Ridgline 4.0 SP2 when add switch timeout.

  • 0
  • 1
  • Problem
  • Updated 3 years ago
  • Solved
  • (Edited)
Hello guys!

After upgrade Ridgline SP1 to SP2 i tryed remove and add again one switch stack, but i cant add again, i tryed too follow gtac information bellow:

https://gtacknowledge.extremenetworks.com/articles/Solution/Error-Not-responding-to-SNMP-Please-check-community-name-and-route-to-switch/

https://gtacknowledge.extremenetworks.com/articles/Solution/Unable-to-add-a-switch-to-Ridgeline/

But i continue with this problem can someone help me? (see the picture and switch configuration)




ExtremeXOS
Copyright (C) 1996-2015 Extreme Networks. All rights reserved.
This product is protected by one or more US patents listed at http://www.extremenetworks.com/patents along with their foreign counterparts.
==============================================================================

Press the or '?' key at any time for completions.
Remember to save your configuration changes.


Slot-1 ADM.1 # sho
[KSlot-1 ADM.1 # show con
[KSlot-1 ADM.1 # show configuration | inc
[KSlot-1 ADM.1 # show configuration | include snmpMaster configuration

   # Module snmpMaster configuration.
configure snmpv3 delete community "private"
configure snmpv3 delete community "public"
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser1" sec-model snmpv2c 
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser2" sec-model snmpv2c 
configure snmpv3 add community "3gb@t!" name "3gb@t!" user "v1v2c_ro" 
configure snmpv3 add community "3gb@t!rw" name "3gb@t!rw" user "v1v2c_rw" 
configure snmpv3 add community "v1v2cNotifyComm1" name "ST.173146567.10550" user "v1v2cNotifyUser1" 
configure snmpv3 add community "v1v2cNotifyComm2" name "ST.173146567.10550" user "v1v2cNotifyUser2" 
configure snmpv3 add target-addr "v1v2cNotifyTAddr1" param "v1v2cNotifyParam1" ipaddress 10.82.1.199 transport-port 10550 from 10.82.1.254 tag-list "defaultNotify" 
configure snmpv3 add target-params "v1v2NotifyParam1" user "v1v2NotifyUser1" mp-model snmpv2c sec-model snmpv2c sec-level noauth 
configure snmpv3 add target-params "v1v2cNotifyParam1" user "v1v2cNotifyUser2" mp-model snmpv2c sec-model snmpv2c sec-level noauth 
configure snmp add notification-log default
Slot-1 ADM.2 #     

[KSlot-1 ADM.2 # show snmpv3 community 


Community Index : 3gb@t!
Community Name : 3gb@t!
Security Name : v1v2c_ro
Context EngineID : 80:00:07:7c:03:02:04:96:97:86:22
Context Name : 
Transport Tag : 
Storage Type : NonVolatile
Row Status : Active

Community Index : 3gb@t!rw
Community Name : 3gb@t!rw
Security Name : v1v2c_rw
Context EngineID : 80:00:07:7c:03:02:04:96:97:86:22
Context Name : 
Transport Tag : 
Storage Type : NonVolatile
Row Status : Active

Community Index : v1v2cNotifyComm1
Community Name : ST.173146567.10550
Security Name : v1v2cNotifyUser1
Context EngineID : 80:00:07:7c:03:02:04:96:97:86:22
[7mPress to continue or to quit:[m[60;D[KContext Name : 
Transport Tag : 
Storage Type : NonVolatile
Row Status : Active

Community Index : v1v2cNotifyComm2
Community Name : ST.173146567.10550
Security Name : v1v2cNotifyUser2
Context EngineID : 80:00:07:7c:03:02:04:96:97:86:22
Context Name : 
Transport Tag : 
Storage Type : NonVolatile
Row Status : Active

Total num. of entries in snmpCommunityTable : 4
Slot-1 ADM.3 # 


Slot-1 ADM.3 # sho
[KSlot-1 ADM.3 # show snmp
[KSlot-1 ADM.3 # show snmp

  snmp            SNMP
  snmpv3          SNMPv3

[KSlot-1 ADM.3 # show snmpv
[KSlot-1 ADM.3 # show snmpv3 ?

  access                   Access
  community                Community
  context                  Context
  counters                 Counters
  engine-info              Engine Information
  extreme-target-addr-ext  Extreme Target Addr Ext Table
  filter                   Filter Table
  filter-profile           Filter Profile Table
  group                    Group
  mib-view                 View
  notify                   Notify
  target-addr              Target Addr Table
  target-params            Target Params Table
  user                     User Name

[KSlot-1 ADM.3 # show snmpv3 ac
[KSlot-1 ADM.3 # show snmpv3 access 


Group Name : admin
Context Prefix : 
Security Model : USM
Security Level : Authentication Privacy
Context Match : Exact
Read View : defaultAdminView
Write View : defaultAdminView
Notify View : defaultNotifyView
Storage Type : NonVolatile
Row Status : Active

