Page 1 of 1

Problems Configuring Switch Monitoring with Switch Wizard

Posted: Tue Jun 11, 2019 10:41 am
by LAINFOSEC
Hello,

We recently configured select devices with SNMPv3 for monitoring tools. When running the Switch, Router, etc. wizard, it failed telling me:

ImageNo ports were detected on the switch. Possible reasons for this include:
  • The switch is currently down
    The switch does not exist at the address you specified
    SNMP support on the switch is disabled
It told me to run a script and send the output to support. Here is that output: (private network info has been changed)

Code: Select all

--base: SNMP V3 libraries found, SNMP V3 enabled.
--base: Get Device Info on [email protected]:::::3
SNMPWALK Problem for 1.3.6.1.2.1.1 on [email protected]:::::3:v4only: No response from remote host "xx.xx.xx.xx" at /usr/bin/../lib/mrtg2/Net_SNMP_util.pm line 1851.
        Net_SNMP_util::snmpwalk_flg('[email protected]:::::3:v4only', undef, 'HASH(0x1ca3410)', 1.3.6.1.2.1.1) called at /usr/bin/../lib/mrtg2/Net_SNMP_util.pm line 786
        Net_SNMP_util::snmpwalk('[email protected]:::::3:v4only', 'HASH(0x1ca3410)', 1.3.6.1.2.1.1) called at /usr/bin/cfgmaker line 951
        main::DeviceInfo('[email protected]:::::3', 'HASH(0x1ca3650)', 'HASH(0x1ca3410)') called at /usr/bin/cfgmaker line 142
        main::main() called at /usr/bin/cfgmaker line 160
WARNING: Skipping [email protected]:::::3 as no info could be retrieved

Use of uninitialized value $comment_sysdescr in substitution (s///) at /usr/bin/cfgmaker line 379.
Use of uninitialized value $sysname in concatenation (.) or string at /usr/bin/cfgmaker line 412.
Use of uninitialized value $comment_sysdescr in concatenation (.) or string at /usr/bin/cfgmaker line 412.
Use of uninitialized value $syscontact in concatenation (.) or string at /usr/bin/cfgmaker line 412.
Use of uninitialized value $syslocation in concatenation (.) or string at /usr/bin/cfgmaker line 412.
# Created by
# /usr/bin/cfgmaker --show-op-down --noreversedns --zero-speed 100000000 --enablesnmpv3 --snmp-options=:::::3 --username=omitted_user --authprotocol=sha --authpassword=omitted_ --privprotocol=aes --privpassword=omitted_ --contextengineid=0 xx.xx.xx.xx


### Global Config Options

#  for UNIX
# WorkDir: /home/http/mrtg

#  or for NT
# WorkDir: c:\mrtgdata

### Global Defaults

#  to get bits instead of bytes and graphs growing to the right
# Options[_]: growright, bits

EnableIPv6: no

######################################################################
# System:
# Description:
# Contact:
# Location:
######################################################################


enablesnmpv3: yes


Re: Problems Configuring Switch Monitoring with Switch Wizar

Posted: Tue Jun 11, 2019 11:01 am
by scottwilkerson
What version of the Network Switch / Router Wizard do you have in Admin -> Manage Config Wizards?

I believe this may have been fixed in the latest version of the wizard 2.5.0

Re: Problems Configuring Switch Monitoring with Switch Wizar

Posted: Tue Jun 11, 2019 11:12 am
by LAINFOSEC
Updating now. I will let you know if its resolved.

Re: Problems Configuring Switch Monitoring with Switch Wizar

Posted: Tue Jun 11, 2019 11:14 am
by scottwilkerson
LAPFCU wrote:Updating now. I will let you know if its resolved.
sounds good!

Re: Problems Configuring Switch Monitoring with Switch Wizar

Posted: Tue Jun 11, 2019 11:25 am
by LAINFOSEC
Ok so i updated and was very happy to see the new changes.

However, I got the same error. I just realized too that we configured for AES256 and it seems the wizard maxes at AES128. I am going to reconfigure this on the switches, but do you think that is what could be holding it up? Please let me know so I can cover other routes just in case.

Thank you for your help so far!

Re: Problems Configuring Switch Monitoring with Switch Wizar

Posted: Tue Jun 11, 2019 12:03 pm
by scottwilkerson
LAPFCU wrote:Ok so i updated and was very happy to see the new changes.

However, I got the same error. I just realized too that we configured for AES256 and it seems the wizard maxes at AES128. I am going to reconfigure this on the switches, but do you think that is what could be holding it up? Please let me know so I can cover other routes just in case.

Thank you for your help so far!
It could be, the wizards currently only supports AES128

Re: Problems Configuring Switch Monitoring with Switch Wizar

Posted: Tue Jun 11, 2019 2:59 pm
by LAINFOSEC
Turns out the AES config was the problem. We configured down to AES128 and it worked! Thank you!

Re: Problems Configuring Switch Monitoring with Switch Wizar

Posted: Tue Jun 11, 2019 3:17 pm
by lmiltchev
It's nice to hear that! Is it OK if we closed this topic? Thanks!

Re: Problems Configuring Switch Monitoring with Switch Wizar

Posted: Tue Jun 11, 2019 3:27 pm
by LAINFOSEC
yes! Thank you!