<![CDATA[SNMPV3]]>Has any one gotten V3 to work correctly ?  Ive tried both 1.2.17 and 2.0RC  and it seems to have issues in both versions .. Im querying a switch for sys.name and I can pull that same information using SNMPB client  no problems but every time i try netxms i have problems  is this a known problem

]]>https://forum.netxms.org/topic/4092/snmpv3RSS for NodeFri, 13 Nov 2026 06:08:18 GMTMon, 09 Nov 2015 23:45:38 GMT60<![CDATA[Reply to SNMPV3 on Tue, 15 Dec 2015 18:38:34 GMT]]>In my opinion I would say yes! (11h of test)

]]>https://forum.netxms.org/post/18628https://forum.netxms.org/post/18628Tue, 15 Dec 2015 18:38:34 GMT<![CDATA[Reply to SNMPV3 on Tue, 15 Dec 2015 18:36:43 GMT]]>Is the also a solution for this topic

https://www.netxms.org/forum/configuration/snmp-credentials/

im still hesitant to upgrade to 2.0 because i really dont want to have to reset over 200 switches  due to the  wrong community string being sent out repeatedly

]]>https://forum.netxms.org/post/18627https://forum.netxms.org/post/18627Tue, 15 Dec 2015 18:36:43 GMT<![CDATA[Reply to SNMPV3 on Tue, 15 Dec 2015 16:08:59 GMT]]>The SNMP_AUTH_FAILURE events are gone!
For the other problems I need more time to test.

thanks for the fixes
Dani

]]>https://forum.netxms.org/post/18625https://forum.netxms.org/post/18625Tue, 15 Dec 2015 16:08:59 GMT<![CDATA[Reply to SNMPV3 on Tue, 15 Dec 2015 07:47:01 GMT]]>Thanks Alex for the fast fix

Now downloading the snapshot from download site on website, './reconf', 'configure...', 'make',... works!

]]>https://forum.netxms.org/post/18619https://forum.netxms.org/post/18619Tue, 15 Dec 2015 07:47:01 GMT<![CDATA[Reply to SNMPV3 on Mon, 14 Dec 2015 22:36:31 GMT]]>I've fixed that, now snapshots should work as well

]]>https://forum.netxms.org/post/18617https://forum.netxms.org/post/18617Mon, 14 Dec 2015 22:36:31 GMT<![CDATA[Reply to SNMPV3 on Mon, 14 Dec 2015 22:27:40 GMT]]>Script, which generate this header require git repo, not a snapshot. It's a bug.
However, if you clone repo instead of using snapshot – it will work.
Repository url for clone is https://git.netxms.org/public/netxms.git

P.S. don't forget to switch branch to "develop" (git checkout develop)

]]>https://forum.netxms.org/post/18616https://forum.netxms.org/post/18616Mon, 14 Dec 2015 22:27:40 GMT<![CDATA[Reply to SNMPV3 on Mon, 14 Dec 2015 20:59:47 GMT]]>Thanks Tomas.

I tried to compile hourly snapshot from git repo. But I get this error:

make[3]: Entering directory `/usr/src/netxms-2.0-dev-2015-12-14/src/libstrophe'
  CC       libstrophe_la-auth.lo
In file included from ../../include/nms_common.h:78:0,
                 from auth.c:19:
../../include/netxms-version.h:27:30: fatal error: netxms-build-tag.h: No such file or directory
 #include <netxms-build-tag.h>
                              ^
compilation terminated.
make[3]: *** [libstrophe_la-auth.lo] Error 1
make[3]: Leaving directory `/usr/src/netxms-2.0-dev-2015-12-14/src/libstrophe'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/usr/src/netxms-2.0-dev-2015-12-14/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/src/netxms-2.0-dev-2015-12-14'
make: *** [all] Error 2

autoconf, flex, bison, libtool are installed.
What can I do?

]]>https://forum.netxms.org/post/18615https://forum.netxms.org/post/18615Mon, 14 Dec 2015 20:59:47 GMT<![CDATA[Reply to SNMPV3 on Mon, 14 Dec 2015 13:37:56 GMT]]>Yes, you can compile from the hourly snapshot of GIT repo and test with that.
The fixes were mostly to snmp in relation to agent proxying and to snmp discovery, but maybe you will see some difference.

If none of these help (so your issue is still present after testing these newest changes), we will know yours is a totally separate issue.

