Ad Widget

Collapse

SNMPv3 with Cisco

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • AballahSonDis
    Junior Member
    • Sep 2013
    • 7

    #1

    SNMPv3 with Cisco


    I have messed with this for quite awhile and I just can't find anything.
    The engineID is unique.
    Using AES256 and SHA256

    If anyone has any ideas what exactly I am doing wrong here that would be great.

    This works from snmpwalk from the zabbix server.


    Incoming SNMP packet
    000220: Nov 2 10:17:47.417: v3 packet security model: v3 security level: noauth
    000221: Nov 2 10:17:47.417: username: Zabbix-User
    000222: Nov 2 10:17:47.417: snmpEngineID: 80000009030004EB40CDD910
    000223: Nov 2 10:17:47.417: snmpEngineBoots: 36 snmpEngineTime: 1713200
    000224: Nov 2 10:17:47.417: SNMP: Report, reqid 2147483647, errstat 0, erridx 0
    usmStats.5.0 = 4
    000225: Nov 2 10:17:47.418: SNMP: Packet sent via UDP to 10.1.1.90
    000226: Nov 2 10:17:51.497: SNMP: Packet received via UDP from 10.1.1.90 on GigabitEthernet0/0/0SrParseV3SnmpMessage: No matching Engine ID.
    SrParseV3SnmpMessage: Failed.
    SrDoSnmp: authentication failure, Unknown Engine ID

    000227: Nov 2 10:17:51.498:
    Incoming SNMP packet
    000228: Nov 2 10:17:51.498: v3 packet security model: v3 security level: noauth
    000229: Nov 2 10:17:51.498: username:
    000230: Nov 2 10:17:51.498: snmpEngineID: 80000009030004EB40CDD910
    000231: Nov 2 10:17:51.498: snmpEngineBoots: 0 snmpEngineTime: 0
    000232: Nov 2 10:17:51.498: SNMP: Report, reqid 1668154653, errstat 0, erridx 0
    usmStats.4.0 = 5
    000233: Nov 2 10:17:51.499: SNMP: Packet sent via UDP to 10.1.1.90
    000234: Nov 2 10:17:51.507: SNMP: Packet received via UDP from 10.1.1.90 on GigabitEthernet0/0/0SrParseV3SnmpMessage: Length of authParameters is 24 bytes, should be 12 bytes
    SrParseV3SnmpMessage: Failed.
    SrDoSnmp: authentication failure, USM wrong digest

    000235: Nov 2 10:17:51.508:
    Incoming SNMP packet
    000236: Nov 2 10:17:51.508: v3 packet security model: v3 security level: noauth
    000237: Nov 2 10:17:51.508: username: Zabbix-User
    000238: Nov 2 10:17:51.508: snmpEngineID: 80000009030004EB40CDD910
    000239: Nov 2 10:17:51.508: snmpEngineBoots: 36 snmpEngineTime: 1713204
    000240: Nov 2 10:17:51.508: SNMP: Report, reqid 2147483647, errstat 0, erridx 0
    usmStats.5.0 = 5
    000241: Nov 2 10:17:51.509: SNMP: Packet sent via UDP to 10.1.1.90


  • Jayr
    Junior Member
    • Dec 2023
    • 1

    #2
    Have you tried sha1 and aes128

    Comment

    Working...