SNMPv3 snmpset not working for ccCopyTable

trond.skogland · ‎12-28-2017

Hi,

I'm in need for some good help here. I need to change transport input from ssh to telnet on a router, since I'm unable to run ssh to it. The router is only running SNMPv3 and I'm unable to use the procedure in this document: http://www.ciscozine.com/how-to-save-configurations-using-snmp/

The only host that I'm allowed to run snmp from is our prime infrastructer server on which I access the shell and I have snmp commands available. I'm able to do snmpget, snmpgetnext, snmpwalk, but when I try to do a snmpset I get some errors and the router will not accept the commands.

I'm running the following command: snmpset -v 3 -u <username> -a MD5 -A <password> -x DES -X <privacy pass phrase> -l authPriv <ip address to router> 1.3.6.1.4.1.9.9.96.1.1.1.1.2.<random number> i 1, but i get this errormessages:

Error in packet.

Reason: noAccess

Failed object: SNMPV2-SMI::enterprises.9.9.96.1.1.1.1.2.15 (my random number is 15)

I'm able to run snmpget, snmpgetnext and snmpwalk without problems. If I do some debugging I can see some errors regarding engine data. Like this:

usm: Failed to find engine data

When doing debugging on the router, i see the following:

Dec 28 15:45:21: SNMP: Packet received via UDP from x.x.x.x on Tunnel99
Dec 28 15:45:21:
Incoming SNMP packet
Dec 28 15:45:21: v3 packet security model: v3 security level: noauth
Dec 28 15:45:21: username:
Dec 28 15:45:21: snmpEngineID: 800000090300701F530F701A
Dec 28 15:45:21: snmpEngineBoots: 0 snmpEngineTime: 0
Dec 28 15:45:21: SNMP: Report, reqid 1014559499, errstat 0, erridx 0
internet.6.3.15.1.1.4.0 = 10111
Dec 28 15:45:21: SNMP: Packet sent via UDP to x.x.x.x
Dec 28 15:45:21: SNMP: Packet received via UDP from x.x.x.x on Tunnel99
Dec 28 15:45:21: SNMP: Set request, reqid 1014559498, errstat 0, erridx 0
ccCopyTable.1.2.15 = 1
Dec 28 15:45:21:
Incoming SNMP packet
Dec 28 15:45:21: v3 packet security model: v3 security level: priv
Dec 28 15:45:21: username: xxxxxxxxx
Dec 28 15:45:21: snmpEngineID: 800000090300701F530F701A
Dec 28 15:45:21: snmpEngineBoots: 4 snmpEngineTime: 93494
Dec 28 15:45:21: SNMP: Response, reqid 1014559498, errstat 6, erridx 1
ccCopyTable.1.2.15 = 1
Dec 28 15:45:21: SNMP: Packet sent via UDP to x.x.x.x

Anyone?

Best regads,

Trond

marek1712 · ‎06-08-2022

Hopefully it'll help someone. Make sure you're setting proper types for each OID (I wasn't and it was failing with the same error).

snmpset -v 3 -u USERNAME -l authPriv -a SHA -A AUTH_PASSWORD -x AES -X PRIV_PASSWORD DEVICE_IP_ADDRESS 1.3.6.1.4.1.9.9.96.1.1.1.1.2.XXX i 1
snmpset -v 3 -u USERNAME -l authPriv -a SHA -A AUTH_PASSWORD -x AES -X PRIV_PASSWORD DEVICE_IP_ADDRESS 1.3.6.1.4.1.9.9.96.1.1.1.1.3.XXX i 4
snmpset -v 3 -u USERNAME -l authPriv -a SHA -A AUTH_PASSWORD -x AES -X PRIV_PASSWORD DEVICE_IP_ADDRESS 1.3.6.1.4.1.9.9.96.1.1.1.1.4.XXX i 1
snmpset -v 3 -u USERNAME -l authPriv -a SHA -A AUTH_PASSWORD -x AES -X PRIV_PASSWORD DEVICE_IP_ADDRESS 1.3.6.1.4.1.9.9.96.1.1.1.1.5.XXX a TFTP_IP_ADDRESS
snmpset -v 3 -u USERNAME -l authPriv -a SHA -A AUTH_PASSWORD -x AES -X PRIV_PASSWORD DEVICE_IP_ADDRESS 1.3.6.1.4.1.9.9.96.1.1.1.1.6.XXX s config.txt
snmpset -v 3 -u USERNAME -l authPriv -a SHA -A AUTH_PASSWORD -x AES -X PRIV_PASSWORD DEVICE_IP_ADDRESS 1.3.6.1.4.1.9.9.96.1.1.1.1.14.XXX i 1