The develop branch is pretty stable at the moment (I run 2 medium sized installs ~150 nodes each on it atm.), but of course be advised that it is not released code and consider backups of db/server before deploying it 🙂

]]>https://forum.netxms.org/post/18608https://forum.netxms.org/post/18608Mon, 14 Dec 2015 13:37:56 GMT<![CDATA[Reply to SNMPV3 on Mon, 14 Dec 2015 13:17:27 GMT]]>Hi Tomas

I normaly compile from 'official' sources (at the moment V2.0-RC2) on Linux, but I have never built from develop branch.
Do you mean compiling only the server from sources from hourly Snapshot of GIT repository?

Thanks
Dani

]]>https://forum.netxms.org/post/18607https://forum.netxms.org/post/18607Mon, 14 Dec 2015 13:17:27 GMT<![CDATA[Reply to SNMPV3 on Mon, 14 Dec 2015 13:05:17 GMT]]>There has been a bunch of SNMP discovery fixes in the develop branch this weekend, any chance you can build from develop and try if issues still persist?

]]>https://forum.netxms.org/post/18606https://forum.netxms.org/post/18606Mon, 14 Dec 2015 13:05:17 GMT<![CDATA[Reply to SNMPV3 on Mon, 14 Dec 2015 13:01:25 GMT]]>I found a hint about this problem in the local log file of the affected node. There is a system protection function which blocks the SNMP get requests from the NetXMS server because of requests with null community string (CVE-1999-0517). In the communication settings of this NetXMS node there are valid SNMPv3 credentials of course.
So maybe this problem has the same reason as the 'SNMP auth. failures'.

]]>https://forum.netxms.org/post/18605https://forum.netxms.org/post/18605Mon, 14 Dec 2015 13:01:25 GMT<![CDATA[Reply to SNMPV3 on Fri, 11 Dec 2015 15:44:51 GMT]]>I will try it with a support case at the vendor of the APs.

Another problem on other SNMP enabled nodes:
Suddenly no SNMP data is possible to poll. But the SNMP agent on these nodes are fine (test by snmpwalk on command line).
When I restart netxmsd everything is fine again. It's also with SNMPv3.

]]>https://forum.netxms.org/post/18584https://forum.netxms.org/post/18584Fri, 11 Dec 2015 15:44:51 GMT<![CDATA[Reply to SNMPV3 on Fri, 11 Dec 2015 10:17:53 GMT]]>Hi Victor

I made these tests:

  • reenabled routing table poll, waiting 20h -> SNMP agent on node still replying
  • reenable topology polling, waiting about 20h -> SNMP agent dead

But what can we do? Is it a problem in NetXMS or in SNMP implementation on node? If it is the second I need good arguments for there support 😉

edit:
A later test with disabled topology poll -> SNMP agent dead again
So the problem is not fixed to topology poll 😞

thanks
Dani

]]>https://forum.netxms.org/post/18542https://forum.netxms.org/post/18542Fri, 11 Dec 2015 10:17:53 GMT<![CDATA[Reply to SNMPV3 on Wed, 02 Dec 2015 09:14:41 GMT]]>So it seems that topology or routing table polls cause SNMP agent hang in access points. Most likely it's a bug in SNMP agent. We can try to narrow it further by enabling one of the polls. Topology poll usually do more requests than routing table poll.

Best regards,
Victor

]]>https://forum.netxms.org/post/18504https://forum.netxms.org/post/18504Wed, 02 Dec 2015 09:14:41 GMT<![CDATA[Reply to SNMPV3 on Tue, 01 Dec 2015 19:25:35 GMT]]>I know the other issue. But I'm not so sure it is the same. One test node only with deactivated topology and routing table polling is stable for 24h.

]]>https://forum.netxms.org/post/18500https://forum.netxms.org/post/18500Tue, 01 Dec 2015 19:25:35 GMT<![CDATA[Reply to SNMPV3 on Tue, 01 Dec 2015 18:16:19 GMT]]>Dani@M3T

I think you are still experiencing  this issue https://www.netxms.org/forum/configuration/snmp-credentials/  I dont think the patch fixed this particular error where even though snmpv3 credentials now work the server is still sending out some requests with public as default ..  I am seeing the same thing on my test switch snmpv3 and v2 works great now but I am still seeing snmp auth failures  about 100 a day but on our switches there is a threshold that can be set  I think the default is 10 failures in a minute before its stops responding which i increased untill this gets fixed ....

