Duplicate SNMP EngineIDs on several cisco switches/routers

[thorsten.steffen]

Hello,

we have several cisco switches and routers (with different ios versions, e.g. Catalyst 4000 L3 Switch Software (cat4000-I9S-M), Version

12.2(25)EWA4, RELEASE SOFTWARE (fc1)

)which have exactly the same snmp engineid (80 00 00 09 03 00 02 00 00 00 01 00).

This is not supported via rfc.

Does anybody know if there is a known issue concerning this?

Does anybody know if it's possible to set the engineid to the correct default value?

Best Regards,

Thorsten

[Collin Clark]

Here's a link to configure the EngineID yourself.

http://www.cisco.com/en/US/docs/ios/netmgmt/command/reference/nm_14.html

HTH

[thorsten.steffen]

Hi,

thanks for the link but unfortunately there isn't mentioned how you can set the engineid to the default value.

Best Regards,

Thorsten

[Collin Clark]

It's dynamically created so there is no default value.

[rsgamage1]

Likely issue:

From NMS perspective you may encounter Time Syncronization(violation of timeliness) error related SNMPv3 reponses as logically SNMPv3 engine ID must be unique in an administrative domain(RFC 2571). When this happens you should encounter SNMPv3 auth failures due to UsmNotInTimeWindow related errors(implying replayed or duplicated messages).

Have no clue when exactly one would require manual configuration of SNMP engine-ID. Generation by the engine itself based on its MAC,etc should be the preferred way to avoid such conflicts.