SNMP-Read Problems - bad community name, since XOS-15.5.3.4 BD8810. BDX8

  • 0
  • 1
  • Problem
  • Updated 3 years ago
  • Solved

Since I updated our BD8810 from XOS Version 15.3.4.6-patch1-8.xos to 15.5.3.4-patch1-6.xos I get problems to access the switch through snmp from Netsight 6.1 or Ridgeline 3.1.


In the syslog of the BD8810 I got a lot of
"MSM-A: Login failed through SNMPv1/v2c - bad community name" (IP of Ridglien and Netsight)


For sure, the community names are the same as before the updates.

Nearly the same behavior shows our BDX8, also updated from XOS-Version 15.3.4.6-patch1-8.xos to bdX-15.5.3.4-patch1-6.xos.
Ridgeline 3.1 mentions "System SNMP Unreachable". An "Update Device" from Ridgeline says: "Not responding to SNMP. Please check community name and route to switch"

On the other side I updated some X460 from summitX-15.3.4.6-patch1-10.xos to SummitX-15.5.3.4-patch1-6.xos there are no smmp Problems with Ridgeline or Netsight.

At this point I have studied the User Guide (ExtremeXOS_15_5_User-Guide.pdf) and the Release Notes (ExtremeXOS_15.5.3_Patch1-6_RelNotes.pdf), but I'm not getting the message/sense what has realy changed between the versions and what I have to configure on the BDs that this will work again.

Any idea is appricated.

Photo of jackmikel

jackmikel

  • 310 Points 250 badge 2x thumb

Posted 4 years ago

  • 0
  • 1
Photo of Stephen Stachal

Stephen Stachal

  • 80 Points 75 badge 2x thumb

can we get the sanitized output of the following command?

sho config detail | inc snmp

And what VR is the IP in that is trying to be reached by Ridglien and Netsight examples VR-MGMT or VR-Default.

Photo of jackmikel

jackmikel

  • 310 Points 250 badge 2x thumb
The IP is for the VR-Default.

The output of the command from the BD8810:

