_virtual ];
|
|
}
|
|
|
|
} elseif (isset($bgp4_mib_vrf[$vrf_name])) {
|
|
// When MIB specific LocalAs not exist, but BGP4-MIB already return valid LocasAs
|
|
// append this mib to entries, ie HUAWEI-BGP-VPN-MIB
|
|
snmp_getnext_oid($device_vrf, $def['oids']['PeerRemoteAs']['oid'], $mib);
|
|
if (snmp_status()) {
|
|
$entries[] = [ 'mib' => $mib, 'virtual_name' => $vrf_name, 'snmp_context' => $snmp_virtual ];
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
print_debug_vars($entries);
|
|
|
|
// Cache entries (in discovery)
|
|
if (safe_count($entries)) {
|
|
$attrib = safe_json_encode($entries);
|
|
if ($attrib !== $db_bgp_localas) {
|
|
set_entity_attrib('device', $device['device_id'], 'bgp_localas', safe_json_encode($entries));
|
|
if (OBS_PROCESS_NAME === 'poller') {
|
|
$attribs['bgp_localas'] = safe_json_encode($entries);
|
|
}
|
|
}
|
|
} elseif (!safe_empty($db_bgp_localas)) {
|
|
// Clean cache when BGP removed
|
|
del_entity_attrib('device', $device['device_id'], 'bgp_localas');
|
|
}
|
|
|
|
return $entries;
|
|
}
|
|
|
|
/**
|
|
* Convert BGP peer index to vendor MIB specific entries
|
|
*
|
|
* @param array $peer Array with walked peer oids
|
|
* @param string $index Peer index
|
|
* @param string $mib MIB name
|
|
*/
|
|
function parse_bgp_peer_index(&$peer, $index, $mib = 'BGP4V2-MIB') {
|
|
global $config;
|
|
|
|
$address_types = $config['mibs']['INET-ADDRESS-MIB']['rewrite']['InetAddressType'];
|
|
$index_parts = explode('.', $index);
|
|
switch ($mib) {
|
|
case 'BGP4-MIB':
|
|
// bgpPeerRemoteAddr
|
|
$peer_ip = $index;
|
|
if (safe_count($index_parts) > 4) {
|
|
// Aruba case:
|
|
// BGP4-MIB::bgpPeerRemoteAddr.4.18.1.23.109 = IpAddress: 18.1.23.109
|
|
$ip_len = array_shift($index_parts);
|
|
$peer_ip = implode('.', $index_parts);
|
|
}
|
|
if (get_ip_version($peer_ip)) {
|
|
$peer['bgpPeerRemoteAddr'] = $peer_ip;
|
|
}
|
|
break;
|
|
|
|
case 'ARISTA-BGP4V2-MIB':
|
|
// 1. aristaBgp4V2PeerInstance
|
|
$peer['aristaBgp4V2PeerInstance'] = array_shift($index_parts);
|
|
// 2. aristaBgp4V2PeerRemoteAddrType
|
|
$peer_addr_type = array_shift($index_parts);
|
|
if (safe_empty($peer['aristaBgp4V2PeerRemoteAddrType'])) {
|
|
$peer['aristaBgp4V2PeerRemoteAddrType'] = $peer_addr_type;
|
|
}
|
|
if (isset($address_types[$peer['aristaBgp4V2PeerRemoteAddrType']])) {
|
|
$peer['aristaBgp4V2PeerRemoteAddrType'] = $address_types[$peer['aristaBgp4V2PeerRemoteAddrType']];
|
|
}
|
|
// 3. length of the IP address
|
|
$ip_len = array_shift($index_parts);
|
|
// 4. IP address
|
|
$ip_parts = array_slice($index_parts, 0, $ip_len);
|
|
|
|
// 5. aristaBgp4V2PeerRemoteAddr
|
|
$peer_ip = implode('.', $ip_parts);
|
|
if ((int)$ip_len === 16) {
