2960CX switches not working with SNMPv3 privacy

[davew42]

Trying to configure 2960CX switches to work with SNMPv3 privacy to talk to Solarwinds but it just wont work.

Auth alone works fine. 2960X switches work fine with privacy with either AES128 or 256 but the small CX switches just wont have it.

Anybody else had similar issue? The documentation says up to AES256 should be supported on them.

Running 15.2(7)E9. 

[RoadRunner4k]

Try this should work 

snmp-server group "SNMPGRP" v3 priv
snmp-server user "SNMPUSER" "SNMPGRP" v3 auth sha "PW" priv aes 128 "PW"

[davew42]

Thanks both. I had the above configured already but I got it working yesterday but it needed a SNMP view configuring and to permit read access to the view for the snmp user. The view I used was for the full MIB, by setting the view to use OID 1.3.6.1 (which equates to "internet" when you read the config afterwards (?) ). 

snmp-server view <viewname> 1.3.6.1 included
snmp-server group <groupname> v3 priv read <viewname>

It seems that it didn't have any permission by default to actually read any of the MIB tree. The 1.3.6.1 can be substituted with a longer OID if you only want to permit access to a part of the MIB tree for a particular snmp view.