We recently changed the SNMP String to our network devices... and now on our 6509 switches the following error messages are populating the logs.
Apr 2 14:05:49.594 CDT: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 184.108.40.206
Apr 2 14:06:52.775 CDT: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 220.127.116.11
Apr 2 14:14:13.037 CDT: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 18.104.22.168
DCR was successfully updated with the new strings and Check Device credential jobs complete successfully without error.
There appears to be apart of LMS holding on to and using the old string for the 6509's. Attached is a packet capture of LMS using the old string on a 6509. Can you please assist in the isolation/correcting this issue. Thanks in advance.
Windows Server 2003 SP2
CiscoWorks Common Services 3.0.6
Campus Manager 4.0.6
Device Fault Manager 2.0.6
Resource Manager Essentials 4.0.6
Solved! Go to Solution.
The issue definitely appears to be related to DFM.... I stopped the DFM process and the authfail errors cleared. Looking at DFM I was unable to locate a configuration setting that housed the old SNMP string. Where does DFM obtain the SNMP string that it uses for polling? Thanks in advance
The daemon has been stopped and restarted a couple of times and the error authfail messages reappear in the logs once teh daemon restarts. The only workaround I have found so far is stopping the DFM server process. Is there a way to clear DFM database file completely? Thanks