SNMP V3

somnath21 · ‎11-18-2008

Hi,

I have configured SNMP v3 in my Cisco 3560 switch and added it into OpManager monitoring tool (supported SNMP v3).But it's showing SNMP not enabled in that device.SNMP v1 working fine.

Please find my SNMP (v3) configuration and let me know if I missed anything.

Switch(config)# snmp-server group admins v3 auth read adminview write adminview

Switch(config)# snmp-server user root admins v3 auth md5 secrte12 priv des56 secrte21

Switch(config)# snmp-server context opmanager

Switch(config)# snmp-server host 10.138.75.136 root

10.138.75.136 - OpManager server IP

Regards,

som

Please help to resolve this issue.

Joe Clarke · ‎11-18-2008

You did not post the configuration for the view adminview. Additionally, make sure OpManager supports SNMPv3 authPriv. Many applications which support SNMPv3 only support SNMPv3 authNoPriv.

somnath21 · ‎11-19-2008

Hi,

as per your guideline I have added the below mentioned lines..

snmp-server view adminview internet included

snmp-server view adminview ipAddrEntry included

snmp-server view adminview ipRouteEntry excluded

** Attached screen shot of Op Manager.

But the issue is not resoved..

plz guide in this matter..

regards,

som

Joe Clarke · ‎11-19-2008

First, this view is not sufficient to manage a Cisco device. You should consider using the built-in view v1default which will grant you all required MIB access. Second, udp/162 is not the correct port for SNMP. The SNMP agent binds to udp/161 for manager requests, and uses udp/162 to send SNMP notifications (e.g. traps).

Jess65065 · ‎06-08-2022

Was there ever a solution to this issue. I am having it as well with OpManager. Others suggested removing the device from OPmanager, restating, and putting it back in but that didn't work either.

snmp-server view ALL_ACCESS iso included
snmp-server group SNMPGROUP v3 priv read ALL_ACCESS write ALL_ACCESS
snmp-server user FAKEUSER SNMPGROUP v3 auth sha fakepass priv aes 128 fakepass

I tried to add snmp-server host x.x.x.x root as well as seen above and that did not work either.