SNMP v3 Only Gets a Few Items, v2c Gets All Data -- But Same Dell Switch!

[[email protected]]

We are monitoring a Dell S5248F-ON switch using Zabbix 6.2 and SNMP. When we create the host interface using SNMP v2c, we get 552 items, but when we use an SNMP v3 interface we only get 12 items. I've tried un-checking the "Use bulk requests" box. I can snmpwalk the switch using v2c or v3 and get the same data either way. Any ideas?

[Markku]

An idea would be to use tcpdump (sudo tcpdump host ip-of-switch -w capture.pcap -v) to save both v3 conversations separately (Zabbix-initiated requests with responses and your own requests with responses). You can then compare them side-by-side in Wireshark and decide if there is something that needs to be handled by Zabbix support (if there isn't corresponding issue already at https://support.zabbix.com).

You can also try different combinations of SNMP v3 auth+encrypt settings if that makes a difference. You already saw the slideset that mentioned reloading the SNMP cache in Zabbix so that is one more variable to try during the tests.

If uploading the capture files here, make sure that you don't expose any confidential data about the device names etc. Use temporary configurations if that helps.

Markku

[Hamardaban]

In the switch SNMP settings, there may be restrictions on the visibility of some OID branches for different communities (it may be called "View Settings" or something similar)....

[[email protected]]

In the switch SNMP settings, there may be restrictions on the visibility of some OID branches for different communities (it may be called "View Settings" or something similar)....

But snmpwalk outputs the same information with either version.