Net-SNMP 5.8 RPM Packages for RHEL 7 to Support AES 256 and above

[SAThanvi]

There have been a recent request to support SNMP v3 with AES 256 authentication support.
There are few queries around this.

Current Environment
Zabbix 3.0
Latest RHEL 7.X
Net-SNMP 5.7.2-37

Queries
1. Does Zabbix have any issue with Net-SNMP5.8 or higher AES support ?

2. I understand that AES 192 and above are supported only in Net-SNMP 5.8 and above (See reference below) .
We are not allowed to locally install the Net-SNMP and it has to be done via RPM.
Can Zabbix / anybody from forum help us with the latest packages for Net-SNMP 5.8 and dependant packages ?

Many thanks in advance for the help and support.

Reference

http://net-snmp.sourceforge.net/wiki/index.php/Strong_Authentication_or_Encryption

[kloczek]

Zabbix on interacting with any SNMP aware devices uses libnetsnmp library which is part of the net-snmp package.
If your version of that library is able to use SNMPv3 with AES256 it should be no problem however because whole encryption is quite heavy operation for most of the embedded systems which are providing OS platform to run SNMP agent on monitored system size this using SNMPv3 in many cases is causing SNMP timeouts.

[SAThanvi]

Thank you kloczek for the inputs, especially around the SNMP Timeouts.
Do you have any suggestion for the second question around RPM for Net-SNMP and its dependencies for RHEL 7 ?

[c1support]

Thanks for raising this question, I would also be interested in configuring Zabbix (currently v4.4.7, but no problem updating to v5.x) to be communicating via SNMPv3 (AES-256/SHA-256).

I assume the following has to be done:
1. update net-snmp to v5.8 or higher (most recent version is v5.9)
2. select AUTPRIV level (e.g. AES-256/SHA-256) for Zabbix


=> What would be an elegant way to implement step 2?

[SAThanvi]

We did get a patch from Zabbix support. It is not yet implemented as it looks. Surprisingly, it is "medium" priority for Zabbix.

https://support.zabbix.com/browse/ZBXNEXT-5718

[c1support]

Thanks a lot for the info.
What did you do to get this patch from Zabbix support?

[SAThanvi]

Kindly check the support request. Patch is attached there itself.

[c1support]

Oh great, thank you very much! I will give this a try asap :-)

[SAThanvi]

Most welcome. Please share the results / modifications that you may have to make for the 4.X / 5.X release.