CSPC SNMPv3 did not work

[matthias.kukorudz]

Hello,

we just installed a new SmartCollector at the customer side. Snmpv2 scans are running but snmpv3 not.

We disabled snmp-server commands on the switch (C3850) enabeld an configured it again. but it want work.

So we used a snmpwalk from Collector-CLI:

with snmp -v2c -> "snmpwalk -v2c.jpg"

snmpwalk -v3 -> "snmpwalk -v3.jpg"

The Switch we are using got following configration:

bbag101#sh run | i snmp-server
snmp-server group snmpv3-group v3 priv write snmpv3-write
snmp-server group snmpv3-group-smart v3 priv read snmpv3-read
snmp-server community ******** RO 10
snmp-server community ***********  RO 19
snmp-server location "HV1, DataCenter, M7, Floor 0"

bbag101#sh snmp user
User name: Leoniv3-SC
Engine ID: 80000009030000451D62A980
storage-type: nonvolatile        active
Authentication Protocol: SHA
Privacy Protocol: AES128
Group-name: snmpv3-group-smart

User name: Leoniv3-l3
Engine ID: 80000009030000451D62A980
storage-type: nonvolatile        active
Authentication Protocol: SHA
Privacy Protocol: AES128
Group-name: snmpv3-group

Switch : cisco WS-C3850-48XS

If you can see our failure - we would be happy!

Thanks and regards!

Matthias

[Supriya Patel]

Hi,

Could you please private message me 'collector id', customer name as well below to confirm if this issue is due to CSCvr06152.

Please private message me below as well:

From root, please run below:

# tcpdump port 161 -v

<Please run above while performing discovery>

# cat $CSPCHOME/cspc_logging.log

How many devices do you have in your network configured for SNMPv3?

Thanks,
Supriya

[matthias.kukorudz]

Hi,

here is the tcpdump from customer.

Hope it helps!

[root@vuhv1smartcspc01 ~]# tcpdump port 161 -v

tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes

16:24:50.791393 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 92)

    vuhv1smartcspc01.leoni.local.41083 > vl111.bbag101.leoni.local.snmp:  { SNMPv3 { F=r } { USM B=0 T=0 U= } { ScopedPDU E=  C= { GetRequest(14) R=983682519  } } }

16:24:50.792888 IP (tos 0x0, ttl 253, id 39502, offset 0, flags [none], proto UDP (17), length 136)

    vl111.bbag101.leoni.local.snmp > vuhv1smartcspc01.leoni.local.41083:  { SNMPv3 { F= } { USM B=24 T=439537 U= } { ScopedPDU E= 0x800x000x000x090x030x000x000x450x1D0x620xA90x80 C= { Report(33) R=983682519  S:snmpUsmMIB.usmMIBObjects.usmStats.usmStatsUnknownEngineIDs.0=456067 } } }

16:24:50.793031 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 163)

    vuhv1smartcspc01.leoni.local.41083 > vl111.bbag101.leoni.local.snmp:  { SNMPv3 { F=apr } { USM B=24 T=439537 U=Leoniv3-SC } { ScopedPDU [!scoped PDU]60_65_28_43_50_66_fb_c5_ac_36_43_f3_c7_e6_8f_82_a3_41_2c_97_20_75_91_c9_07_81_0b_ab_43_5b_5a_a8_33_d5_86_8f_5a_59_92_3f_e4_4e_65_88_1d_97} }

16:24:50.794389 IP (tos 0x0, ttl 253, id 39503, offset 0, flags [none], proto UDP (17), length 162)

    vl111.bbag101.leoni.local.snmp > vuhv1smartcspc01.leoni.local.41083:  { SNMPv3 { F=ap } { USM B=24 T=439537 U=Leoniv3-SC } { ScopedPDU [!scoped PDU]e7_93_5a_82_ef_28_f2_b2_2e_68_43_62_fa_97_40_bc_6d_72_b8_d6_51_24_de_a8_da_eb_a3_97_cb_c3_2f_ee_4c_38_b5_c0_df_bb_fd_77_1e_96_a7_2a_b1_b4} }

[Supriya Patel]

HI,

Please create post under PSS community.

https://community.cisco.com/t5/partner-support-service/ct-p/5456-partner-support-service

Please click 'Discussion' tab under Create section.

Thanks,
Supriya

[matthias.kukorudz]

Hi Supriya,
do you think the PSS community is answering faster, I don't think so....

[adias]

It is not about being faster.  The SNTC community is for END USERS that have SNTC service and processes for support are not the same.  Since your collector is a PSS service entitled. you must pursue support on that community where the proper partners and PSS community can be leveraged.  Additionally The Partner that supports that collector can open a TAC case with their proper PSS partner contract in case of additional support is needed from Cisco

[matthias.kukorudz]

OK, i would like to open a TAC - where can i find the SN of the SmartCollector?

[jofrumki]

I have sent the instructions on how to open a TAC case for PSS partners and their CSPC/portal related issues over private message.