"snmpget: Authentication failure" authentication error

[pavan509]

Hello Team,

We were having an ongoing issue with IBM XGS devices with the SNMP results as we are not getting the expected results with the OID. So we have tried to change the SNMP v3 settings of Nagios user from MD5 to SHA and DES to AES in the IBM XGS device. After making those changes, few services started reporting as expected but there are few services that are triggering the error as shown in the snippet.

nagiossnmperror.jpg

Please let me know where I am doing the mistake or where I should make changes in order to get the expected result.

[tgriep]

In your command, you are missing the authproto option.

See this.

-a, --authproto=[MD5|SHA]
SNMPv3 auth proto

If your authproto is using MD5, you would add this to the check_snmp plugin's options.

Code: Select all

-a MD5

Or if it is using SAH, add this.

Code: Select all

-a SHA

Try adding the option and see if that allows the plugin to connect.

Thank you.

[pavan509]

Hello @tgriep,

Thanks for your response and the suggestion given by you has solved the problem partially. I have a total of 225 devices that were monitored through SNMP protocol. After adding the "authproto option", few devices started responding without any issues, however, there were few devices that still triggers the alerts as shown below.

./protection_interfaces_up_down.sh 10.175.34.40 1.1 2
snmpwalk: Authentication failure (incorrect password, community or key)
snmpwalk: Authentication failure (incorrect password, community or key)

This custom script uses the snmpwalk to get the desired output.

Code: Select all

snmpwalk -v3 -On  -l authPriv -u nagios -a SHA -A ########  -x AES -X ######### $1:161 .1.3.6.1.4.1.8072.1.3.2.3.1.2.13.120.103.115.46.108.105.110.107.95.112.114.111.116 

For security reasons, I have hashed the passwords.

Kindly let me know of any suggestions to sort out this issue.

[tgriep]

The only thing left to to is to login to the IBM XGS devices and verify that the username, passwords, and the protocols are set to what the custom plugin is using.
Also verify that they are enabled to use SNMP version 3.

If they do not match, the snmpwalk would fail with that message.

Thank you.