Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello,I'm trying to get snmpv3 vrf support working on IOS-XR routers. There is not much information I can find available for this. Does anyone know of references or a working configuration I could implement and test? I have regular snmpv3 working out...
TL;DR: After migrating from ASR9Ks to NCS-57B1s (IOS-XR 7.10.2), four IPv6 PNIs to the same provider flap across four different devices. ND stays REACH, but IPv6 echo and BGP TCP/179 stall. Clearing the IPv6 neighbor cache brings it back for ~4–5 min...
Ok, I found the issue. I needed to be using "AES256C" instead of "AES256"... I now am able to query:swahlmark@vm8:~$ snmpwalk -v3 -l authPriv -u snmpCiscoIosxrTest -a SHA -A TESTAUTH -x AES256C -X TESTPRIV -n TEST 10.7.254.130 .1.3.6.1.2.1.1.1.0iso.3...
Same result: swahlmark@vm:~$ snmpwalk -v3 -l authPriv -u snmpCiscoIosxrTest -a SHA -A TESTAUTH -x AES256 -X TESTPRIV 10.7.254.130Timeout: No Response from 10.7.254.130
i have one interface in the vrf in the 172.16 range. the ip used to query here is part of the global vrf. Does snmpv3 vrf require routing to/from the device to all be in the same vrf?
This ip is not part of VRF TEST. I was under the impression that the management ip of the device can be used for the query and the context would map it to the correct vrf regardless of ip. Is this the problem?
Hello,results after making those adjustments:swahlmark@vm:~$ snmpwalk -v3 -l authPriv -u snmpCiscoIosxrTest -a SHA -A TESTAUTH -x AES256 -X TESTPRIV -n TEST 10.7.254.130Timeout: No Response from 10.7.254.130swahlmark@vm:~$ ping 10.7.254.130PING 10.7....