N01S0001.3 # sh config detail | inc snmp
configure snmp sysName "N01S0001"
configure snmp sysLocation "Op"
configure snmp sysContact "."
configure snmp ifmib ifAlias string-size default
enable snmp traps port-up-down port 1:1
enable snmp traps port-up-down port 1:2
enable snmp traps port-up-down port 1:3
enable snmp traps port-up-down port 1:4
enable snmp traps port-up-down port 1:5
enable snmp traps port-up-down port 1:6
enable snmp traps port-up-down port 1:7
enable snmp traps port-up-down port 1:8
enable snmp traps port-up-down port 1:9
enable snmp traps port-up-down port 1:10
enable snmp traps port-up-down port 1:11
enable snmp traps port-up-down port 1:12
enable snmp traps port-up-down port 1:13
enable snmp traps port-up-down port 1:14
enable snmp traps port-up-down port 1:15
enable snmp traps port-up-down port 1:16
enable snmp traps port-up-down port 1:17
enable snmp traps port-up-down port 1:18
enable snmp traps port-up-down port 1:19
enable snmp traps port-up-down port 1:20
enable snmp traps port-up-down port 1:21
enable snmp traps port-up-down port 1:22
enable snmp traps port-up-down port 1:23
enable snmp traps port-up-down port 1:24
enable snmp traps port-up-down port 1:25
enable snmp traps port-up-down port 1:26
enable snmp traps port-up-down port 1:27
enable snmp traps port-up-down port 1:28
enable snmp traps port-up-down port 1:29
enable snmp traps port-up-down port 1:30
enable snmp traps port-up-down port 1:31
enable snmp traps port-up-down port 1:32
enable snmp traps port-up-down port 1:33
enable snmp traps port-up-down port 1:34
enable snmp traps port-up-down port 1:35
enable snmp traps port-up-down port 1:36
enable snmp traps port-up-down port 1:37
enable snmp traps port-up-down port 1:38
enable snmp traps port-up-down port 1:39
enable snmp traps port-up-down port 1:40
enable snmp traps port-up-down port 1:41
enable snmp traps port-up-down port 1:42
enable snmp traps port-up-down port 1:43
enable snmp traps port-up-down port 1:44
enable snmp traps port-up-down port 1:45
enable snmp traps port-up-down port 1:46
enable snmp traps port-up-down port 1:47
enable snmp traps port-up-down port 1:48
disable snmp traps fdb mac-tracking
disable snmp traps bfd
configure snmp traps batch-delay bfd 1000
enable snmp traps identity-management
enable ip-security dhcp-snooping vlan dillberg port 4:13 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan dillberg port 6:1 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan nordring port 4:22 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:1 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:2 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:3 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:4 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:5 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:7 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:9 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:10 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:11 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:12 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:14 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:15 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:16 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:17 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:18 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:19 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:20 violation-action drop-packet block-mac duration 300 snmp-trap
enable ip-security dhcp-snooping vlan stammhaus port 4:21 violation-action drop-packet block-mac duration 300 snmp-trap
configure lldp snmp-notification-interval 5
enable snmp traps lldp ports 1:1
enable snmp traps lldp ports 1:2
enable snmp traps lldp ports 1:3
enable snmp traps lldp ports 1:4
enable snmp traps lldp ports 1:5
enable snmp traps lldp ports 1:6
enable snmp traps lldp ports 1:7
enable snmp traps lldp ports 1:8
enable snmp traps lldp ports 1:9
enable snmp traps lldp ports 1:10
enable snmp traps lldp ports 1:11
enable snmp traps lldp ports 1:12
enable snmp traps lldp ports 1:13
enable snmp traps lldp ports 1:14
enable snmp traps lldp ports 1:15
enable snmp traps lldp ports 1:16
enable snmp traps lldp ports 1:17
enable snmp traps lldp ports 1:18
enable snmp traps lldp ports 1:19
enable snmp traps lldp ports 1:20
enable snmp traps lldp ports 1:21
enable snmp traps lldp ports 1:22
enable snmp traps lldp ports 1:23
enable snmp traps lldp ports 1:24
enable snmp traps lldp ports 1:25
enable snmp traps lldp ports 1:26
enable snmp traps lldp ports 1:27
enable snmp traps lldp ports 1:28
enable snmp traps lldp ports 1:29
enable snmp traps lldp ports 1:30
enable snmp traps lldp ports 1:31
enable snmp traps lldp ports 1:32
enable snmp traps lldp ports 1:33
enable snmp traps lldp ports 1:34
enable snmp traps lldp ports 1:35
enable snmp traps lldp ports 1:36
enable snmp traps lldp ports 1:37
enable snmp traps lldp ports 1:38
enable snmp traps lldp ports 1:39
enable snmp traps lldp ports 1:40
enable snmp traps lldp ports 1:41
enable snmp traps lldp ports 1:42
enable snmp traps lldp ports 1:43
enable snmp traps lldp ports 1:44
enable snmp traps lldp ports 1:45
enable snmp traps lldp ports 1:46
enable snmp traps lldp ports 1:47
enable snmp traps lldp ports 1:48
disable snmp traps ospf
# Module snmpMaster configuration.
configure snmpv3 engine-id 03:00:04:96:1d:4b:40
configure snmp compatibility get-bulk reply-too-big-action too-big-error
configure snmp compatibility ip-fragmentation disallow
configure snmpv3 delete user admin engine-id 80:00:07:7c:03:00:04:96:1d:4b:40
configure snmpv3 delete user initial engine-id 80:00:07:7c:03:00:04:96:1d:4b:40
configure snmpv3 delete user initialmd5 engine-id 80:00:07:7c:03:00:04:96:1d:4b:40
configure snmpv3 delete user initialsha engine-id 80:00:07:7c:03:00:04:96:1d:4b:40
configure snmpv3 delete user initialmd5Priv engine-id 80:00:07:7c:03:00:04:96:1d:4b:40
configure snmpv3 delete user initialshaPriv engine-id 80:00:07:7c:03:00:04:96:1d:4b:40
