Nagios XI and SNMPv3

[mbarnes88]

I'm trying to get Nagios setup to monitor a few APC UPS's via SNMPv3 instead of v1 like I am currently using. I've got a SNMPv3 user, auth and priv passwords setup on the UPS's and verified SNMPv3 is enabled on them. However, when I try to query the device through Nagios using SNMPv3 I'm getting a CRITICAL - Plugin timed out while executing system call error. I've since gone out and grabbed up the recommended MIB file from APC and uploaded it to the MIB manager in Nagios, but that didn't seem to change anything. I also noticed that when I do an SNMPWalk it pulls results when running v1 or 2c, but I get no results with v3. I'm newer to Nagios so I'm not great with the commands yet but below is the v1 vs v3 commands I have running.

SNMPv1 Command: /usr/local/nagios/libexec/check_snmp -H 10.3.45.11 -o .1.3.6.1.4.1.318.1.1.10.2.3.2.1.4.1 -C public -P 1 -l "Temp" -u "Deg. Fah" -w 80 -c 90
SNMP OK - Temp 71 Deg. Fah | Temp=71Deg. Fah;80;90;

SNMPv3 Command: /usr/local/nagios/libexec/check_snmp -H 10.3.45.11 -o '.1.3.6.1.4.1.318.1.1.10.2.3.2.1.4.1' -P 3 --seclevel=authPriv --secname='nagios' --authproto=md5 --authpasswd='Authpassword001' --privpasswd='Privpassword001' --privproto=des -l 'Battery Temp' -u 'Deg. Fah' -w 80 -c 90
CRITICAL - Plugin timed out while executing system call

I'm hoping i'm just doing or missing something simple or stupid and its a quick fix. I did notice someone suggested making a change to the snmpd.conf file (https://support.nagios.com/forum/viewto ... 975#p91420) to get v3 responding correctly, but I have yet to try making that change. I'm never a huge fan of messing with conf files if I don't have to. Any help would be much appreciated.

[tgriep]

The first thing to try is to see if the device responds to a snmpwalk using SNMPv3.
Try this example but change the settings if needed.

Code: Select all

snmpwalk 10.3.45.11 -v 3 -u nagios  -a MD5 -A Authpassword001 -x DES -X Privpassword001 -l authPriv -t 600

If it fails, you will have to verify all of the settings on the APC UPS.

[mbarnes88]

The only way I can get the device to respond using v3 is to set it to NoAuth/NoPriv.

[tgriep]

It sounds like a configuration issue or a bug on the APC UPS that does not allow full SNMPv3 support.
You should look to them to resolve the issue.