Problem in SNMP V2 Config on 1841 & 1760 Routers

[ranjit123]

Dear All,

IN  SNMPv2 config we are facing issues that when the router is reloaded the SNMP user & group commant is not there in the running config but its there in the start-up config

Because of the ACL missing in the start-up config we care not able to poll the devices

If we use sh snmp communiites it shows xxxxxxx3 but without ACL due to which we have to reconfigure the snmp.

This issue we are facing on random routers cisco 1841 and 1760.

Below is the config

=================================================================

snmp-server group ABC  v2c read SNTREE access 9
snmp-server view SNTREE internet included
snmp-server community xxxxxxx1 RO 9
snmp-server community xxxxxxx2 RW 9
snmp-server user xxxxxxx3 ABC  v2c access 9
snmp-server ifindex persist
snmp-server trap-source Loopback0
snmp-server enable traps config
snmp-server host 172.17.10.70 xxxxxxx2
snmp-server host 172.17.68.82 xxxxxxx1
snmp-server host 172.17.68.95 xxxxxxx1
snmp-server host 172.17.10.70 xxxxxxx1
snmp-server host 172.17.14.138 xxxxxxx1
snmp-server host 10.0.19.109 version 2c xxxxxxx3
snmp-server host 10.0.19.108 version 2c xxxxxxx3
snmp-server host 10.0.19.110 version 2c xxxxxxx3
access-list 9 permit 172.17.14.138
access-list 9 permit 10.0.12.92
access-list 9 permit 10.0.19.109
access-list 9 permit 10.0.19.108
access-list 9 permit 10.0.19.110
access-list 9 permit 172.17.68.82
access-list 9 permit 172.17.68.95
access-list 9 permit 172.17.10.70

=============================================================

Kindly update.

Regards,

Ranjit

[Michel Hegeraat]

Normally if a command is in the starup but not in the running this is because it is a default setting.

If this is not the case you need an IOS with a fix. You can open a TAC case to get this if that is the problem.

I believe that the snmp user and snmp group were only used for snmp v3.

You can do all you need to using just the community and the view and associate the community with the view like this

snmp-server community public1 view test RO 9 SNTREE

Can you check using a "sh run | i snmp-" and a "sh start | i snmp-" that the commands are really gone?

Cheers,

Michel