Cisco 9300 and SNMP

[tetr]

Hi to all,

I have been using SNMP to configure our network switchs. Simple bash scripts with snmpset tool.

One feature we use it's "dot1x pae authenticator" on switch interfaces where we connect dot1x users. This works very well on Catalyst 2960 family but 9300 refuses to accept our commands/values and we have tried many formats but none of them works.

This is an example of what we get:

snmpset -c management -v 2c 10.10.10.21 cpaePortCapabilitiesEnabled.22 x 80
Error in packet.
Reason: wrongValue (The set value is illegal or unsupported in some way)
Failed object: CISCO-PAE-MIB::cpaePortCapabilitiesEnabled.22

snmpset -c management -v 2c 10.10.10.21 cpaePortCapabilitiesEnabled.22 b -1
Error in packet.
Reason: wrongValue (The set value is illegal or unsupported in some way)
Failed object: CISCO-PAE-MIB::cpaePortCapabilitiesEnabled.22

These replies are from 9300 switch cause we have tried them with tcpdump to be sure!

Any help would be very appreciated.

Regards,

Pedro.

[marce1000]

 - Check current software version  being used on your device. Compare to more recent release(s) if available , applicable and or feasible. 

 M.

[Cristian Matei · Accepted solution]

Hi,

    Based on the output, it looks like the MIB is not supported by CAT9300. It also looks to be confirmed by:

ftp://ftp.cisco.com/pub/mibs/supportlists/cat9300/CAT9300.html

Regards,

Cristian Matei.

[tetr]

Hi Cristian,

Many thanks for your reply. In fact I didn't search any answer in Cisco docs because when I search for cpaePortCapabilitiesEnabled (cpaePortEntry.10) support in IOS I get:

sh snmp mib | inc cpaePortEntry.10
cpaePortEntry.10

and also mib state it's current!

https://snmp.cloudapps.cisco.com/Support/SNMP/do/BrowseOID.do?objectInput=cpaePortEntry.10&translate=Translate&submitValue=SUBMIT

Also when I run snmpget I have valid replies from 9300 switch, it only fails in write operations... but you are right, it does not appears on supported MIBS... I guess I will have to avoid this switch family!

Best regards.

[Cristian Matei]

Hi,

   Open a TAC case to confirm that and maybe find a possible roadmap, so you know your future steps. At the same time, given the current state of the networking domain, with SD being everywhere, i suppose the SNMP write capability will not gain that much attention anymore, it's kinda of too legacy now to do it.

Regards,

Cristian Matei.