Group Name : initial
Context Prefix : 
Security Model : USM
Security Level : No-Authentication No-Privacy
Context Match : Exact
Read View : defaultUserView
Write View : 
Notify View : defaultNotifyView
Storage Type : NonVolatile
Row Status : Active

[7mPress to continue or to quit:[m[60;D[KGroup Name : initial
Context Prefix : 
Security Model : USM
Security Level : Authentication No-Privacy
Context Match : Exact
Read View : defaultUserView
Write View : defaultUserView
Notify View : defaultNotifyView
Storage Type : NonVolatile
Row Status : Active

Group Name : v1v2c_ro
Context Prefix : 
Security Model : snmpv1
Security Level : No-Authentication No-Privacy
Context Match : Exact
Read View : defaultUserView
Write View : 
Notify View : defaultNotifyView
Storage Type : NonVolatile
Row Status : Active

Group Name : v1v2c_ro
[7mPress to continue or to quit:[m[60;D[KContext Prefix : 
Security Model : snmpv2c
Security Level : No-Authentication No-Privacy
Context Match : Exact
Read View : defaultUserView
Write View : 
Notify View : defaultNotifyView
Storage Type : NonVolatile
Row Status : Active

Group Name : v1v2c_rw
Context Prefix : 
Security Model : snmpv1
Security Level : No-Authentication No-Privacy
Context Match : Exact
Read View : defaultUserView
Write View : defaultUserView
Notify View : defaultNotifyView
Storage Type : NonVolatile
Row Status : Active

Group Name : v1v2c_rw
Context Prefix : 
[7mPress to continue or to quit:[m[60;D[KSecurity Model : snmpv2c
Security Level : No-Authentication No-Privacy
Context Match : Exact
Read View : defaultUserView
Write View : defaultUserView
Notify View : defaultNotifyView
Storage Type : NonVolatile
Row Status : Active

Group Name : v1v2cNotifyGroup
Context Prefix : 
Security Model : snmpv1
Security Level : No-Authentication No-Privacy
Context Match : Exact
Read View : 
Write View : 
Notify View : defaultNotifyView
Storage Type : NonVolatile
Row Status : Active

Group Name : v1v2cNotifyGroup
Context Prefix : 
Security Model : snmpv2c
[7mPress to continue or to quit:[m[60;D[KSecurity Level : No-Authentication No-Privacy
Context Match : Exact
Read View : 
Write View : 
Notify View : defaultNotifyView
Storage Type : NonVolatile
Row Status : Active

Total num. of entries in vacmAccessTable : 9
Slot-1 ADM.4 #  

Slot-1 ADM.4 # 



[KSlot-1 ADM.4 # show configuration 

#
# Module devmgr configuration.
#
configure snmp sysName "ADM"
configure snmp sysContact "support@extremenetworks.com, +1 888 257 3000"
configure timezone -180
configure slot 1 module X440-24t
configure sys-recovery-level slot 1 reset
configure slot 2 module X440-24t
configure sys-recovery-level slot 2 reset
configure slot 3 module X440-24t
configure sys-recovery-level slot 3 reset
configure slot 4 module X440-24p
configure sys-recovery-level slot 4 reset
configure slot 5 module X440-48t
configure sys-recovery-level slot 5 reset


#
configure snmpv3 delete community "private"
configure snmpv3 delete community "public"
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser1" sec-model snmpv2c 
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser2" sec-model snmpv2c 
configure snmpv3 add community "3gb@t!" name "3gb@t!" user "v1v2c_ro" 
configure snmpv3 add community "3gb@t!rw" name "3gb@t!rw" user "v1v2c_rw" 
configure snmpv3 add community "v1v2cNotifyComm1" name "ST.173146567.10550" user "v1v2cNotifyUser1" 
configure snmpv3 add community "v1v2cNotifyComm2" name "ST.173146567.10550" user "v1v2cNotifyUser2" 
configure snmpv3 add target-addr "v1v2cNotifyTAddr1" param "v1v2cNotifyParam1" ipaddress 10.82.1.199 transport-port 10550 from 10.82.1.254 tag-list "defaultNotify" 
configure snmpv3 add target-params "v1v2NotifyParam1" user "v1v2NotifyUser1" mp-model snmpv2c sec-model snmpv2c sec-level noauth 
configure snmpv3 add target-params "v1v2cNotifyParam1" user "v1v2cNotifyUser2" mp-model snmpv2c sec-model snmpv2c sec-level noauth 
configure snmp add notification-log default


# Module xmlc configuration.
#
create xml-notification target ridgeline_10.82.1.199 url http://10.82.1.199:8080/xos/webservice vr VR-Mgmt
configure xml-notification target ridgeline_10.82.1.199 user admin encrypted-auth YWRtaW46ZXBpY2VudGVy
enable xml-notification ridgeline_10.82.1.199
configure xml-notification target ridgeline_10.82.1.199 add idMgr 
                                                                                                                                        

 
Photo of Tavares Belmont

Tavares Belmont

  • 638 Points 500 badge 2x thumb

Posted 3 years ago

  • 0
  • 1
Photo of Taykin Izzet

Taykin Izzet , Employee

  • 2,924 Points 2k badge 2x thumb
Tavares, you mentioned increasing the SNMP timeout period value, but what value was the value changed to? Please change the SNMP timeout period value to 35 seconds, apply, and then try to add the device.

