Home / server / Questions

Questions[snmpv3](server)

Martin Hope
divB
Asked: 2021-03-05 12:40:46 +0800 CST
  • 1

I have an APC Rack PDU (AP7920) and have configured:

  • [x] Enable SNMPv3 access
  • Username: switch
  • Authentication Passphrase: test
  • Privacy Passphrase: test
  • Authentication Protocol: (o) MD5
  • Privacy Protocol: (o) DES
  • Access Control: [x] Enable, Username: switch, NMS IP/Host Name: 0.0.0.0

Now when I execute snmpwalk I get:

# snmpwalk -v3 -a MD5 -A test -u switch -x DES -X test 192.168.1.1
snmpwalk: Decryption error

What am I doing wrong?

My goal is to switch outlets via SNMP

snmp power-distribution-unit apc snmpv3
Martin Hope
Joao Vitorino
Asked: 2017-01-05 11:33:20 +0800 CST
  • 1

If I run snmpwalk on the same machine of zabbix server I can collect data with SNMPv3

snmpwalk -v3 -u Usnmp -l AuthNoPriv -a MD5 -A 'AuthPass' 10.x.x.x .1.3.6.1.2.1.1.3.0
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (61650508) 7 days, 3:15:05.08

But in Zabbix Server I can't.

Zabbix do not give me data, queue always empty for SNMPv3 agent, error message in front end no even error message in the log.

My zabbix config:

Type: SNMPv3 agent
Key: SysUptime
Host interface: 10.x.x.x:161
SNMP OID: .1.3.6.1.2.1.1.3.0
Security name: {$SNMP_SECNAME}
Security level: authNoPriv
Authentication protocol: MD5
Authentication passphrase: {$SNMP_AUTH}

Detail of "no error message in the front end" NO_Error_Message

Zabbix do not collect data. No data received

zabbix net-snmp system-monitoring snmpv3
Martin Hope
vishwarath singh
Asked: 2016-10-19 22:29:30 +0800 CST
  • 1

I googled for it but can't find anything helpful. I am using snm4j and snmp4j-agent libararies.

//here is my sample oid

final OID oid1 = new OID(".1.3.6.1.2.1.6666.2.2.2.1");

//while quering through net-snmp client i got the following result:

SNMPv2-SMI::mib-2.6666.2.2.2.1.1.1 = INTEGER: 2
SNMPv2-SMI::mib-2.6666.2.2.2.1.1.2 = INTEGER: 5
SNMPv2-SMI::mib-2.6666.2.2.2.1.1.3 = INTEGER: 1
SNMPv2-SMI::mib-2.6666.2.2.2.1.1.4 = INTEGER: 6
SNMPv2-SMI::mib-2.6666.2.2.2.1.1.5 = INTEGER: 7
SNMPv2-SMI::mib-2.6666.2.2.2.1.1.6 = INTEGER: 3
SNMPv2-SMI::mib-2.6666.2.2.2.1.1.7 = INTEGER: 4
SNMPv2-SMI::mib-2.6666.2.2.2.1.2.1 = INTEGER: 2
SNMPv2-SMI::mib-2.6666.2.2.2.1.2.2 = INTEGER: 1
SNMPv2-SMI::mib-2.6666.2.2.2.1.2.3 = INTEGER: 5
SNMPv2-SMI::mib-2.6666.2.2.2.1.2.4 = INTEGER: 5
SNMPv2-SMI::mib-2.6666.2.2.2.1.2.5 = INTEGER: 4
SNMPv2-SMI::mib-2.6666.2.2.2.1.2.6 = INTEGER: 3
SNMPv2-SMI::mib-2.6666.2.2.2.1.2.7 = INTEGER: 1
SNMPv2-SMI::mib-2.6666.2.2.2.1.3.1 = INTEGER: 7
SNMPv2-SMI::mib-2.6666.2.2.2.1.3.2 = INTEGER: 24
SNMPv2-SMI::mib-2.6666.2.2.2.1.3.3 = INTEGER: 17
SNMPv2-SMI::mib-2.6666.2.2.2.1.3.4 = INTEGER: 18
SNMPv2-SMI::mib-2.6666.2.2.2.1.3.5 = INTEGER: 23
SNMPv2-SMI::mib-2.6666.2.2.2.1.3.6 = INTEGER: 7
SNMPv2-SMI::mib-2.6666.2.2.2.1.3.7 = INTEGER: 7
SNMPv2-SMI::mib-2.6666.2.2.2.1.4.1 = INTEGER: 2
SNMPv2-SMI::mib-2.6666.2.2.2.1.4.2 = INTEGER: 2
SNMPv2-SMI::mib-2.6666.2.2.2.1.4.3 = INTEGER: 2
SNMPv2-SMI::mib-2.6666.2.2.2.1.4.4 = INTEGER: 2
SNMPv2-SMI::mib-2.6666.2.2.2.1.4.5 = INTEGER: 2
SNMPv2-SMI::mib-2.6666.2.2.2.1.4.6 = INTEGER: 2
SNMPv2-SMI::mib-2.6666.2.2.2.1.4.7 = INTEGER: 2
SNMPv2-SMI::mib-2.6666.2.2.2.1.5.1 = STRING: "Line Card"
SNMPv2-SMI::mib-2.6666.2.2.2.1.5.2 = STRING: "E1/E2/E3 Int Card"
SNMPv2-SMI::mib-2.6666.2.2.2.1.5.3 = STRING: "STM1 Interface Card"
SNMPv2-SMI::mib-2.6666.2.2.2.1.5.4 = STRING: "STM1 Interface Card"
SNMPv2-SMI::mib-2.6666.2.2.2.1.5.5 = STRING: "HS-CPU"
SNMPv2-SMI::mib-2.6666.2.2.2.1.5.6 = STRING: "Control Card"
SNMPv2-SMI::mib-2.6666.2.2.2.1.5.7 = STRING: "E1/E2/E3 Int Card"
SNMPv2-SMI::mib-2.6666.2.2.2.1.6.1 = STRING: "10:22:02:04:05:99"
SNMPv2-SMI::mib-2.6666.2.2.2.1.6.2 = STRING: "10:23:02:24:05:91"
SNMPv2-SMI::mib-2.6666.2.2.2.1.6.3 = STRING: "10:22:92:04:05:99"
SNMPv2-SMI::mib-2.6666.2.2.2.1.6.4 = STRING: "10:23:12:94:05:08"
SNMPv2-SMI::mib-2.6666.2.2.2.1.6.5 = STRING: "10:23:02:94:05:01"
SNMPv2-SMI::mib-2.6666.2.2.2.1.6.6 = STRING: "10:22:02:14:05:99"
SNMPv2-SMI::mib-2.6666.2.2.2.1.6.7 = STRING: "10:22:02:24:05:99"
java snmp oid mib snmpv3
Martin Hope
user339597
Asked: 2016-06-17 03:20:41 +0800 CST
  • 2

