1

I am facing this issue in my snmpv3 deployment. In some of catalyst cisco switches I am using snmpv3 with authpriv as sha and aes256. The porblem is that when I run an snmpwalk for v3 credentials it timesout. Though I have noticed that if i change the authpriv to MD5 and DES it runs fine and results successful.

I wanted to know why this behaviour on IOS accepts the sha/aes but doesn't respond? Any help?

Improve this question
8
  • What are the switch models, IOS versions, and SNMP configurations?
    – Ron Maupin ♦
    Commented Jan 31, 2017 at 16:32
  • I didn't mention the switch model and IOS version as this is not with a specific IOS or switch model. I have cat6500 running ios v15.x and some other cat like 3700 series with ios v12.
    – Rsingh
    Commented Jan 31, 2017 at 16:42
  • The answer could actually depend on the IOS version. You should edit your question to include the IOS version and the SNMP configurations.
    – Ron Maupin ♦
    Commented Jan 31, 2017 at 16:50
  • It is unreadable in a comment. Edit your question to include the information, and use the Preformatted Test feature ({}).
    – Ron Maupin ♦
    Commented Jan 31, 2017 at 17:14
  • this is what I am using in my devices and the version of device { CSR1#sh ver Cisco IOS Software, s72033_rp Software (s72033_rp-ADVENTERPRISEK9-M), Version 15.1(2)SY9, RELEASE SOFTWARE (fc1) snmp config:<br/> snmp-server group snmpgroup v3 priv read v1default write v1default access MGMT-ACL snmp-server user User Group v3 auth sha xyz priv aes 256 abc access MGMT-ACL snmp-server host ip ver 3 priv User }
    – Rsingh
    Commented Feb 2, 2017 at 5:09

1 Answer 1

Reset to default
0

Found the solution, it was the issue with snmpwalk in linux system, there is no provision of selecting AES 256 and by default it takes AES128 key which was mis-mtach.

Improve this answer
1
  • You should accept your answer so that the question doesn't keep popping up forever, looking for an answer.
    – Ron Maupin ♦
    Commented Feb 15, 2017 at 4:03

Not the answer you're looking for? Browse other questions tagged or ask your own question.