SNMP string getting failed between Cisco Devices & Netbrain 7.01. Unable to discover cisco devices.

[sathish.062]

Hi Friends,

I am not sure whether i can ask this question here. Kindly suggest.

SNMP string getting failed between Cisco Devices & Netbrain 7.01. Unable to discover Cisco Devices at Netbrain, only ping is getting success as per below logs in Netbrain. I checked the SNMP community string on both end (Cisco Devices & Netbrain) both are identical. 

Netbrain IP: 10.220.70.94

Ping [10.249.255.1] via Proxy Server(10.220.70.94); Succeeded
Send RO = [ODFMC-RO][version:v2c] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [ODFMC-RO][version:v1] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [ODFMC-RW RW ACL_ODFMC_RW_MGMT][version:v2c] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [ODFMC-RW RW ACL_ODFMC_RW_MGMT][version:v1] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [NETMAP RW][version:v2c] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [NETMAP RW][version:v1] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [DXNtzh1223_#][version:v2c] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [DXNtzh1223_#][version:v1] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [HCNNY-RO][version:v2c] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [HCNNY-RO][version:v1] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [B1ack5ky][version:v2c] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Send RO = [B1ack5ky][version:v1] to [10.249.255.1] via Proxy Server(10.220.70.94); Failed:SNMP++ Get Error, SNMP++: SNMP request timed out (-5)
Discovery of 10.249.255.1 complete

[Seb Rupik]

Hi there,

Do you have an access list configured on the snmp-server community statement on the switch? Is the netbrain server listed in the ACL?

Does the traffic between the two pass through a firewall?

cheers,

Seb.

[sathish.062]

Thanks for the response Seb.

Yes, ACL configured on SNMP community string statement and Netbrain IP is not allowed in ACL, but i can able to ping Netbrain IP (10.220.70.94) and no firewall present in this path. 

Traceroute

VRF info: (vrf in name/id, vrf out name/id)
1 172.16.254.15 16 msec 12 msec 12 msec
2 10.220.69.253 12 msec 12 msec 16 msec
3 10.220.70.94 12 msec * 12 msec

#ping 10.220.70.94
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.220.70.94, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/12/16 ms

#sh run | i snmp
snmp-server community NETMAP RW
snmp-server community DXNtzh1223_# RO NPG_NOC
snmp-server community ODFMC-RO RO ACL_ODFMC_RO_MGMT
snmp-server community ODFMC-RW RW ACL_ODFMC_RW_MGMT
snmp-server enable traps entity-sensor threshold

#sh ip access-lists ACL_ODFMC_RO_MGMT
Standard IP access list ACL_ODFMC_RO_MGMT
10 permit 10.1.10.8
20 permit 10.220.22.149
30 permit 10.240.16.0, wildcard bits 0.0.0.255

#sh ip access-lists ACL_ODFMC_RW_MGMT
Standard IP access list ACL_ODFMC_RW_MGMT
10 permit 10.1.10.8
20 permit 10.240.16.0, wildcard bits 0.0.0.255

#sh ip access-lists NPG_NOC
Standard IP access list NPG_NOC
10 permit 52.20.238.X
20 permit 50.79.86.X, wildcard bits 0.0.0.7
 

[Seb Rupik · Accepted solution]

Try adding the following:

!
access-list ACL_ODFMC_RO_MGMT permit 10.220.70.94
!

cheers,

Seb.

[sathish.062]

Thank you so much Seb, Its working now, after included netbrain IP on ACL.

I can able to discover network devices on Netbrain 7.0.1 now.