Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Flatly)
  • No Skin
Collapse
Brand Logo

NetXMS Forum

  1. Home
  2. Support
  3. SNMPV3

SNMPV3

Scheduled Pinned Locked Moved Support
38 Posts 6 Posters 256.3k Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • G
    G
    gmonk63
    wrote on last edited by
    #4

    Hmm... Probly a vendor issue then ?  Are you using AuthPriv  on your devices ?

    Thanks for you help

    1 Reply Last reply
    0
    • G
      G
      gmonk63
      wrote on last edited by
      #5

      ok after doing some packet captures there does seem to be a slight difference in response from netxms .. after the initial report from the switch which includes the engineid nextxms fails to include the engineid in following get request messages.  I have verified that both snmpb and using net-snmp command line from my laptop both work and all but netxms includes the engineid.  Not sure if this is still a vendor issues or not but the specific  switch i am testing is a Ruggedcom RS900


      snmpb.png

      snmpgetnext.png

      netxms.png

      1 Reply Last reply
      0
      • T
        T
        tomaskir
        wrote on last edited by
        #6

        Which version of NetXMS are those captures from?

        1 Reply Last reply
        0
        • G
          G
          gmonk63
          wrote on last edited by
          #7

          1.2.17  I also tried 2.0  with out any luck but I did not do any captures

          1 Reply Last reply
          0
          • T
            T
            tomaskir
            wrote on last edited by
            #8

            Could you please try the same captures with 2.0-RC2?

            I remember there were some changes to SNMPv3 in the 2.0 branch that fixed some edge-cases... but I might be wrong.
            (and I dont know if any of those will apply to you or not)

            Thanks in advance!

            1 Reply Last reply
            0
            • G
              G
              gmonk63
              wrote on last edited by
              #9

              Here you go.. Its seems worse with 2.0-RC2  I had to reboot my switch several times because it was continually trying several times per second and by default the ruggedcoms will quit responding after so many failed attempts. I also attached the switch debug screen. I have also tried 1.2.17 linux version running on ubuntu thinking maybe it was a windows thing


              netxsm_2.0-RC2.png

              Switch_debug.png

              1 Reply Last reply
              0
              • V
                V
                Victor Kirhenshtein
                wrote on last edited by
                #10

                Hi,

                it could be a bug in NetXMS SNMP library. Is it possibe to get access over SNMP to your switch so we can test and fix it? Please send me private message if that's possible.

                Best regards,
                Victor

                1 Reply Last reply
                0
                • V
                  V
                  Victor Kirhenshtein
                  wrote on last edited by
                  #11

                  Hi,

                  I've fixed bug in SNMP library, thanks for the access to the switch! Fix will be included in 2.0 release. If you built NetXMS from sources I can provide you a patch.

                  Best regards,
                  Victor

                  1 Reply Last reply
                  0
                  • Dani@M3TU
                    Dani@M3TU
                    Dani@M3T
                    wrote on last edited by
                    #12

                    Hi Victor

                    I would be interested in the source code patch. Is the problem with the SNMP auth. failures a separate thing?

                    Thanks
                    Dani

                    1 Reply Last reply
                    0
                    • G
                      G
                      gmonk63
                      wrote on last edited by
                      #13

                      could you provide me the patch

                      1 Reply Last reply
                      0
                      • G
                        G
                        gmonk63
                        wrote on last edited by
                        #14

                        And by the way thank you for the quick fix ....you mentioned the fix will be released in 2.0 ... ive been wanting to move to 2.0 rc but wasnt sure how stable things are and didnt want to have to migrate everything from 1.2  .. how far along would you guess 2.0 is from being stable release

                        1 Reply Last reply
                        0
                        • V
                          V
                          Victor Kirhenshtein
                          wrote on last edited by
                          #15

                          Hi,

                          patch for src/snmp/libnxsnmp/transport.cpp attached.

                          We plan to make 2.0 release before December 10th.

