Network Switch / Router Monitoring Wizard via SNMPv3

[WVUhealth]

I cannot add or update devices with the wizard using snmpv3.. V2 it scans the device just fine.. Plus we still have 100s of device still being monitored over v3 just fine..
I can still snmpwalk the devices from cli just fine..

output of web gui
Bandwidth and Port Status
No ports were detected on the switch. Possible reasons for this include:
The switch is currently down
The switch does not exist at the address you specified
SNMP support on the switch is disabled
Troubleshooting Tip:
If you keep experiencing problems with the switch wizard scan, login to the Nagios XI server as the root user and execute the following command:

!! private info replaced with $$$$
/usr/bin/cfgmaker --show-op-down --noreversedns --zero-speed '100000000' --enablesnmpv3 --snmp-options=:::::3 --username='$$$' --authprotocol='sha' --authpassword='$$$' --privprotocol='aes' --privpassword='$$$' --contextengineid=0 '1middle1'

Send the output of the command and a description of your problem to the Nagios support team by posting to our online support forum.

Here is the output private info replaced with $$$$
[root@dragon ~]# /usr/bin/cfgmaker --show-op-down --noreversedns --zero-speed '100000000' --enablesnmpv3 --snmp-options=:::::3 --username='$$$' --authprotocol='sha' --authpassword='$$$' --privprotocol='aes' --privpassword='$$$' --contextengineid=0 ''
Only des, 3desede, aescfb128, aescffb192 and aescfb256 are defined for --privprotocol at /usr/bin/cfgmaker line 1523.

snmpv3 is on switch is sha and aes 128

[rkennedy]

I believe this is because the privprotocol is set to AES. What happens if you run the command with AESCFB128? Does it work?

If it works with AESCFB128, follow these steps to adjust the wizard (we already have a FR request in for this, but this was a hack I put together not too long ago.) -

Open /usr/local/nagiosxi/html/includes/configwizards/switch/switch.inc.php and change line 241 from -

Code: Select all

                          <option value="AES" ' . is_selected($snmpopts["v3_priv_proto"], "AES128") . '>AES</option>

to -

Code: Select all

                          <option value="AESCFB128" ' . is_selected($snmpopts["v3_priv_proto"], "AESCFB128") . '>AESCFB128</option>

I tested on my machine and it seems to work by generating this line -

Code: Select all

/usr/bin/cfgmaker --show-op-down --noreversedns --zero-speed '100000000' --enablesnmpv3 --snmp-options=:::::3 --username='test' --authprotocol='md5' --authpassword='1' --privprotocol='aescfb128' --privpassword='2' --contextengineid=0 '5.4.3.2'

(taken from https://support.nagios.com/forum/viewto ... 16&t=38516)

[tgriep]

Another possible cause of this is somehow your server's MRTG package was downgraded to an older version.
To reinstall the latest version or MRTG, follow this Knowledge Base article for the instructions to do that.
https://support.nagios.com/kb/article.php?id=511

[WVUhealth]

You fixed it!

Sorry i missed the original post May 23rd ..

Close this thread .

[tgriep]

If you ever upgrade the Network Switch / Router Wizard in the future, those settings will will get over written but the latest version of MRTG works fine without having to edit the switch.inc.php file.
Go through the KB article and put the switch.inc.php back and see if that works for you.