configure snmpv3 delete access admin sec-model usm sec-level priv
configure snmpv3 delete access initial sec-model usm sec-level noauth
configure snmpv3 delete access initial sec-model usm sec-level authnopriv
configure snmpv3 delete access v1v2c_ro sec-model snmpv1 sec-level noauth
configure snmpv3 delete access v1v2c_ro sec-model snmpv2c sec-level noauth
configure snmpv3 delete access v1v2c_rw sec-model snmpv1 sec-level noauth
configure snmpv3 delete access v1v2c_rw sec-model snmpv2c sec-level noauth
configure snmpv3 delete access v1v2cNotifyGroup sec-model snmpv1 sec-level noauth
configure snmpv3 delete access v1v2cNotifyGroup sec-model snmpv2c sec-level noauth
configure snmpv3 delete mib-view defaultUserView subtree 1.0
configure snmpv3 delete mib-view defaultUserView subtree 1.3.6.1.6.3.16
configure snmpv3 delete mib-view defaultUserView subtree 1.3.6.1.6.3.18
configure snmpv3 delete mib-view defaultUserView subtree 1.3.6.1.6.3.15.1.2.2.1.4
configure snmpv3 delete mib-view defaultUserView subtree 1.3.6.1.6.3.15.1.2.2.1.6
configure snmpv3 delete mib-view defaultUserView subtree 1.3.6.1.6.3.15.1.2.2.1.9
configure snmpv3 delete mib-view defaultAdminView subtree 1.0
configure snmpv3 delete mib-view defaultNotifyView subtree 1.0
configure snmpv3 delete community private
configure snmpv3 delete community public
configure snmpv3 add group "v1v2c_ro" user "v1v2c_ro" sec-model snmpv1
configure snmpv3 add group "v1v2c_rw" user "v1v2c_rw" sec-model snmpv1
configure snmpv3 add group "v1v2c_ro" user "v1v2c_ro" sec-model snmpv2c
configure snmpv3 add group "v1v2c_rw" user "v1v2c_rw" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser2" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser3" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser4" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser5" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser6" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser8" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser9" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser10" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser11" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser12" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser13" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser14" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser15" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser16" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser17" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser18" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser19" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser20" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser21" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser22" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser23" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser24" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser25" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser26" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser27" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser28" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser29" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser30" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser31" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser32" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser33" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser34" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser35" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser36" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser37" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser38" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser39" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser40" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser41" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser42" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser43" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser44" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser45" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser46" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser47" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser48" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser49" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser50" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser51" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser52" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser53" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser54" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser55" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser56" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser57" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser58" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser59" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser60" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser61" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser62" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser63" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser64" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser65" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser66" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser67" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser68" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser69" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser70" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser71" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser72" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser73" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser74" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser75" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser76" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser77" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser78" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser79" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser80" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser81" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser82" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser83" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser84" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser85" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser86" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser87" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser88" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser89" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser90" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser91" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser92" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser93" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser94" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser95" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser96" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser97" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser98" sec-model snmpv2c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser99" sec-model snmpv2c
configure snmpv3 add group "admin" user "admin" sec-model usm
configure snmpv3 add group "initial" user "initial" sec-model usm
configure snmpv3 add group "initial" user "initialmd5" sec-model usm
configure snmpv3 add group "initial" user "initialsha" sec-model usm
configure snmpv3 add group "initial" user "initialmd5Priv" sec-model usm
configure snmpv3 add group "initial" user "initialshaPriv" sec-model usm
configure snmpv3 add community "rw_klappstuhl" name "rw_klappstuhl" user "v1v2c_rw"
configure snmpv3 add community "ro_rucksack" name "ro_rucksack" user "v1v2c_ro"
configure snmpv3 add community "v1v2cNotifyComm11" name "ST.-1408237554.10550" user "v1v2cNotifyUser11"
configure snmpv3 add community "v1v2cNotifyComm12" name "ST.-1408237554.10550" user "v1v2cNotifyUser12"
configure snmpv3 add community "v1v2cNotifyComm13" name "ST.-1408237554.10550" user "v1v2cNotifyUser13"
configure snmpv3 add community "v1v2cNotifyComm14" name "ST.-1408237554.10550" user "v1v2cNotifyUser14"
configure snmpv3 add community "v1v2cNotifyComm15" name "ST.-1408237554.10550" user "v1v2cNotifyUser15"
configure snmpv3 add community "v1v2cNotifyComm16" name "ST.-1408237554.10550" user "v1v2cNotifyUser16"
configure snmpv3 add community "v1v2cNotifyComm17" name "ST.-1408237554.10550" user "v1v2cNotifyUser17"
configure snmpv3 add community "v1v2cNotifyComm18" name "ST.-1408237554.10550" user "v1v2cNotifyUser18"
configure snmpv3 add community "v1v2cNotifyComm19" name "ST.-1408237554.10550" user "v1v2cNotifyUser19"
configure snmpv3 add community "v1v2cNotifyComm20" name "ST.-1408237554.10550" user "v1v2cNotifyUser20"
configure snmpv3 add community "v1v2cNotifyComm21" name "ST.-1408237554.10550" user "v1v2cNotifyUser21"
configure snmpv3 add community "v1v2cNotifyComm22" name "ST.-1408237554.10550" user "v1v2cNotifyUser22"
configure snmpv3 add community "v1v2cNotifyComm23" name "ST.-1408237554.10550" user "v1v2cNotifyUser23"
configure snmpv3 add community "v1v2cNotifyComm24" name "ST.-1408237554.10550" user "v1v2cNotifyUser24"
configure snmpv3 add community "v1v2cNotifyComm25" name "ST.-1408237554.10550" user "v1v2cNotifyUser25"
configure snmpv3 add community "v1v2cNotifyComm26" name "ST.-1408237554.10550" user "v1v2cNotifyUser26"
configure snmpv3 add community "v1v2cNotifyComm27" name "ST.-1408237554.10550" user "v1v2cNotifyUser27"
configure snmpv3 add community "v1v2cNotifyComm28" name "ST.-1408237554.10550" user "v1v2cNotifyUser28"
configure snmpv3 add community "v1v2cNotifyComm29" name "ST.-1408237554.10550" user "v1v2cNotifyUser29"
configure snmpv3 add community "v1v2cNotifyComm30" name "ST.-1408237554.10550" user "v1v2cNotifyUser30"
configure snmpv3 add community "v1v2cNotifyComm31" name "ST.-1408237554.10550" user "v1v2cNotifyUser31"
configure snmpv3 add community "v1v2cNotifyComm32" name "ST.-1408237554.10550" user "v1v2cNotifyUser32"
configure snmpv3 add community "v1v2cNotifyComm33" name "ST.-1408237554.10550" user "v1v2cNotifyUser33"
configure snmpv3 add community "v1v2cNotifyComm34" name "ST.-1408237554.10550" user "v1v2cNotifyUser34"
configure snmpv3 add community "v1v2cNotifyComm35" name "ST.-1408237554.10550" user "v1v2cNotifyUser35"
configure snmpv3 add community "v1v2cNotifyComm36" name "ST.-1408237554.10550" user "v1v2cNotifyUser36"
configure snmpv3 add community "v1v2cNotifyComm37" name "ST.-1408237554.10550" user "v1v2cNotifyUser37"
configure snmpv3 add community "v1v2cNotifyComm38" name "ST.-1408237554.10550" user "v1v2cNotifyUser38"
configure snmpv3 add community "v1v2cNotifyComm39" name "ST.-1408237554.10550" user "v1v2cNotifyUser39"
configure snmpv3 add community "v1v2cNotifyComm40" name "ST.-1408237554.10550" user "v1v2cNotifyUser40"
configure snmpv3 add community "v1v2cNotifyComm41" name "ST.-1408237554.10550" user "v1v2cNotifyUser41"
configure snmpv3 add community "v1v2cNotifyComm42" name "ST.-1408237554.10550" user "v1v2cNotifyUser42"
configure snmpv3 add community "v1v2cNotifyComm43" name "ST.-1408237554.10550" user "v1v2cNotifyUser43"
configure snmpv3 add community "v1v2cNotifyComm44" name "ST.-1408237554.10550" user "v1v2cNotifyUser44"
configure snmpv3 add community "v1v2cNotifyComm45" name "ST.-1408237554.10550" user "v1v2cNotifyUser45"
configure snmpv3 add community "v1v2cNotifyComm46" name "ST.-1408237554.10550" user "v1v2cNotifyUser46"
configure snmpv3 add community "v1v2cNotifyComm47" name "ST.-1408237554.10550" user "v1v2cNotifyUser47"
configure snmpv3 add community "v1v2cNotifyComm48" name "ST.-1408237554.10550" user "v1v2cNotifyUser48"
configure snmpv3 add community "v1v2cNotifyComm49" name "ST.-1408237554.10550" user "v1v2cNotifyUser49"
configure snmpv3 add community "v1v2cNotifyComm50" name "ST.-1408237554.10550" user "v1v2cNotifyUser50"
configure snmpv3 add community "v1v2cNotifyComm51" name "ST.-1408237554.10550" user "v1v2cNotifyUser51"