                          Best regards,
                          Victor


                          snmpv3.patch

                          1 Reply Last reply
                          0
                          • Dani@M3TU
                            Dani@M3TU
                            Dani@M3T
                            wrote on last edited by
                            #16

                            Thanks Victor for the patch and your work in general!!
                            Now I'm only waiting for a patch for the snmp authentication failures (other thread). Then I hope our SNMP problems are gone in NetXMS.

                            Dani

                            1 Reply Last reply
                            0
                            • Dani@M3TU
                              Dani@M3TU
                              Dani@M3T
                              wrote on last edited by
                              #17

                              We have a new problem with SNMP, maybe something similar as the points above.

                              We use NetXMS V2.0-RC2 compiled with patched transport.cpp (I attached the patched one).

                              After Software Update on some ZyXEL Access-Points these devices stop responding to SNMPv3 (SHA1, AES) after a while. I also checked by snmpwalk on command line. I have to reboot the affected Access-Points, but after a short while the same. When I disable all SNMP on these nodes in NetXMS, SNMP on these APs are stable (checked by snmpwalk on command line).
                              Which information do you need for further troubleshooting?

                              thanks
                              Dani


                              transport.cpp

                              1 Reply Last reply
                              0
                              • V
                                V
                                Victor Kirhenshtein
                                wrote on last edited by
                                #18

                                Hi,

                                how fast device stops responding to SNMP? If you disable SNMP in NetXMS and run snmpwalk or snmpget from command line in a loop, will it have the same effect?

                                Best regards,
                                Victor

                                1 Reply Last reply
                                0
                                • Dani@M3TU
                                  Dani@M3TU
                                  Dani@M3T
                                  wrote on last edited by
                                  #19

                                  Hi Victor

                                  First I thought it's only by configuration polls. But some APs 'crash' quite fast, after a few minutes. But I also saw APs where it lasts longer. I can start about 50 snmpwalks from command line in short time without any problems (about 20 OIDs each). Only disabling configuration polls on these nodes is not enough. I have to disable SNMP completely for these nodes. If SNMP is completely disabled the SNMP service on these APs are stable permanent.

                                  thanks
                                  Dani

                                  1 Reply Last reply
                                  0
                                  • V
                                    V
                                    Victor Kirhenshtein
                                    wrote on last edited by
                                    #20

                                    Try to disable routing table and topology polls.

                                    Best regards,
                                    Victor

                                    1 Reply Last reply
                                    0
                                    • Dani@M3TU
                                      Dani@M3TU
                                      Dani@M3T
                                      wrote on last edited by
                                      #21

                                      Ok I will try on one AP.
                                      So only NetXMS agent-, routing table- and topology-polling are disabled, everything else is enabled again. I will check and report.

                                      Beside I also have SNMP_AUTH_FAILURE events on these nodes (since V2.0-RC2)

                                      1 Reply Last reply
                                      0
                                      • Dani@M3TU
                                        Dani@M3TU
                                        Dani@M3T
                                        wrote on last edited by
                                        #22

                                        Hi Victor

                                        The test AP is now stable for 18h. I only have tested with one of the affected APs because of some other APs I do not have credentials to reboot. I have to contact my customer each time.
                                        Do you have a suspicion?

                                        thanks
                                        Dani

                                        1 Reply Last reply
                                        0
                                        • G
                                          G
                                          gmonk63
                                          wrote on last edited by
                                          #23

                                          Dani@M3T

                                          I think you are still experiencing  this issue https://www.netxms.org/forum/configuration/snmp-credentials/  I dont think the patch fixed this particular error where even though snmpv3 credentials now work the server is still sending out some requests with public as default ..  I am seeing the same thing on my test switch snmpv3 and v2 works great now but I am still seeing snmp auth failures  about 100 a day but on our switches there is a threshold that can be set  I think the default is 10 failures in a minute before its stops responding which i increased untill this gets fixed ....

                                          1 Reply Last reply
                                          0

                                          Hello! It looks like you're interested in this conversation, but you don't have an account yet.

                                          Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

                                          With your input, this post could be even better 💗

                                          Register Login
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          Powered by NodeBB Contributors
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • Users
                                          • Groups