Strange behavior configuring snmp v3 on ISR 4000

[erdiez001]

Hi all,

Can anyone help us, we are switching to SNMP v3 in some cisco ISR devices, and they are not sending traps to NNM.

If we configure like this: 

        snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart

        snmp-server enable traps tty

        snmp-server enable traps cpu threshold

        snmp-server enable traps syslog

        snmp-server enable traps flash insertion

        snmp-server enable traps flash removal

        snmp-server enable traps bgp

        snmp-server host <iphost> version 3 priv NNMIv3 

        snmp-server host <iphost> version 3 priv NNMIv3 

No traps are sent. seems like it ignores the configuration.

but if we configured like this: 

   snmp-server host <iphost> version 3 priv NNMIv3  bgp tty hsrp cpu ipsec snmp

   snmp-server host <iphost> version 3 priv NNMIv3  bgp tty hsrp cpu ipsec snmp

traps are sent and received on NNM.

Does anyone know the reason why the first configuration doesn't work, no traps are sent, but it works with the second configuration?

The first configuration it's ok, actually works in other devices should work on ISR and it doesn't.

Thanks in advance for your help. 

Elena

[marce1000]

 - Can you double check that this not work, by using other or 'plain' trap receiver such as simple snmpd on Linux, perhaps the format changed and NNM does not recognize it , (or else monitor the traps send by online packet capturing). Also used the latest advisory software version on the ISR , snmp v3 is known for bugs on Cisco devices.

 M.

[erdiez001]

Hello marce1000

I have tested and this works on other cisco devices on the same network. And NNM receives traps.
But it doesn't work in ISRs. only works if i change the configuration line as mentioned. 
The version running on ISR devices is: 

 "Cisco IOS XE Software, Version 03.16.04b.S - Extended Support Release
Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.5(3)S4b, RELEASE SOFTWARE (fc1)"

I have not seen bug related to SNMPv3 in this version.  Do you know if there is? 

Thanks 

Regards. 

Elena