|
|
$peer_ip = snmp2ipv6($peer_ip);
|
|
}
|
|
if ($peer_addr_type = get_ip_version($peer_ip)) {
|
|
$peer['aristaBgp4V2PeerRemoteAddr'] = $peer_ip;
|
|
$peer['aristaBgp4V2PeerRemoteAddrType'] = 'ipv' . $peer_addr_type; // FIXME. not sure, but seems as Arista use only ipv4/ipv6 for afi
|
|
}
|
|
break;
|
|
|
|
case 'BGP4V2-MIB':
|
|
case 'FOUNDRY-BGP4V2-MIB': // BGP4V2-MIB draft
|
|
// 1. bgp4V2PeerInstance
|
|
$peer['bgp4V2PeerInstance'] = array_shift($index_parts);
|
|
// 2. bgp4V2PeerLocalAddrType
|
|
$local_addr_type = array_shift($index_parts);
|
|
if (safe_empty($peer['bgp4V2PeerLocalAddrType'])) {
|
|
$peer['bgp4V2PeerLocalAddrType'] = $local_addr_type;
|
|
}
|
|
if (isset($address_types[$peer['bgp4V2PeerLocalAddrType']])) {
|
|
$peer['bgp4V2PeerLocalAddrType'] = $address_types[$peer['bgp4V2PeerLocalAddrType']];
|
|
}
|
|
// 3. length of the local IP address
|
|
$ip_len = array_shift($index_parts);
|
|
// 4. IP address
|
|
$ip_parts = array_slice($index_parts, 0, $ip_len);
|
|
|
|
// 5. bgp4V2PeerLocalAddr
|
|
$local_ip = implode('.', $ip_parts);
|
|
if ((int)$ip_len === 16) {
|
|
$local_ip = snmp2ipv6($local_ip);
|
|
}
|
|
if (get_ip_version($local_ip)) {
|
|
$peer['bgp4V2PeerLocalAddr'] = $local_ip;
|
|
}
|
|
|
|
// Get second part of index
|
|
$index_parts = array_slice($index_parts, $ip_len);
|
|
$peer_addr_type = array_shift($index_parts);
|
|
if (safe_empty($peer['bgp4V2PeerRemoteAddrType'])) {
|
|
$peer['bgp4V2PeerRemoteAddrType'] = $peer_addr_type;
|
|
}
|
|
if (isset($address_types[$peer['bgp4V2PeerRemoteAddrType']])) {
|
|
$peer['bgp4V2PeerRemoteAddrType'] = $address_types[$peer['bgp4V2PeerRemoteAddrType']];
|
|
}
|
|
// 6. length of the IP address
|
|
$ip_len = array_shift($index_parts);
|
|
// 7. IP address
|
|
$ip_parts = array_slice($index_parts, 0, $ip_len);
|
|
|
|
// 8. bgp4V2PeerRemoteAddr
|
|
$peer_ip = implode('.', $ip_parts);
|
|
if ((int)$ip_len === 16) {
|
|
$peer_ip = snmp2ipv6($peer_ip);
|
|
}
|
|
if ($peer_addr_type = get_ip_version($peer_ip)) {
|
|
$peer['bgp4V2PeerRemoteAddr'] = $peer_ip;
|
|
$peer['bgp4V2PeerRemoteAddrType'] = 'ipv' . $peer_addr_type;
|
|
}
|
|
break;
|
|
|
|
case 'HUAWEI-BGP-VPN-MIB':
|
|
// HUAWEI-BGP-VPN-MIB::hwBgpPeerVrfName.0.ipv4.unicast.ipv4."10.100.0.5" = STRING: "Public"
|
|
// HUAWEI-BGP-VPN-MIB::hwBgpPeerVrfName.0.1.1.1.4.10.100.0.5 = STRING: "Public"
|
|
// 1. hwBgpPeerInstanceId
|
|
$peer['hwBgpPeerInstanceId'] = array_shift($index_parts);
|
|
|
|
// 2. hwBgpPeerAddrFamilyAfi
|
|
$afi = array_shift($index_parts);
|
|
$afis = [ 1 => 'ipv4', 2 => 'ipv6', 25 => 'vpls', 196 => 'l2vpn' ]; // Huawei specific AFI numbers (HWBgpAfi)
|
|
if (isset($afis[$afi])) {
|
|
