topic Re: SNMP request failure in Network Access Control

SNMP request failure

Amar_Tufo — Tue, 10 Jan 2023 21:59:00 GMT

Good day to you all,

we have a very strange situation, currently using two ise nodes (ver 3.0 patch nr 6), one set as primary the other one as secondary. We migrated a lot of NADs to snmp v3 and also updated the NADs configuration inside ISE with the appropriate snmp username and password, but still we are getting the SNMP request failure as request timed out but only from the other ISE node wich is set as secondary, not a single one from the primary server. Couldnt find any similar problem here in the community, hopefully someone could give a hint where to start.

Thanks.

Re: SNMP request failure

Arne Bier — Tue, 10 Jan 2023 23:55:41 GMT

Hello,

is the "Secondary" ISE node reporting SNMP timeout? Are you using SNMP to probe the NAD devices for endpoint data?

Have you checked things like ACLs on the NAD to ensure that you're allowing both ISE nodes' IP addresses to perform SNMP probing?

Not enough technical details here to go on

Re: SNMP request failure

ahollifield — Wed, 11 Jan 2023 15:01:23 GMT

What is your use-case for even needing SNMP at all?

Re: SNMP request failure

Amar_Tufo — Thu, 12 Jan 2023 21:46:46 GMT

Hello,

sorry for late reply, no acl could prevent communication with both ise nodes. yes for endpoint data

Re: SNMP request failure

Amar_Tufo — Thu, 12 Jan 2023 21:47:47 GMT

yes for endpoint data, but what is for me unclear that only the second node sends those alarms, and the second node is configured as backup/secondary not primary.