waas snmpv3 problems

[draganskundric]

I cannot get ciscoWorks works with waas devices using SNMPv3. Does anyone have any hint about this?

thanks

[Nicolas Fournier]

Hi Dragan,

With which part of Cisco Works are you trying to access the WAE? RME?

Are you able to snmpwalk the WAE from your LMS host?

If so, if you can share your SNMP config, maybe we could see if there is anything wrong with it.

Regards,

Nicolas

[draganskundric]

I am trying to use RME, here is the config

snmp-server enable traps config

snmp-server enable traps alarm raise-critical

snmp-server enable traps alarm clear-critical

snmp-server enable traps alarm raise-major

snmp-server enable traps alarm clear-major

snmp-server enable traps alarm raise-minor

snmp-server enable traps alarm clear-minor

snmp-server enable traps entity

snmp-server enable traps snmp authentication

snmp-server enable traps snmp cold-start

snmp-server enable traps snmp linkup

snmp-server enable traps snmp linkdown

snmp-server enable traps event

snmp-server host 5.5.5.5 cworks v3  priv

snmp-server user cworks cw remote abc1234567 auth md5 **** priv ****

snmp-server group cw v3 priv

-)) mybe you could send me an working config if you have it

[Nicolas Fournier]

Hi Dragan,

Don't you have any community configured on your RME setup?

Maybe you could check the RME logs to see if it tells you why the import of the WAE fails?

Regards,

Nicolas

[draganskundric]

I have. Can we please concentrate on waas snmpv3 config? Do you think this is ok or not?

[Nicolas Fournier · Accepted solution]

Hi Dragan,

I tested this in our lab and managed to get it working.

Here is what I had in the end:

Config
cdn-wave-574-1#sh run snmp snmp-server user test test auth md5 **** priv **** snmp-server group test v3 priv read SNMPv3 write SNMPv3 notify SNMPv3 snmp-server view SNMPv3 internet included snmp-server view SNMPv3 system included snmp-server view SNMPv3 cisco included ! cdn-wave-574-1#

Once I set this up, I was able to snmpwalk to my WAE:

Snmpwalk results

nfournie@nfournie-laptop:~$ snmpwalk -v 3 -u test -l authPriv -a MD5 -A cisco12345 -x DES -X cisco12345 cdn-wave-574-1 system SNMPv2-MIB::sysDescr.0 = STRING: Cisco Wide Area Application Services Software Hardware Version: oe574-4.3.1.6 Cisco Wide Area Application Services (universal-k9) Software Release 4.3.1 (build b6 Nov 13 2010) SNMPv2-MIB::sysObjectID.0 = OID: SNMPv2-SMI::enterprises.9.1.985 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (25694500) 2 days, 23:22:25.00 SNMPv2-MIB::sysContact.0 = STRING: SNMPv2-MIB::sysName.0 = STRING: cdn-wave-574-1.cisco.com SNMPv2-MIB::sysLocation.0 = STRING: SNMPv2-MIB::sysServices.0 = INTEGER: 72 nfournie@nfournie-laptop:~$

Comparing my config to yours, I see that the view is missing in yours. As I believe that if no view is defined, access will be denied by default, could you create a view that would allow access to your user group and see if it helps?

Regards,

Nicolas

[draganskundric]

that's it. thanks