A packet capture on the server will help isolate the issue to see whether SNMP packets are going between source to destination.
Photo of Tavares Belmont

Tavares Belmont

  • 638 Points 500 badge 2x thumb
Hi,

I Had tried with 60 seconds before, now i tried with 35 seconds and the same error continue. Ill try capture the packets between switch and server, do you have other tip?
Photo of Taykin Izzet

Taykin Izzet , Employee

  • 2,924 Points 2k badge 2x thumb
Tavares, the following can also be done:

1. please test with adding the switch using SNMPv2, v2c, and v3. This will help isolate any SNMP configuration issues.

2. Try adding the switch with a different IP other than the one used before. This is dependent if another IP address is configured on the switch.

3. Restart the snmpSubagent and snmpMaster processes on the switch. This may be necessary if no SNMP packets are being sent by the switch which the packet capture will help confirm.

Let us know the outcome.
Photo of Tavares Belmont

Tavares Belmont

  • 638 Points 500 badge 2x thumb
Thanks,

Option 1 and 3 i had tried before but the option 2 i can't do it, because this switch is a default gateway that network.
Photo of Taykin Izzet

Taykin Izzet , Employee

  • 2,924 Points 2k badge 2x thumb
Once you are able to get a packet capture of the process, would you open a case with GTAC and upload the capture to the case. I will review the capture once it is available. Let me know if there are any questions on this.
Photo of Ram

Ram, Employee

  • 1,450 Points 1k badge 2x thumb
Could you please execute the command "configure snmp compatibility ip-fragmentation allow" and try to add the device?
Photo of Tavares Belmont

Tavares Belmont

  • 638 Points 500 badge 2x thumb
Of course Ram! I tried but the problem continue, thanks for your advice.

 :(
Photo of Ram

Ram, Employee

  • 1,450 Points 1k badge 2x thumb
Sorry to hear that. Please open a case with GTAC for further analysis.
Photo of Taykin Izzet

Taykin Izzet , Employee

  • 2,924 Points 2k badge 2x thumb
Tavares, you can also get further information on SNMP ingress and egress packets on the switch using the command 'show snmp VR-Default' and 'show snmpv3 counters'. This will also show any SNMP errors, AuthErrors, and Drops. Overall this will help isolate the issue further to whether the issue is within Ridgeline or the switch. It would be recommended to clear the counters before trying to add the device and comparing the mentioned outputs.

However, I do agree that we need to take a closer look by opening a case, but the above will help.
(Edited)
Photo of Tavares Belmont

Tavares Belmont

  • 638 Points 500 badge 2x thumb
Hello Izzet,

I have the packet capture dump with wireshark can i send you?

So, i have one ticket open with you i think can you check please?

Case number: 01125731

Slot-1 ADM.1 # show snmp VR-DefaultSNMP access                      : Enabled
SNMP ifMib ifAlias size          : Default
SNMP Notifications               : Enabled
SNMP Notification Receivers  :
    Destination Address      : 10.82.1.199:10550
    Source Address           : 10.82.1.254
    Version                  : v2c               Type      : Trap
    Timeout                  : -                 Retries   : -

SNMP stats:     InPkts 7333    OutPkts   10051   Errors 17      AuthErrors 6
                Gets   301     GetNexts  2577    Sets   160     Drops      0    
SNMP traps:     Sent   2718    AuthTraps Enabled
SNMP Inform:    Sent   0       Retries   0       Failed 0

-------------------------------------------------------------------------------------------------------------------

Slot-1 ADM.15 # show snmpv3 counters
        snmpUnknownSecurityModels       : 0
        snmpInvalidMessages             : 0
        snmpUnknownPDUHandlers          : 0
        usmStatsUnsupportedSecLevels    : 0
        usmStatsNotInTimeWindows        : 0
        usmStatsUnknownUserNames        : 0
        usmStatsUnknownEngineIDs        : 0
        usmStatsWrongDigests            : 0
        usmStatsDecryptionErrors        : 0
----------------------------------------------------------------------------------------------------------------
Photo of Tavares Belmont

Tavares Belmont

  • 638 Points 500 badge 2x thumb
After clear the counters and tried to add device again:

Slot-1 ADM.36 # show snmp vr "VR-Default"SNMP access                      : Enabled
SNMP ifMib ifAlias size          : Default
SNMP Notifications               : Enabled
SNMP Notification Receivers  :
    Destination Address      : 10.82.1.199:10550
    Source Address           : 10.82.1.254
    Version                  : v2c               Type      : Trap
    Timeout                  : -                 Retries   : -

SNMP stats:     InPkts 7790    OutPkts   10508   Errors 17      AuthErrors 6
                Gets   320     GetNexts  2738    Sets   162     Drops      0    
SNMP traps:     Sent   2718    AuthTraps Enabled
SNMP Inform:    Sent   0       Retries   0       Failed 0