]]>https://forum.netxms.org/post/18498https://forum.netxms.org/post/18498Tue, 01 Dec 2015 18:16:19 GMT<![CDATA[Reply to SNMPV3 on Tue, 01 Dec 2015 13:33:39 GMT]]>Hi Victor

The test AP is now stable for 18h. I only have tested with one of the affected APs because of some other APs I do not have credentials to reboot. I have to contact my customer each time.
Do you have a suspicion?

thanks
Dani

]]>https://forum.netxms.org/post/18496https://forum.netxms.org/post/18496Tue, 01 Dec 2015 13:33:39 GMT<![CDATA[Reply to SNMPV3 on Tue, 01 Dec 2015 11:12:36 GMT]]>Ok I will try on one AP.
So only NetXMS agent-, routing table- and topology-polling are disabled, everything else is enabled again. I will check and report.

Beside I also have SNMP_AUTH_FAILURE events on these nodes (since V2.0-RC2)

]]>https://forum.netxms.org/post/18477https://forum.netxms.org/post/18477Tue, 01 Dec 2015 11:12:36 GMT<![CDATA[Reply to SNMPV3 on Mon, 30 Nov 2015 20:59:56 GMT]]>Try to disable routing table and topology polls.

Best regards,
Victor

]]>https://forum.netxms.org/post/18472https://forum.netxms.org/post/18472Mon, 30 Nov 2015 20:59:56 GMT<![CDATA[Reply to SNMPV3 on Mon, 30 Nov 2015 20:58:54 GMT]]>Hi Victor

First I thought it's only by configuration polls. But some APs 'crash' quite fast, after a few minutes. But I also saw APs where it lasts longer. I can start about 50 snmpwalks from command line in short time without any problems (about 20 OIDs each). Only disabling configuration polls on these nodes is not enough. I have to disable SNMP completely for these nodes. If SNMP is completely disabled the SNMP service on these APs are stable permanent.

thanks
Dani

]]>https://forum.netxms.org/post/18470https://forum.netxms.org/post/18470Mon, 30 Nov 2015 20:58:54 GMT<![CDATA[Reply to SNMPV3 on Mon, 30 Nov 2015 20:46:08 GMT]]>Hi,

how fast device stops responding to SNMP? If you disable SNMP in NetXMS and run snmpwalk or snmpget from command line in a loop, will it have the same effect?

Best regards,
Victor

]]>https://forum.netxms.org/post/18467https://forum.netxms.org/post/18467Mon, 30 Nov 2015 20:46:08 GMT<![CDATA[Reply to SNMPV3 on Sun, 29 Nov 2015 10:45:50 GMT]]>We have a new problem with SNMP, maybe something similar as the points above.

We use NetXMS V2.0-RC2 compiled with patched transport.cpp (I attached the patched one).

After Software Update on some ZyXEL Access-Points these devices stop responding to SNMPv3 (SHA1, AES) after a while. I also checked by snmpwalk on command line. I have to reboot the affected Access-Points, but after a short while the same. When I disable all SNMP on these nodes in NetXMS, SNMP on these APs are stable (checked by snmpwalk on command line).
Which information do you need for further troubleshooting?

thanks
Dani

transport.cpp

]]>https://forum.netxms.org/post/18450https://forum.netxms.org/post/18450Sun, 29 Nov 2015 10:45:50 GMT<![CDATA[Reply to SNMPV3 on Wed, 18 Nov 2015 15:41:47 GMT]]>Thanks Victor for the patch and your work in general!!
Now I'm only waiting for a patch for the snmp authentication failures (other thread). Then I hope our SNMP problems are gone in NetXMS.

Dani

]]>https://forum.netxms.org/post/18350https://forum.netxms.org/post/18350Wed, 18 Nov 2015 15:41:47 GMT<![CDATA[Reply to SNMPV3 on Wed, 18 Nov 2015 11:31:12 GMT]]>Hi,

patch for src/snmp/libnxsnmp/transport.cpp attached.

We plan to make 2.0 release before December 10th.

Best regards,
Victor

snmpv3.patch

]]>https://forum.netxms.org/post/18344https://forum.netxms.org/post/18344Wed, 18 Nov 2015 11:31:12 GMT