SNMPv3 doesn't work

[swb-ops]

Hi guys,

I try to move my Cisco switches from SNMPv2 to SNMPv3.
I can get data via snmpwalk and via Test Item on Zabbix GUI, but I don't see latest data.

$ snmpwalk -v 3 -u authuser -l authPriv -A md5v3v3v3 -a md5 -x DES -X des56v3v3v3 10.20.1.42 | head
SNMPv2-MIB::sysDescr.0 = STRING: Cisco IOS Software, CXXXX Software (CXXXX-UNIVERSALK9-M), Version 15.2(7)XX, RELEASE SOFTWARE (fc10)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2022 by Cisco Systems, Inc.
Compiled Thu 22-Sep-22 08:33 by mcpre
SNMPv2-MIB::sysObjectID.0 = OID: SNMPv2-SMI::enterprises.9.1.1208
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (26420408) 3 days, 1:23:24.08
SNMPv2-MIB::sysContact.0 = STRING:
SNMPv2-MIB::sysName.0 = STRING: XXXXSw
SNMPv2-MIB::sysLocation.0 = STRING:
SNMPv2-MIB::sysServices.0 = INTEGER: 6
....

cisco config:

(config)#snmp-server group authgroup v3 priv read example
(config)#snmp-server user authuser authgroup v3 auth md5 md5v3v3v3 priv des des56v3v3v3
(config)#snmp-server view example iso included

I have run tcpdump on the zabbix-proxy and I don't see any requests to the switch when I use SNMPv3.

Zabbix version - 6.0.4

Why can't I see the latest data ?

[cyber]

Have you restarted that proxy? Or at least reloaded snmp cache?

[swb-ops]

Yes, I restarted proxy, but it didn't help.

[Hamardaban]

For the test: try specifying the IP address (not the DNS name) in the interface settings.

[swb-ops]

I have configured the specific IP address in the interface, but this has not changed the situation, I can't see the latest data.

[cyber]

What's the History storage settings? There have been many cases, when people do not keep history, but expect to see graphs..

[swb-ops]

History - 90d

I removed all interfaces except SNMPv3 and now it works.

Thank you.

[TH001]

I know this is an old post, I've just stared my venture into Zabbix. I currently monitor a lot of cisco devices in Solarwind using SNMP v3 with no issues. However I have the same issue as you mentioned, for some reason I can't get v3 to work on Zabbix for the Cisco devices

Could you please clarify what you mean by you removed all interfaces except SNMP v3 ?

[DalekSec]

FIrst time poster,

I'm having the same issue. MikroTik (cisco based) i've double, triple, quadtriple? checked all the SNMP settings. Tested they work via SNMP testers plus they work in our older NETXMS system.

But when i add it into Zabbix with same settings coming back saying

cannot retrieve OID: '.1.3.6.1.2.1.2.2.1.3' from [[IPHERE]:161]: timed out

Driving me mad, all our other switches have been added (FS switches), but this is our core switch which i want to monitor most!

[wiegleyj]

Welcome to the club. I have over 50 HP BL460c Gen9 servers that I want to monitor their iLO ports on using SNMPV3. Some of them work. Some of them fail with timeouts.

I can snmpwalk ALL of them from the zabbix server host command line without any problems. It's not a network connectivity issue.
ALL of them have been configured *exactly* the same. They were all factory reset and then they were all configured using automatic hplocfg/RIB scripting. It's not a configuration inconsistency.
They all have their time synchronized with an NTP server. It's not some weird SNMP V3 time synchronization problem.
I created all the zabbix hosts through API. They're all created identically. It's not a zabbix host creation inconsistency.

Zabbix is horrible at debugging the SNMP interaction with a host. I've debugged at level 4 and grepped for the offending host and there's nothing other than "interface failed".

I can't figure out zabbix/SNMPv3 for the life of me. At this point I'm going to give up and reconfigure them all as SNMPv2 tomorrow because that works on all of them without a problem. ugh.

[cyber]

Trap receiver itself configured correctly for v3? EngineID-s/credentials? No duplicate EngineID-s?
https://net-snmp.sourceforge.io/wiki..._notifications was quite helpful for me to get it working.