$peer['hwBgpPeerAddrFamilyAfi'] = $afis[$afi];
|
|
} else {
|
|
// or use common afis
|
|
$peer['hwBgpPeerAddrFamilyAfi'] = $config['routing_afis'][$afi];
|
|
}
|
|
|
|
// 3. hwBgpPeerAddrFamilySafi
|
|
$safi = array_shift($index_parts);
|
|
$safis = [ 1 => 'unicast', 2 => 'multicast', 4 => 'mpls', 5 => 'mcast-vpn', 65 => 'vpls', 66 => 'mdt', 128 => 'vpn', 132 => 'route-target' ]; // Huawei specific SAFI numbers (HWBgpSafi)
|
|
if (isset($safis[$safi])) {
|
|
$peer['hwBgpPeerAddrFamilySafi'] = $safis[$safi];
|
|
} else {
|
|
// or use common safi
|
|
$peer['hwBgpPeerAddrFamilySafi'] = $config['routing_safis'][$safi];
|
|
}
|
|
// 4. hwBgpPeerRemoteAddrType (hwBgpPeerType)
|
|
$peer_addr_type = array_shift($index_parts);
|
|
if (isset($address_types[$peer_addr_type])) {
|
|
$peer['hwBgpPeerRemoteAddrType'] = $address_types[$peer_addr_type];
|
|
}
|
|
// 5. hwBgpPeerRemoteAddr
|
|
$ip_len = array_shift($index_parts);
|
|
$ip_parts = $index_parts;
|
|
$remote_ip = implode('.', $ip_parts);
|
|
if ((int)$ip_len === 16) {
|
|
$remote_ip = snmp2ipv6($remote_ip);
|
|
}
|
|
if ($peer_addr_type = get_ip_version($remote_ip)) {
|
|
$peer['hwBgpPeerRemoteAddr'] = $remote_ip;
|
|
$peer['hwBgpPeerRemoteIdentifier'] = $peer['hwBgpPeerRemoteAddr'];
|
|
if (safe_empty($peer['hwBgpPeerRemoteAddrType'])) {
|
|
$peer['hwBgpPeerRemoteAddrType'] = 'ipv' . $peer_addr_type;
|
|
}
|
|
}
|
|
// 6. hwBgpPeerAdminStatus
|
|
if (!isset($peer['hwBgpPeerAdminStatus'])) {
|
|
// Always set this Oid to start, while not really exist and while peer entry exist in this table
|
|
$peer['hwBgpPeerAdminStatus'] = 'start';
|
|
}
|
|
break;
|
|
|
|
case 'BGP4-V2-MIB-JUNIPER':
|
|
// 1. jnxBgpM2PeerRoutingInstance
|
|
$peer['jnxBgpM2PeerRoutingInstance'] = array_shift($index_parts);
|
|
// 2. jnxBgpM2PeerLocalAddrType
|
|
$local_addr_type = array_shift($index_parts);
|
|
if (safe_empty($peer['jnxBgpM2PeerLocalAddrType'])) {
|
|
$peer['jnxBgpM2PeerLocalAddrType'] = $local_addr_type;
|
|
}
|
|
if (isset($address_types[$peer['jnxBgpM2PeerLocalAddrType']])) {
|
|
$peer['jnxBgpM2PeerLocalAddrType'] = $address_types[$peer['jnxBgpM2PeerLocalAddrType']];
|
|
}
|
|
// 3. length of the local IP address
|
|
$ip_len = str_contains($peer['jnxBgpM2PeerLocalAddrType'], 'ipv6') ? 16 : 4;
|
|
// 4. IP address
|
|
$ip_parts = array_slice($index_parts, 0, $ip_len);
|
|
|
|
// 5. jnxBgpM2PeerLocalAddr
|
|
$local_ip = implode('.', $ip_parts);
|
|
if ((int)$ip_len === 16) {
|
|
$local_ip = snmp2ipv6($local_ip);
|
|
}
|
|
if (get_ip_version($local_ip)) {
|
|
$peer['jnxBgpM2PeerLocalAddr'] = $local_ip;
|
|
}
|
|
|
|
// Get second part of index
|
|
$index_parts = array_slice($index_parts, $ip_len);
|
|