configure snmpv3 add community "v1v2cNotifyComm52" name "ST.-1408237554.10550" user "v1v2cNotifyUser52"
configure snmpv3 add community "v1v2cNotifyComm53" name "ST.-1408237554.10550" user "v1v2cNotifyUser53"
configure snmpv3 add community "v1v2cNotifyComm54" name "ST.-1408237554.10550" user "v1v2cNotifyUser54"
configure snmpv3 add community "v1v2cNotifyComm55" name "ST.-1408237554.10550" user "v1v2cNotifyUser55"
configure snmpv3 add community "v1v2cNotifyComm56" name "ST.-1408237554.10550" user "v1v2cNotifyUser56"
configure snmpv3 add community "v1v2cNotifyComm57" name "ST.-1408237554.10550" user "v1v2cNotifyUser57"
configure snmpv3 add community "v1v2cNotifyComm58" name "ST.-1408237554.10550" user "v1v2cNotifyUser58"
configure snmpv3 add community "v1v2cNotifyComm59" name "ST.-1408237554.10550" user "v1v2cNotifyUser59"
configure snmpv3 add community "v1v2cNotifyComm60" name "ST.-1408237554.10550" user "v1v2cNotifyUser60"
configure snmpv3 add community "v1v2cNotifyComm61" name "ST.-1408237554.10550" user "v1v2cNotifyUser61"
configure snmpv3 add community "v1v2cNotifyComm62" name "ST.-1408237554.10550" user "v1v2cNotifyUser62"
configure snmpv3 add community "v1v2cNotifyComm63" name "ST.-1408237554.10550" user "v1v2cNotifyUser63"
configure snmpv3 add community "v1v2cNotifyComm64" name "ST.-1408237554.10550" user "v1v2cNotifyUser64"
configure snmpv3 add community "v1v2cNotifyComm65" name "ST.-1408237554.10550" user "v1v2cNotifyUser65"
configure snmpv3 add community "v1v2cNotifyComm66" name "ST.-1408237554.10550" user "v1v2cNotifyUser66"
configure snmpv3 add community "v1v2cNotifyComm67" name "ST.-1408237554.10550" user "v1v2cNotifyUser67"
configure snmpv3 add community "v1v2cNotifyComm68" name "ST.-1408237554.10550" user "v1v2cNotifyUser68"
configure snmpv3 add community "v1v2cNotifyComm69" name "ST.-1408237554.10550" user "v1v2cNotifyUser69"
configure snmpv3 add community "v1v2cNotifyComm70" name "ST.-1408237554.10550" user "v1v2cNotifyUser70"
configure snmpv3 add community "v1v2cNotifyComm71" name "ST.-1408237554.10550" user "v1v2cNotifyUser71"
configure snmpv3 add community "v1v2cNotifyComm72" name "ST.-1408237554.10550" user "v1v2cNotifyUser72"
configure snmpv3 add community "v1v2cNotifyComm73" name "ST.-1408237554.10550" user "v1v2cNotifyUser73"
configure snmpv3 add community "v1v2cNotifyComm74" name "ST.-1408237554.10550" user "v1v2cNotifyUser74"
configure snmpv3 add community "v1v2cNotifyComm75" name "ST.-1408237554.10550" user "v1v2cNotifyUser75"
configure snmpv3 add community "v1v2cNotifyComm76" name "ST.-1408237554.10550" user "v1v2cNotifyUser76"
configure snmpv3 add community "v1v2cNotifyComm77" name "ST.-1408237554.10550" user "v1v2cNotifyUser77"
configure snmpv3 add community "v1v2cNotifyComm78" name "ST.-1408237554.10550" user "v1v2cNotifyUser78"
configure snmpv3 add community "v1v2cNotifyComm79" name "ST.-1408237554.10550" user "v1v2cNotifyUser79"
configure snmpv3 add community "v1v2cNotifyComm8" name "ST.-1408237554.10550" user "v1v2cNotifyUser8"
configure snmpv3 add community "v1v2cNotifyComm80" name "ST.-1408237554.10550" user "v1v2cNotifyUser80"
configure snmpv3 add community "v1v2cNotifyComm81" name "ST.-1408237554.10550" user "v1v2cNotifyUser81"
configure snmpv3 add community "v1v2cNotifyComm82" name "ST.-1408237554.10550" user "v1v2cNotifyUser82"
configure snmpv3 add community "v1v2cNotifyComm83" name "ST.-1408237554.10550" user "v1v2cNotifyUser83"
configure snmpv3 add community "v1v2cNotifyComm84" name "ST.-1408237554.10550" user "v1v2cNotifyUser84"
configure snmpv3 add community "v1v2cNotifyComm85" name "ST.-1408237554.10550" user "v1v2cNotifyUser85"
configure snmpv3 add community "v1v2cNotifyComm86" name "ST.-1408237554.10550" user "v1v2cNotifyUser86"
configure snmpv3 add community "v1v2cNotifyComm87" name "ST.-1408237554.10550" user "v1v2cNotifyUser87"
configure snmpv3 add community "v1v2cNotifyComm88" name "ST.-1408237554.10550" user "v1v2cNotifyUser88"
configure snmpv3 add community "v1v2cNotifyComm89" name "ST.-1408237554.10550" user "v1v2cNotifyUser89"
configure snmpv3 add community "v1v2cNotifyComm9" name "ST.-1408237554.10550" user "v1v2cNotifyUser9"
configure snmpv3 add community "v1v2cNotifyComm90" name "ST.-1408237554.10550" user "v1v2cNotifyUser90"
configure snmpv3 add community "v1v2cNotifyComm91" name "ST.-1408237554.10550" user "v1v2cNotifyUser91"
configure snmpv3 add community "v1v2cNotifyComm92" name "ST.-1408237554.10550" user "v1v2cNotifyUser92"
configure snmpv3 add community "v1v2cNotifyComm93" name "ST.-1408237554.10550" user "v1v2cNotifyUser93"
configure snmpv3 add community "v1v2cNotifyComm94" name "ST.-1408237554.10550" user "v1v2cNotifyUser94"
configure snmpv3 add community "v1v2cNotifyComm95" name "ST.-1408237554.10550" user "v1v2cNotifyUser95"
configure snmpv3 add community "v1v2cNotifyComm96" name "ST.-1408237554.10550" user "v1v2cNotifyUser96"
configure snmpv3 add community "v1v2cNotifyComm97" name "ST.-1408237554.10550" user "v1v2cNotifyUser97"
configure snmpv3 add community "v1v2cNotifyComm98" name "ST.-1408237554.10550" user "v1v2cNotifyUser98"
configure snmpv3 add community "v1v2cNotifyComm99" name "ST.-1408237554.10550" user "v1v2cNotifyUser99"
configure snmpv3 add notify "defaultNotify" tag "defaultNotify"
enable snmp access
enable snmp access snmp-v1v2c
enable snmp access snmpv3
enable snmpv3 default-group
enable snmpv3 default-user
enable snmp traps
configure snmp access-profile add "_sw_admin_ip_01" first
configure snmp access-profile add "_sw_admin_ip_02" after "_sw_admin_ip_01"
configure snmp access-profile add "_sw_admin_ip_03" after "_sw_admin_ip_02"
configure snmp access-profile add "_mgmt_network" after "_sw_admin_ip_03"
configure snmp access-profile add "_core_network" after "_mgmt_network"
configure snmp access-profile add "_DenyAccess" after "_core_network"
enable snmp access vr "VR-Default"
enable snmp access vr "VR-Mgmt"
configure snmp notification-log global-entry-limit 16000
configure snmp notification-log global-age-out 1440
Photo of RajagopalSai, Gopal

