« cannot read from session: Bad parse of ASN.1 type »

[Takaya]

Hello,

I have a Zabbix 7.0.6, proxies in passive mode, I'm using items with SNMP agent, devices configured in SNMPv3 SHA1 AES1 and I'm encountering an issue on some devices. I have an alert on each item of the device that says : « cannot read from session: Bad parse of ASN.1 type » (Images below). When I interrogate directly the OIDs from the proxy, I've got an immediate result and when I test the item I also have a result. I either use a group of proxies or a proxy directly and sometimes I solve the issue by affecting an other proxy but I still have devices that can't work. (of course I've restarted zabbix-proxy service, zabbix-server proxy, removed the equipment, imported it back ...)







Would you have any idea of how to solve this issue ? Is this an already known issue ?

Thank you !

[Takaya]

I've found the issue. The problem comes from the monitored device. It's engine ID is not unique on your network. Two devices, at least, share the same. You can retrieve the engine through a SNMP test using get[1.3.6.1.6.3.10.2.1.1.0]. You can generate an unique engine ID on your network equipments on CLI or GUI, this accepted on cisco, arista, alcatel ...

[TechPulse_98]

You just made my day. Thank you very much!

[TechPulse_98]

I have the exact same problem since I switched from SNMPv2c to SNMPv3. I have a mixture of proxies and proxy groups and use sha1 and aes128. Randomly some devices encounter this error, they do not resolve by themselfes, however if i manually execute them, they recover. Help would be greatly appreciated.

[Takaya]

I've found the issue. The problem comes from the monitored device. It's engine ID is not unique on your network. Two devices, at least, share the same. You can retrieve the engine through a SNMP test using get[1.3.6.1.6.3.10.2.1.1.0]. You can generate an unique engine ID on your network equipments on CLI or GUI, this accepted on cisco, arista, alcatel ...

[TechPulse_98]

You just made my day. Thank you very much!