// 6. jnxBgpM2PeerRemoteAddrType
|
|
$peer_addr_type = array_shift($index_parts);
|
|
if (safe_empty($peer['jnxBgpM2PeerRemoteAddrType'])) {
|
|
$peer['jnxBgpM2PeerRemoteAddrType'] = $peer_addr_type;
|
|
}
|
|
if (isset($address_types[$peer['jnxBgpM2PeerRemoteAddrType']])) {
|
|
$peer['jnxBgpM2PeerRemoteAddrType'] = $address_types[$peer['jnxBgpM2PeerRemoteAddrType']];
|
|
}
|
|
// 7. length of the remote IP address
|
|
$ip_len = str_contains($peer['jnxBgpM2PeerRemoteAddrType'], 'ipv6') ? 16 : 4;
|
|
// 8. IP address
|
|
$ip_parts = array_slice($index_parts, 0, $ip_len);
|
|
|
|
// 9. jnxBgpM2PeerRemoteAddr
|
|
$peer_ip = implode('.', $ip_parts);
|
|
if ((int)$ip_len === 16) {
|
|
$peer_ip = snmp2ipv6($peer_ip);
|
|
}
|
|
if (get_ip_version($peer_ip)) {
|
|
$peer['jnxBgpM2PeerRemoteAddr'] = $peer_ip;
|
|
}
|
|
break;
|
|
|
|
case 'DELLEMC-OS10-BGP4V2-MIB':
|
|
// 1. os10bgp4V2PeerInstance
|
|
$peer['os10bgp4V2PeerInstance'] = array_shift($index_parts);
|
|
// 2. os10bgp4V2PeerRemoteAddrType
|
|
$peer_addr_type = array_shift($index_parts);
|
|
if (safe_empty($peer['os10bgp4V2PeerRemoteAddrType'])) {
|
|
$peer['os10bgp4V2PeerRemoteAddrType'] = $peer_addr_type;
|
|
}
|
|
if (isset($address_types[$peer['os10bgp4V2PeerRemoteAddrType']])) {
|
|
$peer['os10bgp4V2PeerRemoteAddrType'] = $address_types[$peer['os10bgp4V2PeerRemoteAddrType']];
|
|
}
|
|
// 3. length of the remote IP address
|
|
$ip_len = array_shift($index_parts);
|
|
// 4. IP address
|
|
$ip_parts = array_slice($index_parts, 0, $ip_len);
|
|
// 5. os10bgp4V2PeerRemoteAddr
|
|
$peer_ip = implode('.', $ip_parts);
|
|
if ((int)$ip_len === 16) {
|
|
$peer_ip = snmp2ipv6($peer_ip);
|
|
}
|
|
if (get_ip_version($peer_ip)) {
|
|
$peer['os10bgp4V2PeerRemoteAddr'] = $peer_ip;
|
|
}
|
|
|
|
// Uptimes really reported with x100 multiplier
|
|
if (isset($peer['os10bgp4V2PeerFsmEstablishedTime'])) {
|
|
$peer['os10bgp4V2PeerFsmEstablishedTime'] *= 0.01;
|
|
}
|
|
if (isset($peer['os10bgp4V2PeerInUpdatesElapsedTime'])) {
|
|
$peer['os10bgp4V2PeerInUpdatesElapsedTime'] *= 0.01;
|
|
}
|
|
|
|
// It seems as firmware issue, always report as halted
|
|
// See: https://jira.observium.org/browse/OBS-4134
|
|
if ($peer['os10bgp4V2PeerAdminStatus'] === 'halted' && $peer['os10bgp4V2PeerState'] !== 'idle') {
|
|
// running: established, connect, active (not sure about opensent, openconfirm)
|
|
print_debug("Fixed Dell OS10 issue, DELLEMC-OS10-BGP4V2-MIB::os10bgp4V2PeerAdminStatus always report halted");
|
|
$peer['os10bgp4V2PeerAdminStatus'] = 'running';
|
|
} elseif ($peer['os10bgp4V2PeerAdminStatus'] === 'running' && $peer['os10bgp4V2PeerState'] === 'idle') {
|
|
// See: https://jira.observium.org/browse/OBS-4280
|
|