RajagopalSai, Gopal, Employee

  • 60 Points
It looks like the default access and mib-views have been deleted on this switch and no replacements have been created:

configure snmpv3 delete access admin sec-model usm sec-level priv
configure snmpv3 delete access initial sec-model usm sec-level noauth
configure snmpv3 delete access initial sec-model usm sec-level authnopriv
configure snmpv3 delete access v1v2c_ro sec-model snmpv1 sec-level noauth
configure snmpv3 delete access v1v2c_ro sec-model snmpv2c sec-level noauth
configure snmpv3 delete access v1v2c_rw sec-model snmpv1 sec-level noauth
configure snmpv3 delete access v1v2c_rw sec-model snmpv2c sec-level noauth
configure snmpv3 delete access v1v2cNotifyGroup sec-model snmpv1 sec-level noauth
configure snmpv3 delete access v1v2cNotifyGroup sec-model snmpv2c sec-level noauth
configure snmpv3 delete mib-view defaultUserView subtree 1.0
configure snmpv3 delete mib-view defaultUserView subtree 1.3.6.1.6.3.16
configure snmpv3 delete mib-view defaultUserView subtree 1.3.6.1.6.3.18
configure snmpv3 delete mib-view defaultUserView subtree 1.3.6.1.6.3.15.1.2.2.1.4
configure snmpv3 delete mib-view defaultUserView subtree 1.3.6.1.6.3.15.1.2.2.1.6
configure snmpv3 delete mib-view defaultUserView subtree 1.3.6.1.6.3.15.1.2.2.1.9
configure snmpv3 delete mib-view defaultAdminView subtree 1.0
configure snmpv3 delete mib-view defaultNotifyView subtree 1.0

Since there are no access entries associated with v1v2c_ro/rw, access to this switch using these groups is being denied.

