Настройка работы телефонных аппаратов, находящихся в различных сетях

apt install lldpd snmpd

sudo nano /etc/snmp/snmpd.conf 

# snmpd.conf
# An example configuration file for configuring the Net-SNMP agent ('snmpd')
# See snmpd.conf(5) man page for details
#
###########################################################################
# SECTION: System Information Setup
#

# syslocation: The [typically physical] location of the system.
#   Note that setting this value here means that when trying to
#   perform an snmp SET operation to the sysLocation.0 variable will make
#   the agent return the "notWritable" error code.  IE, including
#   this token in the snmpd.conf file will disable write access to
#   the variable.
#   arguments:  location_string
sysLocation    Sitting on the Dock of the Bay
sysContact     Me <me@example.org>

# sysservices: The proper value for the sysServices object.
#   arguments:  sysservices_number
sysServices    72

###########################################################################
# SECTION: Agent Operating Mode
#
#   This section defines how the agent will operate when it
#   is running.

# master: Should the agent operate as a master agent or not.
#   Currently, the only supported master agent type for this token
#   is "agentx".
#   
#   arguments: (on|yes|agentx|all|off|no)

master  agentx

# agentaddress: The IP address and port number that the agent will listen on.
#   By default the agent listens to any and all traffic from any
#   interface on the default SNMP port (161).  This allows you to
#   specify which address, interface, transport type and port(s) that you
#   want the agent to listen on.  Multiple definitions of this token
#   are concatenated together (using ':'s).
#   arguments: [transport:]port[@interface/address],...

agentaddress  udp:0.0.0.0:161

###########################################################################
# SECTION: Access Control Setup
#
#   This section defines who is allowed to talk to your running
#   snmp agent.

# Views 
#   arguments viewname included [oid]

#  system + hrSystem groups only
view   systemonly  included   .1.3.6.1.2.1.1
view   systemonly  included   .1.3.6.1.2.1.25.1

# rocommunity: a SNMPv1/SNMPv2c read-only access community name
#   arguments:  community [default|hostname|network/bits] [oid | -V view]

# Read-only access to everyone to the systemonly view
rocommunity  public default
#rocommunity6 public default -V systemonly

# SNMPv3 doesn't use communities, but users with (optionally) an
# authentication and encryption string. This user needs to be created
# with what they can view with rouser/rwuser lines in this file.
#
# createUser username (MD5|SHA|SHA-512|SHA-384|SHA-256|SHA-224) authpassphrase [DES|AES] [privpassphrase]
# e.g.
# createuser authPrivUser SHA-512 myauthphrase AES myprivphrase
#
# This should be put into /var/lib/snmp/snmpd.conf 
#
# rouser: a SNMPv3 read-only access username
#    arguments: username [noauth|auth|priv [OID | -V VIEW [CONTEXT]]]
rouser authPrivUser authpriv -V systemonly

nano /etc/default/lldpd

# Uncomment to start SNMP subagent and enable CDP, SONMP and EDP protocol
DAEMON_ARGS="-r -k -c -x -I eth0,eth2 -X /var/agentx/master"

sudo systemctl restart snmpd.service lldpd.service

# EXAMPLE.conf:
#   An example configuration file for configuring the Net-SNMP agent ('snmpd')
#   See the 'snmpd.conf(5)' man page for details
#
#  Some entries are deliberately commented out, and will need to be explicitly activated
#
###############################################################################
#
#  AGENT BEHAVIOUR
#

#  Listen for connections from the local system only
#agentAddress  udp:127.0.0.1:161
agentaddress udp:0.0.0.0:161
#  Listen for connections on all interfaces (both IPv4 *and* IPv6)
#agentAddress udp:161,udp6:[::1]:161

###############################################################################
#
#  SNMPv3 AUTHENTICATION
#
#  Note that these particular settings don't actually belong here.
#  They should be copied to the file /var/net-snmp/snmpd.conf
#     and the passwords changed, before being uncommented in that file *only*.
#  Then restart the agent

#  createUser authOnlyUser  MD5 "remember to change this password" 
#  createUser authPrivUser  SHA "remember to change this one too"  DES
#  createUser internalUser  MD5 "this is only ever used internally, but still change the password" 

#  If you also change the usernames (which might be sensible),
#  then remember to update the other occurances in this example config file to match.

###############################################################################
#
#  ACCESS CONTROL
#

                                                 #  system + hrSystem groups only
# view   systemonly  included   .1.3.6.1.2.1.1
# view   systemonly  included   .1.3.6.1.2.1.25.1
# view   all         included   .1
view   lldpview    included   .1.0.8802.1.1.2.1.4
                                                 #  Full access from the local host
#  rocommunity public  localhost
                                                 #  Default access to basic system info
 #rocommunity public  default    -V systemonly
rocommunity public default
rocommunity public default -V lldpview

group   notConfigGroup v1            notConfigUser
group   notConfigGroup v2c           notConfigUser

access  notConfigGroup ""            any       noauth    exact  lldpview none none

com2sec -Cn ctx_remotehost1 notConfigUser  default       cmty_remotehost1
com2sec -Cn ctx_remotehost2 notConfigUser  default       cmty_remotehost2
com2sec -Cn ctx_remotehost3 notConfigUser  default       cmty_remotehost3

access  notConfigGroup ctx_remotehost            any       noauth    prefix  lldpview none none

proxy -Cn ctx_remotehost1 -v 2c -c public 10.25.88.89 1.0.8802.1.1.2.1.4
proxy -Cn ctx_remotehost2 -v 2c -c public 10.25.88.21 1.0.8802.1.1.2.1.4
proxy -Cn ctx_remotehost3 -v 2c -c public 192.168.23.12 1.0.8802.1.1.2.1.4

 master          agentx
                                           #  Listen for network connections (from localhost)
                                           #    rather than the default named socket /var/agentx/master
#agentXSocket    tcp:localhost:705
# agentXSocket    tcp:0.0.0.0:705

sudo nano aup/stable/volumes/prod/configs/core/config.yaml

 device_info:
    snmp:
     prune_ttl: 60000
     polling_period: 1000
     endpoints:
       - uri: "snmp://<SWITCH_IP_ADDRESS>"
         credential:
           community: "<COMMUNITY_NAME>"
         lldpRemoteSystemsDataOID: "1.0.8802.1.1.2.1.4"

docker restart autoprovision-unstable_core_1