09-24-2018 06:09 AM - edited 03-03-2019 08:54 AM
Hi Friends,
I am not sure whether i can ask this question here. Kindly suggest.
SNMP string getting failed between Cisco Devices & Netbrain 7.01. Unable to discover Cisco Devices at Netbrain, only ping is getting success as per below logs in Netbrain. I checked the SNMP community string on both end (Cisco Devices & Netbrain) both are identical.
Netbrain IP: 10.220.70.94
Ping [10.249.255.1] via Proxy Server(10.220.70.94); Succeeded
Send RO = [ODFMC-RO][version:v2c] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [ODFMC-RO][version:v1] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [ODFMC-RW RW ACL_ODFMC_RW_MGMT][version:v2c] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [ODFMC-RW RW ACL_ODFMC_RW_MGMT][version:v1] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [NETMAP RW][version:v2c] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [NETMAP RW][version:v1] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [DXNtzh1223_#][version:v2c] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [DXNtzh1223_#][version:v1] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [HCNNY-RO][version:v2c] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [HCNNY-RO][version:v1] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [B1ack5ky][version:v2c] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [B1ack5ky][version:v1] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Discovery of 10.249.255.1 complete
Solved! Go to Solution.
09-24-2018 07:10 AM - edited 09-24-2018 07:28 AM
Try adding the following:
! access-list ACL_ODFMC_RO_MGMT permit 10.220.70.94 !
cheers,
Seb.
09-24-2018 06:26 AM
Hi there,
Do you have an access list configured on the snmp-server community statement on the switch? Is the netbrain server listed in the ACL?
Does the traffic between the two pass through a firewall?
cheers,
Seb.
09-24-2018 06:42 AM - edited 09-24-2018 06:44 AM
Thanks for the response Seb.
Yes, ACL configured on SNMP community string statement and Netbrain IP is not allowed in ACL, but i can able to ping Netbrain IP (10.220.70.94) and no firewall present in this path.
Traceroute
VRF info: (vrf in name/id, vrf out name/id)
1 172.16.254.15 16 msec 12 msec 12 msec
2 10.220.69.253 12 msec 12 msec 16 msec
3 10.220.70.94 12 msec * 12 msec
#ping 10.220.70.94
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.220.70.94, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/12/16 ms
#sh run | i snmp
snmp-server community NETMAP RW
snmp-server community DXNtzh1223_# RO NPG_NOC
snmp-server community ODFMC-RO RO ACL_ODFMC_RO_MGMT
snmp-server community ODFMC-RW RW ACL_ODFMC_RW_MGMT
snmp-server enable traps entity-sensor threshold
#sh ip access-lists ACL_ODFMC_RO_MGMT
Standard IP access list ACL_ODFMC_RO_MGMT
10 permit 10.1.10.8
20 permit 10.220.22.149
30 permit 10.240.16.0, wildcard bits 0.0.0.255
#sh ip access-lists ACL_ODFMC_RW_MGMT
Standard IP access list ACL_ODFMC_RW_MGMT
10 permit 10.1.10.8
20 permit 10.240.16.0, wildcard bits 0.0.0.255
#sh ip access-lists NPG_NOC
Standard IP access list NPG_NOC
10 permit 52.20.238.X
20 permit 50.79.86.X, wildcard bits 0.0.0.7
09-24-2018 07:10 AM - edited 09-24-2018 07:28 AM
Try adding the following:
! access-list ACL_ODFMC_RO_MGMT permit 10.220.70.94 !
cheers,
Seb.
09-24-2018 08:28 AM
Thank you so much Seb, Its working now, after included netbrain IP on ACL.
I can able to discover network devices on Netbrain 7.0.1 now.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide