[SOLVED] SNMP v3 Issue

Post general support questions here that do not specifically fall into the Linux or Windows categories.

Moderators: Developers, Moderators

Post Reply
MLAN_NetOPS
Posts: 6
Joined: Wed Apr 21, 2010 9:20 am

[SOLVED] SNMP v3 Issue

Post by MLAN_NetOPS »

I'm having an issue with SNMP v3 with Cacti. SNMP v2 works fine with no issue, but as soon as I switch to v3 I can no longer get information off of the device, and all I see is "SNMP Error" at the top of the device page, however, I am able to do a snmp walk from the Cacti server using the command line.

I'm using SHA and AES 128. The switch I'm currently trying to poll is a cisco 3560g. I am able to poll the device fine using both CiscoWorks and WhatsUpGold so I know the switch is configured correctly.

I have also tried creating a user on the switch with SHA/DES and MD5/DES and have had no luck in getting v3 to work.

We are running version 0.8.7e.
Net-snmp version 5.4.2.1
PHP version 5.2.12

Any ideas on what I may be missing?
Last edited by MLAN_NetOPS on Thu Apr 22, 2010 10:31 am, edited 1 time in total.
MLAN_NetOPS
Posts: 6
Joined: Wed Apr 21, 2010 9:20 am

Post by MLAN_NetOPS »

UPDATE:

Currently running v3 with MD5/DES and while I still see "SNMP Error" at the top of the device page, I am actually graphing data off the switch.

The end goal is to not have any visible errors while running SHA/AES and to have good graph data. So I guess this is progress....

Any help would be appreciated. I can provide more info if you let me know what you want.

EDIT: Also, it only seems to work with MD5/DES if my poller is set to Spine, however, even with the poller set to Spine, SHA/AES still does not work. Poller is typically set to cmd.php.
User avatar
BSOD2600
Cacti Moderator
Posts: 12171
Joined: Sat May 08, 2004 12:44 pm
Location: USA

Post by BSOD2600 »

Does your net-snmp binaries have the ssl package installed? If not, then snmpv3 queries won't work. You can manually try a snmpwalk v3 from the commandline to validate.

Also relevant: http://forums.cacti.net/viewtopic.php?t=33216
MLAN_NetOPS
Posts: 6
Joined: Wed Apr 21, 2010 9:20 am

Post by MLAN_NetOPS »

I am not the one who did the initial installation of this, can you direct me how to check if the SSL package is installed?
User avatar
BSOD2600
Cacti Moderator
Posts: 12171
Joined: Sat May 08, 2004 12:44 pm
Location: USA

Post by BSOD2600 »

BSOD2600 wrote: You can manually try a snmpwalk v3 from the commandline to validate.
MLAN_NetOPS
Posts: 6
Joined: Wed Apr 21, 2010 9:20 am

Post by MLAN_NetOPS »

Sorry, missed that part, and yes, I can do a v3 snmpwalk via the command line.
MLAN_NetOPS
Posts: 6
Joined: Wed Apr 21, 2010 9:20 am

Post by MLAN_NetOPS »

Post Reply

Who is online

Users browsing this forum: fpiorek and 8 guests