Cisco Switch 9500 Nexus snmp v2c

[mrjelly]

Hello,

I am attempting to setup a Nexus 9500 with SNMP v2c. However the switch has auto added the local logins as SNMP users.

I therefore am getting incorrect user errors when attempted GET requested from my monitoring software.

Is there a reason it added users automatically, is there a way to allow for no authentication SNMP v2c using the community name?

thank you

[pieterh]

????
AFAIK snmpv2c uses community name only
usernames are used by snmpv3!

=> your monitoring software has switched to snmpv3
or   your snmp-server command has been changed to
     snmp-server host <ip-addr> version 3 priv < username> 
-> change back to snmp-server host <ip-addr> version 2c <community> (if IOS allows)

[mrjelly]

Yes that was my confusion, my command on the switch is still v2c and the monitoring (PRTG) is set to v2c.

I wondered if this was some sort of Nexus kwerk where it auto adds users that confuses things if you are using v2c.

Thank you

[pieterh · Accepted solution]

ALL users can be used to authenticate for snmpv3, not only on Nexus, also on other models
including AAA users

Cisco Nexus 9000 Series NX-OS System Management Configuration Guide, Release 10.1(x) - Configuring SNMP [Cisco Nexus 9000 Series Switches] - Cisco
- The device supports SNMPv1, SNMPv2c, and SNMPv3. Both SNMPv1 and SNMPv2c use a community-based form of security.
- If you create or delete a user using either SNMP or the CLI, the user is created or deleted for both SNMP and the CLI.

-> if you get an incorrect user error, it looks like your monitoring software is using snmpv3 instead of snmpv2

[mrjelly]

Thank you for your help on this, I have relooked and there was a setting part way down an inherited setting to make it SNMP v3.

SNMP v2c was at the top level.