Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

%SNMP-3-AUTHFAIL

What does this message in Cisco 6509 mean? Can I assume that this host is querying my switch illegally?

.May 11 05:41:33: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 06:03:33: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 06:25:31: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 06:47:30: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 07:09:31: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 07:31:32: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 07:53:31: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 08:15:00: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 08:36:29: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 08:57:58: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 09:19:27: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 09:40:58: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 10:02:26: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 10:23:57: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 10:45:27: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 11:06:58: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 11:28:29: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 11:49:57: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

.May 11 12:11:27: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.32.194

2 REPLIES

Re: %SNMP-3-AUTHFAIL

I would try to find whatever device that is, and see if it's configured to hit your switch for anything. I've seen in the past, software that was installed on a host was set to send traffic to it's default gateway when it couldn't find a host on the local network. I would check for a monitoring client on that box that was misconfigured.

HTH,

John

HTH, John *** Please rate all useful posts ***
Bronze

Re: %SNMP-3-AUTHFAIL

It means that host 10.20.32.194 is trying to get in touch with your switch with snmp, but the community string is not matching.

Whether it's illegal is up to you to decide :-)

So you have to check who/what that IP address is and whether you want it to gather info from your switch.

HTH

433
Views
0
Helpful
2
Replies
CreatePlease to create content