interfacetable_v3t icon indicating copy to clipboard operation
interfacetable_v3t copied to clipboard

snmp v3 authentication problem

Open Tontonitch opened this issue 7 years ago • 0 comments

From tophoune (http://www.tontonitch.com/phpbb/viewtopic.php?f=2&t=3051)

Hello, I’m using your plugin this plugin for many years now. It has always fulfilled my needs. But today I have an issue with the snmp v3 authentication with security level AuthPriv.

In console, if I run this command : sudo ./check_interface_table_v3t.pl -H 1.1.1.1 -l MyUSR -x MYPWD -X MYPASSPHRASE -L md5,aes The result is : UNKNOWN - Not expected empty value for oid "1.3.6.1.2.1.1.3.0" (sysUpTime, mib RFC1213-MIB)

As a control , I ran this command: snmpwalk -v 3 -u MyUSR -A MYPWD -a MD5 -x AES -X MYPASSPHRASE 1.1.1.1 the result is: Reason: authorizationError (access denied to that object)

suspecting a failure in the auth process I ran the same command with the security level mentionned: snmpwalk -v 3 -u MyUSR -A MYPWD -a MD5 -x AES -X MYPASSPHRASE 1.1.1.1 -l AuthPriv the result is that I can walk along the OIds:

IF-MIB::ifIndex.1 = INTEGER: 1
IF-MIB::ifIndex.2 = INTEGER: 2
IF-MIB::ifIndex.3 = INTEGER: 3
IF-MIB::ifIndex.4 = INTEGER: 4
IF-MIB::ifIndex.5 = INTEGER: 5
IF-MIB::ifIndex.6 = INTEGER: 6
IF-MIB::ifIndex.7 = INTEGER: 7
IF-MIB::ifIndex.8 = INTEGER: 8
IF-MIB::ifDescr.1 = STRING: GigabitEthernet0/0
IF-MIB::ifDescr.2 = STRING: GigabitEthernet0/1

I don ‘t understand why we have to mention the security level in the authentication process, but I suspect that it makes fail the plugin… Top

Tontonitch avatar Aug 20 '17 21:08 Tontonitch