I'm using snmptrapd on linux from net-snmp package. I'm trying to make some perl script to handle snmp traps. I'm already have such script and it works with snmp v1, v2c traps and with snmpv3 traps but only when I specify engineID explicitly both in config and in command sending trap. But when I configure cisco router to send me linkDown trap it uses MAC address with some extra bytes as engineID. And I can see trap arrives on interface in wireshark, but snmptrapd does nothing. Is it possible to configure snmptrapd to accept all traps by authenticated users without specifying engineID?

Here is my snmptrapd.conf

# Example configuration file for snmptrapd
#
# No traps are handled by default, you must edit this file!
#
createUser -e 0x0102030405 myuser MD5 mypassword DES myotherpassword
createUser -e 0x0102030405 myuser2 MD5 mypassword DES myotherpassword
createUser -e 0x0102030406 myuser2 MD5 mypassword DES myotherpassword
createUser cisco SHA cisco123 DES cisco123
authUser log,execute myuser
authUser log,execute myuser2
authUser log,execute cisco
authCommunity   log,execute public
perl do "/usr/local/share/snmp/snmptrapdhandler.pl";

I'm using Fedora 21 linux,

$ uname -a
Linux 4.1.13-100.fc21.x86_64 #1 SMP Tue Nov 10 13:13:20 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux

and net-snmp version is net-snmp-5.7.2-23.fc21.x86_64

linux snmp net-snmp snmpv3
Martin Hope
lavina
Asked: 2014-12-11 04:40:03 +0800 CST
  • 1

I am sending snmpv3 traps out using app 'snmptrap' and not able to see the traps on trap-receiver side (snmptrapd) only for snmpv3-user whose security level is noAuthNoPriv . Below mentioned are my test details.

Details:

system1: ip=172.16.1.214, sends snmpv3 trap to 'system2' using 'snmptrap

system2: ip=172.16.1.131, has 'snmptrapd' running and receives trap messages and logs it

System1: sending two SNMPv3 trap out

# snmptrap -v 3 -n "" -l noAuthNoPriv -u trapuser1 -e 0x0123456789010384 172.16.1.131 69 .1.3.6.1.4.1.8072.2.3.1 .1.3.6.1.4.1.8072.2.1.1 i 13

# snmptrap -v 3 -n "" -a SHA -A mypassword -l authNoPriv -u trapuser2 -e 0x0123456789010384 localhost 69 .1.3.6.1.4.1.8072.2.3.1 .1.3.6.1.4.1.8072.2.1.1 i 14

System2: Trap-receiver

~$cat /etc/snmp/snmptrapd.conf

createUser -e 0x0123456789010384 trapuser1
createUser -e 0x0123456789010384 trapuser2 SHA mypassword
authUser log trapuser1
authUser log trapuser2

~$snmptrapd -c /etc/snmp/snmptrapd.conf

NET-SNMP version 5.4.3 NET-SNMP version 5.4.3

usm: usm: USM processing begun...
USM processing begun...
usm: usm: match on user trapuser1 <---- (comment) trapuser1 has noauth no encrypt (/comment)
match on user trapuser1
usm: usm: USM processing completed.
USM processing completed. < --- (comment) received trap not got logged (/comment)

Question: why snmptrapd not able to log the received trap for snmpv3 user(trapuser1) which has noAuthNoPriv, though config file has 'authUser log trapuser1'?

usm: usm: USM processing begun...
USM processing begun...
usm: usm: match on user trapuser2 <---(comment)trapuser2 has only auth (/comment)
match on user trapuser2
usm: usm: Verification succeeded.
Verification succeeded.
usm: usm: USM processing completed.
USM processing completed.
2014-12-10 21:41:07 localhost [UDP: [127.0.0.1]:36661->[127.0.0.1]]: iso.3.6.1.2.1.1.3.0 = Timeticks: (69) 0:00:00.69 iso.3.6.1.6.3.1.1.4.1.0 = OID: iso.3.6.1.4.1.8072.2.3.1 iso.3.6.1.4.1.8072.2.1.1 = INTEGER: 14
2014-12-10 21:41:07 localhost [UDP: [127.0.0.1]:36661->[127.0.0.1]]: iso.3.6.1.2.1.1.3.0 = Timeticks: (69) 0:00:00.69 iso.3.6.1.6.3.1.1.4.1.0 = OID: iso.3.6.1.4.1.8072.2.3.1 iso.3.6.1.4.1.8072.2.1.1 = INTEGER: 14 <-- (comment) received trap got logged (/comment)

snmpv3