Try recreating the deleted access and mib-view entries to restore SNMP connectivity to the switch.
Photo of jackmikel

jackmikel

  • 310 Points 250 badge 2x thumb
A step forward:
After comparing the config files before and after the update (Thank you Stephen!)
I found that the whole part with "configure snmpv3 add user ..." is missing, respectively was deleted.
This happened after the upgrade, when Ridgeline was mentioning the BD8810 is "Not responding to SNMP". I tried to clean up. Not a good idea.
No I corrected this part, with adding the users and allowing access. And now Netsight 6.1 is able to handle the BD8810 via SNMP again.
Only Ridgeline 3.1 still holds the view that "Not responding to SNMP. Please check..."
It doesn’t  matter whether the BD8810 or the BDX8 is queried trough SNMP from Ridgeline. With the X460 the problem does not exist.
Photo of jackmikel

jackmikel

  • 310 Points 250 badge 2x thumb
Sorry Sai,
I composed my anwser at the same time you brought your solution up. You are right.
Photo of Stephen Stachal

Stephen Stachal

  • 80 Points 75 badge 2x thumb
Do all your access profiles still exist? any recent changes to them?

you can use the command "ls" to list all the files and policies

configure snmp access-profile add "_sw_admin_ip_01" first
configure snmp access-profile add "_sw_admin_ip_02" after "_sw_admin_ip_01"
configure snmp access-profile add "_sw_admin_ip_03" after "_sw_admin_ip_02"
configure snmp access-profile add "_mgmt_network" after "_sw_admin_ip_03"
configure snmp access-profile add "_core_network" after "_mgmt_network"
configure snmp access-profile add "_DenyAccess" after "_core_network"
Photo of Stephen Stachal

Stephen Stachal

  • 80 Points 75 badge 2x thumb
They should be but also verify the files are on both MSM-A and B if you are running redundant MSMs

"telnet msm b or a"
Photo of jackmikel

jackmikel

  • 310 Points 250 badge 2x thumb

I checked the access-profiles, but they didn't changed and are still there.
Even a "conf snmp access-profile none" on the BDs doesn't help.
Have to concentrate on Ridgeline 3.1 and the BDs in conjunction with XOS-Version 15.5.3.4 v1553b4-patch1-6. Maybe it’s an internal problem of Ridgeline 3.1, who knows?
Netsight 6.1 has no problems to contact the BDs via snmpv2.
Meanwhile I’m engaged with snmpv3.
And with Netsight 6.1 it's working fine, I can discover and manage the BDX8 and the BD8810.

With Ridgeline 3.1 I can discover the devices with snmpv3 (auth: md5, priv: des), but after a while in the syslog there are entries: "MSM-A: Login failed through SNMPv3 - not in life time"
What does "not in life time" mean??

Photo of jackmikel

jackmikel

  • 310 Points 250 badge 2x thumb

GTAC has the answer for the Ridgeline SNMPv3 Problem "not in life time" for XOS-Version 15.5 and 15.6

Ridgeline is sending numerous empty get requests with engine boots and engine time values which are set as 0.
This is resulting in unnecessary authentication failed traps being triggered from the device and EXOS log messages indicating that login failed through SNMPv3. It will be solved in Ridgeline 4.1 SP2.

 

http://gtacknowledge.extremenetworks.com/articles/Solution/Warn-SNMP-Master-AuthFail-Login-failed-through-SNMPv3-not-in-life-time

Now I can decide to update Ridgeline to version 4.1 and work with SNMPv3 or start from the beginning to get my BDs working again with SNMPv2 in conjunction with Ridgline 3.1

Photo of Eva Gilszki

Eva Gilszki

  • 80 Points 75 badge 2x thumb
I had the same issue yesterday with Ridgeline SNMP communication after upgrading our Blackdiamond 8810 to the recommended fw version.
this command solved it:
configure snmp compatibility ip-fragmentation allow
(Edited)