SNMPv3

stesarova · ‎05-05-2009

Hi,

I have trouble with SNMPv3 authentication of some switches.

I have tried all three types of authentication:

NoAuthNoPriv

AuthNoPriv

AuthPriv

All this variants are generated this error:

Error performing SNMP operation.

Does anybody know, what is possible to do against this problem?

Thank you

sarka

Marvin Rhoads · ‎05-05-2009

Could you give us some more information to understand your problem? The type of devices, their software release level and the pertinent section of the script for starters. Also, what tool are you using to access the switches via SNMP? If CiscoWorks, what version.

One common error that folks have been making lately is that they are not defining a context for SNMP. See the posting at http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=Network%20Management&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.2cd2bbae/0#selected_message for more information.

stesarova · ‎05-05-2009

I have tried to use to this purpose

application CiscoWorks LMS 3.1

The monitored devices are Cisco Catalyst 6509.

I will see the posted link.

Thank you very much

Sarka

David Stanford · ‎05-06-2009

Can you post a copy of your snmp v3 config?

stesarova · ‎05-06-2009

snmp-server group GroupPriv v3 priv

snmp-server user UserPriv GroupPriv v3 auth md5 Cisco123! priv des56 Cisco123! access 95

!

User: UserPriv

Password: Cisco123! (authentization MD5)

PrivPassword: Cisco123! (encryption DES)

<<...>>

M.

stesarova · ‎05-07-2009

Hi David,

One of the monitored devices is this type:

Cisco 2600,2800,3700,3800 Series 16-Port EtherSwitch Service Module

There is detailed list of configuration SNMP on monitored box:

snmp-server group GroupPriv v3 priv

snmp-server view readview internet included

snmp-server location Brno, Purkynova 101, 1 NP, serverovna

snmp-server contact unix@homecredit.net

snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart

snmp-server enable traps tty

snmp-server enable traps dsp card-status

snmp-server enable traps flash insertion removal

snmp-server enable traps envmon

snmp-server enable traps config-copy

snmp-server enable traps config

snmp-server enable traps entity

snmp-server enable traps event-manager

snmp-server enable traps ospf state-change

snmp-server enable traps ospf errors

snmp-server enable traps ospf retransmit

snmp-server enable traps ospf lsa

snmp-server enable traps ospf cisco-specific state-change nssa-trans-change

snmp-server enable traps ospf cisco-specific state-change shamlink interface-old

snmp-server enable traps ospf cisco-specific state-change shamlink neighbor

snmp-server enable traps ospf cisco-specific errors

snmp-server enable traps ospf cisco-specific retransmit

snmp-server enable traps ospf cisco-specific lsa

snmp-server enable traps cpu threshold

snmp-server enable traps syslog

snmp-server enable traps isakmp policy add

snmp-server enable traps isakmp policy delete

snmp-server enable traps isakmp tunnel start

snmp-server enable traps isakmp tunnel stop

snmp-server enable traps ipsec cryptomap add

snmp-server enable traps ipsec cryptomap delete

snmp-server enable traps ipsec cryptomap attach

snmp-server enable traps ipsec cryptomap detach

snmp-server enable traps ipsec tunnel start

snmp-server enable traps ipsec tunnel stop

snmp-server enable traps ipsec too-many-sas

snmp-server enable traps voice fallback poor-qov

snmp-server community ****** RO 95

snmp-server community ****** RW 98

snmp-server host 192.168.35.22 version 2c ******

snmp-server host 192.168.35.97 version 2c ******

If you have some idea where could be a problem, let me know, please.

Sarka