/*
|
|
* DELLEMC-OS10-BGP4V2-MIB::os10bgp4V2PeerAdminStatus.1.ipv4."255.79.16.154" = INTEGER: halted(1)
|
|
* DELLEMC-OS10-BGP4V2-MIB::os10bgp4V2PeerAdminStatus.1.ipv4."255.118.129.119" = INTEGER: running(2)
|
|
* DELLEMC-OS10-BGP4V2-MIB::os10bgp4V2PeerAdminStatus.1.ipv4."254.145.182.212" = INTEGER: halted(1)
|
|
* DELLEMC-OS10-BGP4V2-MIB::os10bgp4V2PeerAdminStatus.1.ipv4."254.145.182.214" = INTEGER: halted(1)
|
|
* DELLEMC-OS10-BGP4V2-MIB::os10bgp4V2PeerState.1.ipv4."255.79.16.154" = INTEGER: established(6)
|
|
* DELLEMC-OS10-BGP4V2-MIB::os10bgp4V2PeerState.1.ipv4."255.118.129.119" = INTEGER: idle(1)
|
|
* DELLEMC-OS10-BGP4V2-MIB::os10bgp4V2PeerState.1.ipv4."254.145.182.212" = INTEGER: established(6)
|
|
* DELLEMC-OS10-BGP4V2-MIB::os10bgp4V2PeerState.1.ipv4."254.145.182.214" = INTEGER: established(6)
|
|
*/
|
|
print_debug("Fixed Dell OS10 issue, DELLEMC-OS10-BGP4V2-MIB::os10bgp4V2PeerAdminStatus report running for shutdown");
|
|
$peer['os10bgp4V2PeerAdminStatus'] = 'halted';
|
|
}
|
|
|
|
break;
|
|
|
|
case 'FORCE10-BGP4-V2-MIB':
|
|
// 1. f10BgpM2PeerInstance
|
|
$peer['f10BgpM2PeerInstance'] = array_shift($index_parts);
|
|
// 2. f10BgpM2PeerLocalAddrType
|
|
$local_addr_type = array_shift($index_parts);
|
|
if (safe_empty($peer['f10BgpM2PeerLocalAddrType'])) {
|
|
$peer['f10BgpM2PeerLocalAddrType'] = $local_addr_type;
|
|
}
|
|
if (isset($address_types[$peer['f10BgpM2PeerLocalAddrType']])) {
|
|
$peer['f10BgpM2PeerLocalAddrType'] = $address_types[$peer['f10BgpM2PeerLocalAddrType']];
|
|
}
|
|
// 3. length of the local IP address
|
|
$ip_len = str_contains($peer['f10BgpM2PeerLocalAddrType'], 'ipv6') ? 16 : 4;
|
|
// 4. IP address
|
|
$ip_parts = array_slice($index_parts, 0, $ip_len);
|
|
|
|
// 5. f10BgpM2PeerLocalAddr
|
|
$local_ip = implode('.', $ip_parts);
|
|
if ((int)$ip_len === 16) {
|
|
$local_ip = snmp2ipv6($local_ip);
|
|
}
|
|
if (get_ip_version($local_ip)) {
|
|
$peer['f10BgpM2PeerLocalAddr'] = $local_ip;
|
|
}
|
|
|
|
// Get second part of index
|
|
$index_parts = array_slice($index_parts, $ip_len);
|
|
// 6. f10BgpM2PeerRemoteAddrType
|
|
$peer_addr_type = array_shift($index_parts);
|
|
if (safe_empty($peer['f10BgpM2PeerRemoteAddrType'])) {
|
|
$peer['f10BgpM2PeerRemoteAddrType'] = $peer_addr_type;
|
|
}
|
|
if (isset($address_types[$peer['f10BgpM2PeerRemoteAddrType']])) {
|
|
$peer['f10BgpM2PeerRemoteAddrType'] = $address_types[$peer['f10BgpM2PeerRemoteAddrType']];
|
|
}
|
|
// 7. length of the remote IP address
|
|
$ip_len = str_contains($peer['f10BgpM2PeerRemoteAddrType'], 'ipv6') ? 16 : 4;
|
|
// 8. IP address
|
|
$ip_parts = array_slice($index_parts, 0, $ip_len);
|
|
|
|
// 9. f10BgpM2PeerRemoteAddr
|
|
