Does CloudIQ use SNMP V2

[Christopher_Tay]

I have recently been experimenting with Extreme Cloud IQ and have set up a connect account to monitor my EXOS switches.

I have so far added 3 X460-G2 switches.  My question is, does Cloud IQ use SNMP v2 to communicate with the switches?  I have recently cleaned up the SNMP configuration throughout the network and disabled SNMP v1v2 on all switches.  After adding the X460-G2 switches I noticed that the SNMP v1v2 access was enabled again.

If it is the case that Cloud IQ requires SNMP v2 then is there an access profile that can be set up to improve security?

Also, one of the switches that I added began to continually send a trap that said “ authenticationFailure Incorrect Community Name 127.0.0.1” Once I deleted the device from Cloud IQ the trap stopped. Any idea what caused this?

Thank you,

Chris

[AntonS]

Hello,

why is it necessary to enable SNMP DEFAULT communities in XOS so that the device is showing correct information in Cloud IQ?

OK there is the possibillity to have an accessprofile, but default communities should always be disabled
https://extremeportal.force.com/ExtrArticleDetail?an=000088438&q=lockout

is there no other possibility?

Best Regards
Anton

[Ryan_W · Accepted solution]

Hey Christopher,

I believe this article may be able to answer some of your questions:

https://extremeportal.force.com/ExtrArticleDetail?an=000061429

Based on this information you might need to confirm SNMPv3 Default profiles are enabled on the switch.

For SNMP security you can add a SNMP Profile:

https://extremeportal.force.com/ExtrArticleDetail?an=000082594&q=%20SNMP%20Access%20Profile

Regards,

[Christopher_Tay]

Hello Sam,

I read over the article and it discusses how to add a separate SNMP server for devices onboarded to XIQ to communicate with.  These servers can indeed be communicated with using any of the SNMP protocols. 

My question had to do with how XIQ communicates natively with the switches onboarded to it.

I am having trouble getting switches to fully onboard.  Something is wrong with SNMPv2 encrypted security string.  XIQ is constantly trying to access the switch and the switch is refusing the connection due to “  <Warn:SNMP.Master.AuthFail> Login failed through SNMPv1/v2c - bad community name (127.0.0.1)”

I thought if I could switch to SNMPv3 XIQ would be able to contact the switches easier.

Thank you,

Chris

[SamPirok]

Hi Christopher, thank you for your patience, I was able to confirm that XIQ can use SNMP v1, v2, or v3, whichever works best for you. This page goes in to more details on available SNMP settings:

 https://docs.aerohive.com/330000/docs/help/english/ng/Content/gui/configuration/managing-snmp-server...