SNMPv3 Zabbix templates NOT working with Cisco 2960L switches

[sentinel_watcher]

Running Zabbix 6.0 on Raspberry Pi 400 to monitor a small Cisco 2960L network, but failing to gain SNMPV3 info from Cisco 2960L switches.

Device are host-pingable from Pi-400 within Zabbix. and show up with a green ring around the host icon on network map.
The PI_400 can do an V3-SNMP_walk and V3-SNMP-get of V3 objects from the Cisco 2960L device from terminal mode of Raspbian., with no issues, so the authentication and privacy ID's/ passwords are correct.

The Zabbix 6.0 SNMPD.conf has the unique Engine--ID's configured as SNMP users for each monitored 2960L

The Zabbix host config is correct for each host device with SNMpv3 properties and the associated ID/PWD's that work when doing CMD line GET/Walk.

However none of the host SNMPv3 data pulled is successful...blank, apart from ICMP info.

Guidance welcome, as looked at all Zabbix blogs, troubleshooting URL's and can find nothing to make SNMP_v3 work from Zabbix end.

[sentinel_watcher]

I have turned on level_4 debug on the Zabbix server and then "grep"ed for any log message pertainent to two IP host devices ( .16 and .44) that I am trying to monitor. Note : This works fine by using SNMPWalk or SNMPGet from command line...with info instantly returned of sysnmae of s/w version etc from both devices.

The Zabbix 6.0 app has no such luck, just ICMP ping success and a SNMPv3 Tiineout.....


1684:20230821:093849.624 In get_values_snmp() host:'WestDevice_2960L' addr:'X.Y.110.16' num:1
1684:20230821:093849.775 SNMPv3 [[email protected]:161]
1684:20230821:093853.782 getting SNMP values failed: Timeout while connecting to "X.Y.110.16:161".
1690:20230821:093925.228 In add_icmpping_item() addr:'X.Y.110.16' count:3 interval:0 size:0 timeout:0
1690:20230821:093925.228 In add_icmpping_item() addr:'X.Y.110.16' count:3 interval:0 size:0 timeout:0
1690:20230821:093925.228 In add_icmpping_item() addr:'X.Y.110.16' count:3 interval:0 size:0 timeout:0
1690:20230821:093925.228 In add_pinger_host() addr:'X.Y.110.16'
1690:20230821:093925.229 In add_pinger_host() addr:'X.Y.110.16'
1690:20230821:093925.229 In add_pinger_host() addr:'X.Y.110.16'
1690:20230821:093925.229 X.Y.110.16
1690:20230821:093925.249 read line [X.Y.110.16 : [0], 84 bytes, 1.02 ms (1.02 avg, 0% loss)]
1690:20230821:093926.251 read line [X.Y.110.16 : [1], 84 bytes, 1.66 ms (1.34 avg, 0% loss)]
1690:20230821:093927.252 read line [X.Y.110.16 : [2], 84 bytes, 2.15 ms (1.61 avg, 0% loss)]
1690:20230821:093927.253 read line [X.Y.110.16 : 1.02 1.66 2.15]
1690:20230821:093927.254 host [X.Y.110.16] cnt=3 rcv=3 min=0.001020 max=0.002150 sum=0.004830

Similar timeout for 2^nd 2960L

1684:20230821:094432.130 SNMPv3 [[email protected]:161]
1684:20230821:094436.138 getting SNMP values failed: Timeout while connecting to "X.Y.110.44:161".
1690:20230821:094521.824 In add_icmpping_item() addr:'X.Y.110.44' count:3 interval:0 size:0 timeout:0
1690:20230821:094521.824 In add_icmpping_item() addr:'X.Y.110.44' count:3 interval:0 size:0 timeout:0
1690:20230821:094521.824 In add_icmpping_item() addr:'X.Y.110.44' count:3 interval:0 size:0 timeout:0
1690:20230821:094521.825 In add_pinger_host() addr:'X.Y.110.44'
1690:20230821:094521.825 In add_pinger_host() addr:'X.Y.110.44'
1690:20230821:094521.825 In add_pinger_host() addr:'X.Y.110.44'
1690:20230821:094521.826 X.Y.110.44
1690:20230821:094521.848 read line [X.Y.110.44 : [0], 84 bytes, 0.81 ms (0.81 avg, 0% loss)]
1690:20230821:094522.850 read line [X.Y.110.44 : [1], 84 bytes, 1.69 ms (1.25 avg, 0% loss)]
1690:20230821:094523.852 read line [X.Y.110.44 : [2], 84 bytes, 2.15 ms (1.55 avg, 0% loss)]
1690:20230821:094523.852 read line [X.Y.110.44 : 0.81 1.69 2.15]
1690:20230821:094523.854 host [X.Y.110.44] cnt=3 rcv=3 min=0.000810 max=0.002150 sum=0.004650


Is there some-other debug or message that could help shed some light on why SNMPv3 fails ?

[markfree]

Try changing the SNMPv3 authentication and privacy protocols. Double check your context and security names. The context name is also blank for some devices.

[sentinel_watcher]

Thanks for thoughts, have tripled checked teh Authentication & Privacy algorithms and values multiple times.....all match exactly for hosts and Zabbix server. Interestingly your suggestion of blanking/deleting the Context name works and one of the hosts, suddenly went GREEN for SNMP info and values could be seen. I therefore repeated for other hosts but they stayed gray, even a "Clone" of working host did not return any further info. SO I have one working 2960L but Zabbix does not seem to sending SNMP requests to any of the other devices now. I used Cisco debug SNMP packet and requests on switches to see if anything was being sent by Zabbix. sadly debug stayed quiet until I manually used CLI SNMPget to same network device ( .16) ...see debug output.

[cyber]

If you change snmp credentials, reload snmp cache also.

[sentinel_watcher]

Thanks for suggestion, tried the reload cache option with
CMD : zabbix_server -R config_cache_reload

but made no difference, also restarted SNMP Daemon and Zabbix Server processes.

I have gone to the Git Hub community to import some different Zabbix Cisco Generic Templates/YAML files and one of these seems to be working for multiple 2960 devices....touch wood..will update once altered a few more host templates to different one., that what was in 6.0 base build.