$peer_ip = implode('.', $ip_parts);
|
|
if ((int)$ip_len === 16) {
|
|
$peer_ip = snmp2ipv6($peer_ip);
|
|
}
|
|
if (get_ip_version($peer_ip)) {
|
|
$peer['f10BgpM2PeerRemoteAddr'] = $peer_ip;
|
|
}
|
|
break;
|
|
|
|
case 'VIPTELA-OPER-BGP':
|
|
// 1. bgpBgpNeighborVpnId
|
|
$peer['bgpBgpNeighborVpnId'] = array_shift($index_parts);
|
|
|
|
// 2. hwBgpPeerRemoteAddr
|
|
$ip_len = safe_count($index_parts);
|
|
$peer_ip = implode('.', $index_parts);
|
|
if ((int)$ip_len === 16) {
|
|
$peer_ip = snmp2ipv6($peer_ip);
|
|
}
|
|
if ($peer_addr_type = get_ip_version($peer_ip)) {
|
|
$peer['bgpBgpNeighborPeerAddr'] = $peer_ip;
|
|
$peer['bgpBgpNeighborPeerAddrType'] = 'ipv' . $peer_addr_type;
|
|
}
|
|
|
|
// 6. hwBgpPeerAdminStatus
|
|
if (!isset($peer['bgpBgpNeighborAdminState'])) {
|
|
// Always set this Oid to start, while not really exist and while peer entry exist in this table
|
|
$peer['bgpBgpNeighborAdminState'] = in_array($peer['bgpBgpNeighborState'], [ 'clearing', 'deleted' ]) ? 'stop' : 'start';
|
|
}
|
|
break;
|
|
|
|
case 'FIREBRICK-BGP-MIB':
|
|
$peer_type = array_shift($index_parts);
|
|
if (isset($address_types[$peer_type])) {
|
|
$peer['fbBgpPeerAddressType'] = $address_types[$peer_type];
|
|
}
|
|
$ip_len = array_shift($index_parts);
|
|
$peer_ip = implode('.', $index_parts);
|
|
if ((int)$ip_len === 16) {
|
|
$peer_ip = snmp2ipv6($peer_ip);
|
|
}
|
|
$peer['fbBgpPeerAddress'] = $peer_ip;
|
|
|
|
if (!isset($peer['fbBgpPeerAdminState'])) {
|
|
// Always set this Oid to start, while not really exist and while peer entry exist in this table
|
|
$peer['fbBgpPeerAdminState'] = in_array($peer['fbBgpPeerState'], [ 'clearing', 'deleted' ]) ? 'stop' : 'start';
|
|
}
|
|
break;
|
|
}
|
|
|
|
}
|
|
|
|
function discovery_bgp_afisafi($device, $peer, $afi, $safi, &$af_list) {
|
|
global $table_rows;
|
|
|
|
$index = $peer['index'];
|
|
$peer_id = $peer['id'];
|
|
$peer_ip = $peer['ip'];
|
|
$peer_as = $peer['as'];
|
|
if (isset($GLOBALS['config']['routing_afis'][$afi])) {
|
|
$afi = $GLOBALS['config']['routing_afis'][$afi]['name'];
|
|
}
|
|
if (isset($GLOBALS['config']['routing_safis'][$safi])) {
|
|
$safi = $GLOBALS['config']['routing_safis'][$safi]['name'];
|
|
}
|
|
print_debug("INDEX: $index, AS: $peer_as, IP: $peer_ip, AFI: $afi, SAFI: $safi");
|
|
print_debug_vars($peer);
|
|
$af_list[$peer_id][$afi][$safi] = 1;
|
|
|
|
if (!safe_empty($table_rows[$peer_ip][4])) {
|
|
$table_rows[$peer_ip][4] .= ', ';
|
|
}
|
|
$table_rows[$peer_ip][4] .= $afi . '.' . $safi;
|
|
|
|
if (!dbExist('bgpPeers_cbgp', '`device_id` = ? AND `bgpPeer_id` = ? AND `afi` = ? AND `safi` = ?', [ $device['device_id'], $peer_id, $afi, $safi ])) {
|
|
