Nagios XI SNMPv3 & Interface Status Issue

[TByrdWA]

Hello,

I am trying to get SNMPv3 set up on my company's network and I'm having an issue with the check_ifoperstatnag command. Any time I run it I get a "No info is being retrieved." output.

I am currently testing on a Catalyst 3850-NM-4-1G

Additionally, when I run the wizard to add a new switch Nagios XI states that the ports start at "port 8." In this case port 8 = Gi1/0/1, from there the ports progress to around 45(this number includes VLANs on the switch) on a 24 port switch.

Please let me know what kind of information you need to help move this along, I am new to this system so please be kind.

Key Notes:
-Implementing Cisco 3850 into Nagios XI with Network Switch/Router Wizard
-Network Switch/Router Wizard version: 2.5.2 "Up to date"
-Wizard Shows ports starting at port 8 (Example typed out below)
-Bandwidth check works fine.
-Status being check via: check_ifoperstatng
-Run Check Command Output:

[nagios@hw-nagios-xi ~]$ /usr/local/nagios/libexec/check_ifoperstatnag 8 -v3 -u 'NAGIOSXI' -A '$#GK3vuL6fH3' -x 'AES' -X 'oqXMf(86^vFX' -a 'SHA' -l 'authPriv' 10.10.10.253
UNKNOWN - No info is being retrieved.




Wizard Bandwidth and Port Status Example:

Port port name port description max speed service description bandwidth port status
Check/Uncheck Check/Uncheck Check/Uncheck
Port 8 Gi1/0/1 GigabitEthernet1/0/1 1.00 Gps Gi1/0/1 leaving out this is a checkbox

Thank you,
TByrdWA

[jdunitz]

Hello!

So, according to the usage message for check_ifoperstatnag, you're supposed to be passing it an interface index, which could be zero.

Usage $0: <interface index> <snmpget options>
Check_ifoperstatus requires that the first argument be the interface index that this interface can be found at under the remote devices snmp tree.
This should always be a positive integer, or zero.
All options beyond the first, are arguments that must follow the snmpget command line parameters.

So there's that.

Now for your second part of your question, the error you're getting implies that there's some kind of authentication issue with SNMP v3, yet you were able to get the wizard to at least sort of work. Are you sure about your passwords and encryption settings?

One more possibility is that because you have some weird characters in your passwords, the shell could be eating them.
Do you have the ability to test this temporarily with simpler passwords just to rule that out? If not, you may try it with double quotes instead of single. You may also find it helpful to test with snmpget if you have any trouble, just in case check_ifoperstatnag is doing something we don't expect (which would surprise me, but it's worth trying it just to be sure).

Hope that helps!

--Jeffrey

[TByrdWA]

Hi Jeffrey,

Thank you for getting back to me on this. So I did find out that I port 8 is the ifindex port for interface 1/0/1, so that looks good.

I looked into the password being the possible issue, when I set the switch snmp to no auth and when set to a simple password I am getting the same feed back from Nagios saying " "UNKNOWN - No info is being retrieved."

I am looking into snmpget, but I'm not seeing it as a listed command in our system. I'll most likely need to install the plugin.

Thank you again for getting back to me so soon!

-Tyler

[jdunitz]

If you do a "yum install net-snmp-utils", it'll install snmpget (and a few other things).

--Jeffrey

[TByrdWA]

Jeffrey,

Thank you for that.

So, update. SNMPv2c works perfectly SNMPv3 does not. I used SNMP walk using v2c and everything checks out fine, but no matter how I configure SNMPv3 on the switch, authpriv, noauthPriv, noAuthnoPriv the result is the same. With SNMP v2c I get the status checks I'm looking for, I just don't want to sacrifice security here.

-Tyler

[jdunitz]

Do you have any other products set up to use SNMPv3 that can successfully talk to your switch?

Just trying to isolate if it's a misconfiguration on one side or the other, or another kind of problem we should be looking for.

Thanks!

--Jeffrey