snmpv3 error on 3750s

[markschnabel]

we apply the following commands on 2 different 3750s running 12.2.46 and received the following error:

%PARSE_RC-4-PRC_NON_COMPLIANCE: `snmp-server user xxxx xxx v3 auth md5 xxx priv des xxx access 9

-Traceback= DA7DA8 DA84F4 D30DE0 D3242C D32784 D5F73C 1813A88 1805B08 9BBFD4 9B2BCC

message decoder states it is a internal software error. Is this normal or should a tac case be opened

thanks in advance

[Joe Clarke]

Post the show ver from this 3750.

[Lucien Avramov · Accepted solution]

Can you post a show version?

There is a defect (on 12.2.46) :

CSCsh85522 SNMP-Sever user CLI throwing trace back messages

Are you able to poll SNMP with no problem from your NMS server?

[markschnabel]

yes, we are able to poll without issue.I did a test poll from CW

Cisco IOS Software, C3750 Software (C3750-IPSERVICESK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)

Copyright (c) 1986-2008 by Cisco Systems, Inc.

Compiled Thu 21-Aug-08 15:43 by nachen

Image text-base: 0x00003000, data-base: 0x01880000

ROM: Bootstrap program is C3750 boot loader

BOOTLDR: C3750 Boot Loader (C3750-HBOOT-M) Version 12.2(25r)SEC, RELEASE SOFTWARE (fc4)

GOX007CAS uptime is 16 weeks, 23 hours, 16 minutes

System returned to ROM by power-on

System restarted at 15:43:23 EDT Tue Jun 23 2009

System image file is "flash:c3750-ipservicesk9-mz.122-46.SE/c3750-ipservicesk9-mz.122-46.SE.bin"

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

export@cisco.com.

cisco WS-C3750-48P (PowerPC405) processor (revision K0) with 118784K/12280K bytes of memory.

Processor board ID FDO1145X0W2

Last reset from power-on

2 Virtual Ethernet interfaces

144 FastEthernet interfaces

12 Gigabit Ethernet interfaces

The password-recovery mechanism is enabled.

512K bytes of flash-simulated non-volatile configuration memory.

Base ethernet MAC Address : 00:1E:4A:BD:36:80

Motherboard assembly number : 73-9675-11

Power supply part number : 341-0029-05

Motherboard serial number : FDO1145012A

Power supply serial number : LIT114005HC

Model revision number : K0

Motherboard revision number : B0

Model number : WS-C3750-48PS-S

System serial number : FDO1145X0W2

SFP Module assembly part number : 73-7757-03

SFP Module revision Number : A0

SFP Module serial number : FDO114109MZ

Top Assembly Part Number : 800-25858-03

Top Assembly Revision Number : J0

Version ID : V05

CLEI Code Number : COM1W00ARB

Hardware Board Revision Number : 0x01

Switch Ports Model SW Version SW Image

------ ----- ----- ---------- ----------

1 52 WS-C3750-48P 12.2(46)SE C3750-IPSERVICESK9-M

* 2 52 WS-C3750-48P 12.2(46)SE C3750-IPSERVICESK9-M

3 52 WS-C3750-48P 12.2(46)SE C3750-IPSERVICESK9-M

Switch 01

---------

Switch Uptime : 16 weeks, 23 hours, 6 minutes

Base ethernet MAC Address : 00:1E:13:B7:CB:80

Motherboard assembly number : 73-9675-11

Power supply part number : 341-0029-05

Motherboard serial number : FDO1144077H

Power supply serial number : LIT114003WM

Model revision number : K0

Motherboard revision number : B0

Model number : WS-C3750-48PS-S

System serial number : FDO1145X02L

SFP Module assembly part number : 73-7757-03

SFP Module revision number : A0

SFP Module serial number : FDO1143046X

Top assembly part number : 800-25858-03

Top assembly revision number : J0

Version ID : V05

CLEI Code Number : COM1W00ARB

Configuration register is 0xF

[Joe Clarke]

As Lucien pointed out, this is CSCsh85522:

Symptom:

A "%PARSE_RC-4-PRC_NON_COMPLIANCE" error message and traceback may be

generated while executing snmp-server user testuser

testgroup v3 auth md5 authpass priv des privpass

Conditions:

This symptom is observed when the encryption type used is 'des'. This is

because of the ambiguity between des and des56, which is a hidden command.

Workaround:

This happens only when the command is given for the first time.

However, note that the error message and traceback do not have an impact on

the functionality of the platform. The messages are just warning messages

from the Cisco IOS process scheduler, indicating that the process is not able

to process all the events before the process suspends.

[markschnabel]

yes..thank you!