topic Re: waas snmpv3 problems in Application Networking

waas snmpv3 problems

draganskundric — Mon, 21 Feb 2011 14:47:10 GMT

I cannot get ciscoWorks works with waas devices using SNMPv3. Does anyone have any hint about this?

thanks

Re: waas snmpv3 problems

Nicolas Fournier — Wed, 02 Mar 2011 15:25:08 GMT

Hi Dragan,

With which part of Cisco Works are you trying to access the WAE? RME?

Are you able to snmpwalk the WAE from your LMS host?

If so, if you can share your SNMP config, maybe we could see if there is anything wrong with it.

Regards,

Nicolas

Re: waas snmpv3 problems

draganskundric — Fri, 04 Mar 2011 13:57:34 GMT

I am trying to use RME, here is the config

snmp-server enable traps config

snmp-server enable traps alarm raise-critical

snmp-server enable traps alarm clear-critical

snmp-server enable traps alarm raise-major

snmp-server enable traps alarm clear-major

snmp-server enable traps alarm raise-minor

snmp-server enable traps alarm clear-minor

snmp-server enable traps entity

snmp-server enable traps snmp authentication

snmp-server enable traps snmp cold-start

snmp-server enable traps snmp linkup

snmp-server enable traps snmp linkdown

snmp-server enable traps event

snmp-server host 5.5.5.5 cworks v3 priv

snmp-server user cworks cw remote abc1234567 auth md5 **** priv ****

snmp-server group cw v3 priv

-)) mybe you could send me an working config if you have it

Re: waas snmpv3 problems

Nicolas Fournier — Tue, 08 Mar 2011 15:54:42 GMT

Hi Dragan,

Don't you have any community configured on your RME setup?

Maybe you could check the RME logs to see if it tells you why the import of the WAE fails?

Regards,

Nicolas

Re: waas snmpv3 problems

draganskundric — Fri, 11 Mar 2011 07:07:02 GMT

I have. Can we please concentrate on waas snmpv3 config? Do you think this is ok or not?

Re: waas snmpv3 problems

Nicolas Fournier — Mon, 14 Mar 2011 14:00:22 GMT

Hi Dragan,

I tested this in our lab and managed to get it working.

Here is what I had in the end:

Config
cdn-wave-574-1#sh run snmp snmp-server user test test auth md5 ** priv ** snmp-server group test v3 priv read SNMPv3 write SNMPv3 notify SNMPv3 snmp-server view SNMPv3 internet included snmp-server view SNMPv3 system included snmp-server view SNMPv3 cisco included ! cdn-wave-574-1#

Once I set this up, I was able to snmpwalk to my WAE:

Snmpwalk results
nfournie@nfournie-laptop:~$ snmpwalk -v 3 -u test -l authPriv -a MD5 -A cisco12345 -x DES -X cisco12345 cdn-wave-574-1 system SNMPv2-MIB::sysDescr.0 = STRING: Cisco Wide Area Application Services Software Hardware Version: oe574-4.3.1.6 Cisco Wide Area Application Services (universal-k9) Software Release 4.3.1 (build b6 Nov 13 2010) SNMPv2-MIB::sysObjectID.0 = OID: SNMPv2-SMI::enterprises.9.1.985 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (25694500) 2 days, 23:22:25.00 SNMPv2-MIB::sysContact.0 = STRING: SNMPv2-MIB::sysName.0 = STRING: cdn-wave-574-1.cisco.com SNMPv2-MIB::sysLocation.0 = STRING: SNMPv2-MIB::sysServices.0 = INTEGER: 72 nfournie@nfournie-laptop:~$

Snmpwalk results

nfournie@nfournie-laptop:~$ snmpwalk -v 3 -u test -l authPriv -a MD5 -A cisco12345 -x DES -X cisco12345 cdn-wave-574-1 system
SNMPv2-MIB::sysDescr.0 = STRING: Cisco Wide Area Application Services Software Hardware Version: oe574-4.3.1.6
Cisco Wide Area Application Services (universal-k9) Software Release 4.3.1 (build b6 Nov 13 2010)

SNMPv2-MIB::sysObjectID.0 = OID: SNMPv2-SMI::enterprises.9.1.985
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (25694500) 2 days, 23:22:25.00
SNMPv2-MIB::sysContact.0 = STRING:
SNMPv2-MIB::sysName.0 = STRING: cdn-wave-574-1.cisco.com
SNMPv2-MIB::sysLocation.0 = STRING:
SNMPv2-MIB::sysServices.0 = INTEGER: 72
nfournie@nfournie-laptop:~$

Comparing my config to yours, I see that the view is missing in yours. As I believe that if no view is defined, access will be denied by default, could you create a view that would allow access to your user group and see if it helps?

Regards,

Nicolas

Re: waas snmpv3 problems

draganskundric — Wed, 30 Mar 2011 05:17:52 GMT

that's it. thanks