Cisco ISE SNMPv3 Engine ID

[ashz14387]

Hi @All 

I am trying to monitor Cisco ISE device in a NMS, while SNMPv3 configuration of the ISE device i asked to specify the host(NMS) Engine ID. Does Cisco ISE device does not supports automatically discover the SNMP manager engine ID during the initial communication handshake?

I need to ask my NSM to provide their Engine ID in order to send traps?

Thanks in Advance.

[balaji.bandi]

check this thread can help you :

https://community.cisco.com/t5/network-access-control/remote-engine-id-of-ise/td-p/4609681

[ashz14387]

Hi @balaji.bandi 

Thanks for the reply,

The thread you have provided is for "How to find the remote engine ID of ISE".

My question while configuring do we need to provide the host (i.e NMS Engine ID) Engine ID or we can continue without configureing Engine ID while configuring snmpv3 in ISE.

[MHM Cisco World]

Configuring Cisco ISE for SNMPv3 - Network Wizkid

check this 

MHM

[balaji.bandi]

Apologies for the confusion

If NMS required Engine ID  then you need to add Engine ID, some NMS need Engine ID for that to work :

example :

snmp-server enable
snmp-server engineID XXXXXXXXXX
snmp-server user MYUSER_v3_RO v3 hash xxxxxxxxxxxxxxxxxxxxxx

[Georg Pauwen]

Hello,

the engine-id apparently is required for SNMPv3:

--> The SNMP engine ID of the remote agent is required to compute the authentication or privacy digests for the SNMP password. If the remote engine ID is not configured first, the configuration command will fail.

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/xe-3se/3850/snmp-xe-3se-3850-book/nm-snmp-snmpv3.html#GUID-1CC99199-5205-4099-BE12-06B9A9C202E2