SNMP v3 and BSOD2600 Installer 1.85

[fergu5]

Hoping someone can help (perhaps BSOD2600;-))

I am aware that there are a couple of newer releases of the BSOD Installer now (1.9 and 1.91) but I am running version 1.85 at the moment. I currently manage all devices happily using SNMPv1 and 2 but I have a requirement to use SNMP v3 to manage a few recently installed Cisco switches.

Basically I have tried and failed. I am positive I have set up Cacti and the switches correctly but I can't successfully poll the devices.

My thinking has taken me down the road of questioning the version of Net-SNMP that is bundled with the installer. Is the SSL version of Net-SNMP required to perform the DES function required for encryption? If so then I think there is a reliance on openSSL.

Has anyone got SNMP v3 polling working with BSOD2600 Installer 1.85?

Yours desperately,

fergu5

[BSOD2600]

People seem to fail to realize that my installer simply is a jumping point for getting cacti up and running. It follows the same instructions as the installation guide -- just automates the whole thing.

Are you able to manually snmpwalk the cisco device with snmpv3? if not, thats the first problem you need to solve. I don't have snmpv3 gear at my house, so haven't been able to play with it -- but I would guess the net-snmp ssl version is required.

[fergu5]

Sorry BSOD2600, please don't tar me with the same brush as all those folk that constantly ask you about upgrading - I'm a fairly experienced user who has undertaken bespoke installs as well as using your installers on several occasions. I'm very happy with your installers, understand their purpose and was trying to avoid forcing you to respond like you have;-)

Maybe I should just have said is installer 1.85 SNMP v3 capable without further customisation?

Yep I have carried out an SNMP walk from Net-SNMP and get an error. The exact error escapes me as I am not at my desk at the moment but it was along the lines of 'Error unsupported encryption type' when I tried to use DES encryption. Googling proved fairly fruitless but there was one article on an obscure forum that hinted to the need for openSSL and the SSL Net-SNMP version if you were getting that error. I was just a little unsure if it was meant to work and I was doing something wrong.

I'll carry on and install the SSL components and tell you how I get on. If it works would you consider adding the required components as a feature request for future installer version.

Kind regards,

fergu5

[BSOD2600]

Sorry, I get tired of the same broken record questions... and thus my replies

Looking over the Win32 Net-snmp readme, I found the following:

OpenSSL is required to support the encryption capabilities in SNMPv3, or SHA authentication.

Sounds like you're right in needing SSL for SNMPv3. I though I didn't include the SSL versions of net-snmp/php, due to international SSL restriction stuff...but I'm thinking I might be wrong. Yes, I shall have to look into including them in the next installer (quite easy to do).