$params = [ 'bgpPeer_id' => $peer_id, 'device_id' => $device['device_id'], 'bgpPeerIndex' => $index, 'afi' => $afi, 'safi' => $safi ];
|
|
dbInsert($params, 'bgpPeers_cbgp');
|
|
} elseif (!safe_empty($index)) {
|
|
// Update Index
|
|
dbUpdate([ 'bgpPeerIndex' => $index ], 'bgpPeers_cbgp', 'device_id = ? AND `bgpPeer_id` = ? AND `afi` = ? AND `safi` = ?', [ $device['device_id'], $peer_id, $afi, $safi ]);
|
|
}
|
|
}
|
|
|
|
// DOCME needs phpdoc block
|
|
// TESTME needs unit testing
|
|
function get_astext($asn) {
|
|
global $config, $cache;
|
|
|
|
// Fetch pre-set AS text from config first
|
|
if (isset($config['astext'][$asn])) {
|
|
return $config['astext'][$asn];
|
|
}
|
|
|
|
// Not preconfigured, check cache before doing a new DNS request
|
|
if (!isset($cache['astext'][$asn])) {
|
|
$result = dns_get_record("AS$asn.asn.cymru.com", DNS_TXT);
|
|
print_debug_vars($result);
|
|
$txt = explode('|', $result[0]['txt']);
|
|
$cache['astext'][$asn] = trim(str_replace('"', '', $txt[4]));
|
|
}
|
|
|
|
return $cache['astext'][$asn];
|
|
}
|
|
|
|
function discover_vrf($device, $vrf)
|
|
{
|
|
global $cache_discovery, $valid, $table_rows;
|
|
|
|
$module = 'vrf';
|
|
|
|
if (empty($vrf['vrf_name'])) { return; }
|
|
$vrf_name = $vrf['vrf_name'];
|
|
|
|
// Pre-cache VRFs from DB
|
|
if (!isset($cache_discovery['vrf_db']))
|
|
{
|
|
$cache_discovery['vrf_db'] = [];
|
|
foreach (dbFetchRows("SELECT * FROM `vrfs` WHERE `device_id` = ?", [ $device['device_id'] ]) as $entry)
|
|
{
|
|
// Strange case with duplicate entries: https://jira.observium.org/browse/OBS-3600
|
|
if (isset($cache_discovery['vrf_db'][$entry['vrf_name']])) {
|
|
print_debug("Duplicate VRF entry in DB found: ".$entry['vrf_name']);
|
|
print_debug_vars($entry);
|
|
dbDelete('vrfs', '`vrf_id` = ?', [ $entry['vrf_id'] ]);
|
|
continue;
|
|
}
|
|
$cache_discovery['vrf_db'][$entry['vrf_name']] = $entry;
|
|
}
|
|
}
|
|
|
|
$params_main = [ 'vrf_mib', 'vrf_name', 'vrf_descr', 'vrf_rd' ];
|
|
$params_state = [ 'vrf_admin_status', 'vrf_oper_status',
|
|
'vrf_active_ports', 'vrf_total_ports',
|
|
'vrf_added_routes', 'vrf_deleted_routes', 'vrf_total_routes' ];
|
|
|
|
$insert_array = [ 'device_id' => $device['device_id'] ];
|
|
foreach ($params_main as $param)
|
|
{
|
|
$insert_array[$param] = isset($vrf[$param]) ? $vrf[$param] : '';
|
|
}
|
|
|
|
// Set added/changed params
|
|
$current_time = (int)time();
|
|
$param = 'vrf_added';
|
|
$insert_array[$param] = isset($vrf[$param]) && $vrf[$param] < $current_time ? (int)$vrf[$param] : $device['last_rebooted'];
|
|
|
|
if (!isset($cache_discovery['vrf_db'][$vrf['vrf_name']]))
|
|
{
|
|
// Added
|
|
$param = 'vrf_last_change';
|
|
