SNMP authentication failure

[Michael Patoc]

Good day!

Any idea how to resolve snmp issue in cisco SG350 switch. I'm trying to add the SG350 in NMS however we're having issue in authenticating snmp. I don't know which one is to check since snmp configuration on the switch is correct.

Please note both switch and NMS are pinging and vice versa and NMS server is located at HO while the switch is located at branch site. Please see the error below:

%SNMP-W-SNMPAUTHFAIL: Access attempted by unauthorized NMS: 10.17.101.X - Note this the gateway of the switch.

Thank you.

[marce1000]

          - FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuo52463

  M.

[balaji.bandi]

First check what is the firmware running and try to upgrade latest firmware any bug fixed.

10.17.101.X - so this is not the NMS Server, this is gateway of the switch IP address, what is the IP address of NMS, and is the NMS able to get all the data from switch ?

or you seeing the logs that is the issue ?

Follow below guide (used for 350 that should work for you ) - Hope you are trying SNMPv2 ( that is preferred) 

https://www.cisco.com/c/en/us/support/docs/smb/switches/cisco-250-series-smart-switches/smb2673-configure-simple-network-management-protocol-snmp-communitie.html

check also ACL if you like to apply other device not connect SNMP :

https://www.cisco.com/c/en/us/td/docs/switches/lan/csbms/CBS_250_350/CLI/cbs-350-cli-/snmp-commands.html

[Michael Patoc]

The NMS server 10.10.101.X is in different network which is located in HQ. Currently, the active firmware version of the switch is 2.4.5.71.

[balaji.bandi]

Is the gateway does the NAT ?

[Michael Patoc]

Hello Sir,

Network traffic that goes to NMS and Switch is via MPLS (Router to Router). I'm just confuse because before we transfer the switch from HQ to branch. The snmp authenticate is works perfectly without upgrading the switch firmware.

Thank you.

[balaji.bandi]

you need to provide more information to troubleshoot,