Ad Widget

Collapse

Cisco SNMPv3 Problem.

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • TzS2fg
    Junior Member
    • May 2023
    • 1

    #1

    Cisco SNMPv3 Problem.


    Hello,

    i am trying to add cisco isr 4331 to Zabbix, using SNMPv3, but cant seem to make it work... btw SNMPv2 works fine.

    for privacy reasons some settings will have "XXXXXX" in them.. i have double triple checked them and configured it as it is said in this post.

    Zabbix Version 6.0

    Cisco Config:

    snmp-server group ZABBIX v3 priv read ZABBIX
    snmp-server view ZABBIX iso included​
    snmp-server host X.X.X.X version 3 priv ZABBIX
    snmp-server user ZABBIX ZABBIX v3 auth sha XXXXXX priv aes 256 XXXXXX (XXXXX - is a password)

    User name: ZABBIX
    Engine ID: XXXXXXXXXXXXXXXXXXXXX
    storage-type: nonvolatile active
    Authentication Protocol: SHA
    Privacy Protocol: AES256
    Group-name: ZABBIX

    currently i am trying to use default zabbix template named "Cisco IOS SNMP"i havent messed with macros and stuff, I was just editing SNMPv3 Settings in hosts settings

    Zabbix Config:

    https://imgur.com/a/UJHUKsQ

    cant seem to upload file here so i will just drop a link.

    So this is a Configuration... here is a weird part.... when i run debugs on cisco this shows up " v3 packet security model: v3 security level: noauth" so cisco receives packet and sees security level noauth while i specifically specified in hosts settings authPriv... I am kinda new in zabbix so if you can point me in right direction could be helpful

    Thanks in advance.

  • benoonjamingo
    Junior Member
    • Jul 2023
    • 2

    #2
    I've ran into the same issue with multiple cisco devices unable to communicate properly with zabbix over snmpv3.

    I've troubleshot the same as you and have around 40 working switches and 10 not working without reason.

    Debug doesn't show much useful info.

    I'm confident my configurations work as the switches that are having issues seem to flip flop sometimes without reason, and I have the exact same configurations across many working switches.

    I'm using the same auth but using AES128
    When I use no auth no priv it works fine, but I don't want to do that.

    Would be great if someone has a solution. I will update if I find one.
    I have a feeling the issue is on the Zabbix end.

    Comment

    Working...