$insert_array[$param] = isset($vrf[$param]) && $vrf[$param] < $current_time ? (int)$vrf[$param] : $current_time;
|
|
|
|
// When insert, also add state params
|
|
foreach ($params_state as $param)
|
|
{
|
|
if (isset($vrf[$param]))
|
|
{
|
|
// When not set, use db default
|
|
$insert_array[$param] = $vrf[$param];
|
|
}
|
|
}
|
|
|
|
$vrf_id = dbInsert($insert_array, 'vrfs');
|
|
$GLOBALS['module_stats'][$module]['added']++; //echo "+";
|
|
} else {
|
|
// Compare/update
|
|
|
|
$update_array = [];
|
|
$entry = $cache_discovery['vrf_db'][$vrf['vrf_name']];
|
|
$vrf_id = $entry['vrf_id'];
|
|
|
|
foreach ($params_main as $param)
|
|
{
|
|
if ($insert_array[$param] !== $entry[$param])
|
|
{
|
|
$update_array[$param] = $insert_array[$param];
|
|
}
|
|
}
|
|
|
|
// Update old entries (after migrate)
|
|
if (empty($entry['vrf_added']))
|
|
{
|
|
// State params
|
|
foreach ($params_state as $param)
|
|
{
|
|
if (isset($vrf[$param]))
|
|
{
|
|
// When not set, use db default
|
|
$update_array[$param] = $vrf[$param];
|
|
}
|
|
}
|
|
|
|
$update_array['vrf_added'] = $insert_array['vrf_added'];
|
|
$update_array['vrf_last_change'] = isset($vrf['vrf_last_change']) && $vrf['vrf_last_change'] < $current_time ? (int)$vrf['vrf_last_change'] : $current_time;
|
|
} else {
|
|
|
|
if (count($update_array)) {
|
|
$update_array['vrf_last_change'] = isset($vrf['vrf_last_change']) && $vrf['vrf_last_change'] < $current_time ? (int)$vrf['vrf_last_change'] : $current_time;
|
|
}
|
|
// For old entries only validate added/changed times (more than 60 sec)
|
|
/*foreach ([ 'vrf_added', 'vrf_last_change' ] as $param) {
|
|
foreach ([ 'vrf_last_change' ] as $param) {
|
|
if (abs($insert_array[$param] - $entry[$param]) > 60)
|
|
{
|
|
$update_array[$param] = $insert_array[$param];
|
|
print_debug("$param: ".$insert_array[$param]." - ".$entry[$param]." = ".($insert_array[$param] - $entry[$param]));
|
|
}
|
|
}
|
|
*/
|
|
}
|
|
|
|
if (safe_count($update_array))
|
|
{
|
|
dbUpdate($update_array, 'vrfs', '`vrf_id` = ?', [ $vrf_id ]);
|
|
|
|
$GLOBALS['module_stats'][$module]['updated']++;
|
|
} else {
|
|
$GLOBALS['module_stats'][$module]['unchanged']++;
|
|
}
|
|
}
|
|
|
|
$valid['vrf'][$vrf_name] = $vrf_id;
|
|
|
|
// VRF ports
|
|
if (safe_count($vrf['ifIndex']))
|
|
{
|
|
$db_update = [];
|
|
foreach ($vrf['ifIndex'] as $ifIndex)
|
|
{
|
|
if ($port = get_port_by_index_cache($device, $ifIndex))
|
|
{
|
|
$db_update[] = [ 'port_id' => $port['port_id'], 'ifIndex' => $port['ifIndex'], 'device_id' => $device['device_id'], 'ifVrf' => $vrf_id ];
|
|
|
|
$valid['vrf-ports'][$vrf_name][$port['port_id']] = $vrf_id;
|
|
}
|
|
}
|
|
|
|
dbUpdateMulti($db_update, 'ports', [ 'ifVrf' ]);
|
|
}
|
|
}
|
|
|
|
// EOF
|