SNMP authentication failure

[Junkerstein]

Hello

I'm getting this message when I add the switch to the DNAC

Reason and Suggested Actions

SNMP Authentication Failure : NCIM12001: Device was not successfully authenticated via SNMP credentials. However, device is ping reachable. Either the mandatory protocol credentials are not correctly provided to Cisco DNA Center or the device is responding slow and exceeding the set timeout value. User can also run discovery again only for this device with correct credentials using the discovery feature.

[pieterh]

the message is clear enough, the snmp-credentials are invalid!
=> check if the snmp-credentials in DNAC match with those configured on the switch

when adding the device to DNAC you specify CLI credentials, and snmp credentials
both default to globally defined credentials, but you may need to select snmpv3 instead of snmpv2 (as default)

you can "validate credentials" before adding the device, 

[ramas]

The same credentials work on other switches in the site and with other location switches but fails on 2 switches only 

[Ruben Cocheno]

@Junkerstein 

Not sure if you hitting the bug CSCvr50499, if is a C9300 in stack and the stack master changed, then is this one. You must re-apply the SNMP config on the Switch, reload it and apply the SNMP again on the DNAC.

[Junkerstein]

@Ruben Cocheno 

I can't reload the switch (production) and I reconfigured the SNMP , but still authentication Failuer

[Ruben Cocheno]

@Junkerstein 

Just relayed what the bug says, so you might want to do it on your next maintenance window.

[pieterh]

you can run a "debug snmp"  on the switch then try to add the switch in DNA
and collect the  logging. you may find some clues there
you can also attach the logging to this post so we can help

[Junkerstein · Accepted solution]

Firewall Blocking SNMP port from DNAC