PI 2.2.2 /CT8540 snmp : device is unreachable

[said.sayah]

I can't add my CT8540 8.1.102 to my PI 2.2.2, I use snmp V3

I add a SNMP V3 user to my CT8540 ( user, authen Proto HMAC-SHA and Privac Proto CFB-AES-128).

I  add the devise to my PI , I use snmp V3 and SSH , when I check credential I have only this message (snmp : device is unreachable).

can someone help me to resolve this.

Tanks

[Rasika Nayanajith]

Did you try this with SNMPv2 ?

I have got a 8540 configure in next couple of days. Once I tested, I will let you know

HTH

Rasika

[said.sayah]

for now I have not tested with SNMPv2 , I will test soon
Thanks for your feedback

[Scott Fella · Accepted solution]

Make sure your SNMP Trap Reciever allows the ip address.  Also double check that what you setup for smnp v3 on the WLC is the same on PI 3.0.  The defaults on the WLC and PI is different.

-Scott

[said.sayah]

my SNMP Trap reciever is my PI ( Version 2.2).
I use the same parameters to configure the SNMP v3 in both equipment

[Scott Fella]

If SNMPv2 doesn't work, I'm assuming that your on PI v2.2.1, v2.2.2 or v2.2.3 which has support for WLC v8.1.x

http://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html#pgfId-148410

-Scott

[said.sayah]

I would do the test tomorrow with SNMP v2

[said.sayah]

Same problem with SNMPv2 no issue !

In Prime i have message when I add device and try crediantial :

Verfication of one or more of following fields failed : SNMP read community, SNMP write community. Please fix this and retry

when I try to discover my WLC  I have this me

Failure Reason 

 Device : /172.20x.x got snmp timeout when querying system table from the device

I had some trap log in my CT8540 :

SNMP Authentication Failure: IP Adress:172.20.x.x

My Prime is in version 2.2.2

My couple of CT 8540 are in version : 8.1.102.0

After this :

• I delete my old snmpv3user
• I fix the NTP parameter in my WLC
• I create new SNMPv3 user
• I reboot the both WLC

And when I add my device and try my crediantial, I have his message :

SNMP : Device is Unreachble

[GERALD LECAILLIER]

Hello,

We have same problem with PI 2.2.2 and WLC 8540 8.1.102.0. in snmp V3 or V2c.

> no problem between switchs 6880, 3850 and PI

> with monitor session (source: wlc port-channel, dest: my laptop), we noticed that WLC sends no traps

[Rasika Nayanajith]

I have added my 8540 to PI3.0 using SNMPv3 without any trouble. I dit it via CLI on WLC

config snmp v3user create <user> rw hmacsha aescfb128 <authkey> <encrypkey>

May be this is specific to PI 2.2

HTH

Rasika

[said.sayah]

Our CT8540 does not generate the snmp trap,

In which version is your CT8540 ? mine is in 8.1.102.0

Saïd,

[said.sayah]

Hi Rasika,

I upgrade my CT8540 to version AIR-CT8540-K9-8-1-131-0 but we have the same issue with PI2.2.2, PI2.2.3 and we try also today with PI 3.0.

Can you tell me in witch version are your CT8540 ?

[Rasika Nayanajith]

Hi Said,

Here is my 8540 details. I simply created snmpv3 user (with R/W permission) on WLC and add that WLC to prime using same credentials.

(8540-WLC) >show snmpv3user

SNMP v3 User Name AccessMode Authentication Encryption 
-------------------- ----------- -------------- ---------- 
primexxx Read/Write HMAC-SHA CFB-AES

(8540-WLC) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 8.1.131.0
RTOS Version..................................... 8.1.131.0
Bootloader Version............................... 8.1.102.0
Emergency Image Version.......................... 8.1.102.0

HTH

Rasika

[Scott Fella]

I don't know why you are having issues. I have used snmpv3 a t a few customers with no no issues but most stick with snmpv2.

-Scott

[GERALD LECAILLIER]

Hello,

We noticed something interesting (i'm Said's colleague): 

- our prime and wlc are in different

- if we set an interface for the WLC in same vlan as the prime: it works

On the cores (VSS Cisco 6880), intervlan routing works fine and there is no acl.

Gateways and masks are ok, we dont undersand...