WALK file for SNMP v3 device

[DCIM_Support]

Hello!

I know, that useful description, how to generate WALK file is here:

http://www.apc.com/lv/en/faqs/FA158391/

But also using this template I failed to generate WALK file for SNMP v3 device.

The customer uses SNMP v3 for device I need to scan. Can someone please provide me an example with the text, which I need to write in devlist to scan SNMP v3 device, if the credentials are following:

Best regards,

Janis Magazeinis 

(CID:117999958)

[DCIM_Support]

Hi Janis Magazeinis,

Can you show a fragment of your devlist file for SNMP v3 devices (while hiding private information)?

In addition, can you show a screenshot of the error that you get when you try to scan SNMP v3 devices?

With best regards.

(CID:117999985)

[DCIM_Support · Accepted solution]

Hi Janis Magazeinis,

Here is an example of the contents of the devlist file for your case on the screenshot, i.e. for securitylevel nAnP (Authentication Protocol: None, Privacy Protocol: None):

192.168.0.139 v3 nAnP apcsnmpprofile4 MD5 skfhbkjdvhfnvldfkgjlokgagsdfyags sdfbjkerhfkjgtkghonbmgfnbjkdfhbf

And the confirmation of a successful scan result in the form of sapnwalk.log:

textsapnwalk.log - nAnPThu May 04 10:11:34 2017 : BASIC : LOG: sapnwalk started on inputfile = devlist Thu May 04 10:11:34 2017 : BASIC : LOG: thread started. Thu May 04 10:11:34 2017 : BASIC : .\sapwalk2 -i 192.168.0.139 -v v3 -l nAnP -u apcsnmpprofile4 -o walkfiles\192.168.0.139.walk -s 1.3 -f 1 Thu May 04 10:11:34 2017 : BASIC : TRACE: system returned from sapwalk Thu May 04 10:11:39 2017 : BASIC : LOG: sapnwalk completed

An example of the contents of the devlist file for securitylevel AnP (Authentication Protocol: MD5, Privacy Protocol: None):

192.168.0.139 v3 AnP apcsnmpprofile4 MD5 skfhbkjdvhfnvldfkgjlokgagsdfyags sdfbjkerhfkjgtkghonbmgfnbjkdfhbf

And the confirmation of a successful scan result in the form of sapnwalk.log:

textsapnwalk.log - AnPThu May 04 10:04:16 2017 : BASIC : LOG: sapnwalk started on inputfile = devlist Thu May 04 10:04:16 2017 : BASIC : LOG: thread started. Thu May 04 10:04:16 2017 : BASIC : .\sapwalk2 -i 192.168.0.139 -v v3 -l AnP -u apcsnmpprofile4 -xt MD5 -xa skfhbkjdvhfnvldfkgjlokgagsdfyags -o walkfiles\192.168.0.139.walk -s 1.3 -f 1 Thu May 04 10:05:05 2017 : BASIC : TRACE: system returned from sapwalk Thu May 04 10:05:07 2017 : BASIC : LOG: sapnwalk completed

Another example of the contents of the devlist file for securitylevel AP (Authentication Protocol: MD5, Privacy Protocol: DES):

192.168.0.139 v3 AP apcsnmpprofile4 MD5 skfhbkjdvhfnvldfkgjlokgagsdfyags sdfbjkerhfkjgtkghonbmgfnbjkdfhbf

And the confirmation of a successful scan result in the form of sapnwalk.log:

textsapnwalk.log - APThu May 04 09:56:14 2017 : BASIC : LOG: sapnwalk started on inputfile = devlist Thu May 04 09:56:14 2017 : BASIC : LOG: thread started. Thu May 04 09:56:14 2017 : BASIC : .\sapwalk2 -i 192.168.0.139 -v v3 -l AP -u apcsnmpprofile4 -xt MD5 -xa skfhbkjdvhfnvldfkgjlokgagsdfyags -xp sdfbjkerhfkjgtkghonbmgfnbjkdfhbf -o walkfiles\192.168.0.139.walk -s 1.3 -f 1 Thu May 04 10:01:27 2017 : BASIC : TRACE: system returned from sapwalk Thu May 04 10:01:30 2017 : BASIC : LOG: sapnwalk completed

I hope this helps.

(CID:118000266)

[DCIM_Support]

Hello!

Thank you for the answer, but I still have some unclarities.

It seems to me, that you did not changed Authentication and Privacy Protocols and also Passphrases respectively in the examples for devlist:

So, if my assumption is correct, it would be great if you can provide examples once again.

Would it be correct to write following for my nAnP example:

"192.168.0.139 v3 nAnP username"?

Best regards,

Janis Magazeinis

(CID:118001885)

[DCIM_Support]

Hi Janis Magazeinis,

According readme.txt from above said archive isxc_devicewalk.zip follows:

2) edit devlist to list the devices to walk.  Change the sample device communication line for the first device.  Add lines in the same format if more than 1 device.  If snmp version is v3, instead of community name specify securitylevel (nAnP/AnP/AP), username, authtype (MD5/SHA), authpass and privpass.

I.e., the sequence of parameters is desired to strictly observe.

Therefore, for your example, when both passphrases are given, but no authentication and privacy protocols are set, i.e. Securitylevel=nAnP, is enough use:

192.168.0.139 v3 nAnP apcsnmpprofile4

Q1: Maybe you did not configure both passphrases?

Q2: In addition, some error or problem you see in sapnwalk.log file?

Q3: In Access Control option for SNMP v3 on device you enabled access or not?

Q4: On you device SNMPv3 Access enabled or not?

With best regards.

(CID:118001931)

[DCIM_Support]

I too am having issues walking to SNMP V3 devices.  Here is a pic of the settings from a PDU that we use.  ISX/DCE 7.4.2 sees all the oids perfectly using these settings, I just want to be able to do an SNMP walk.  SNMP v1 will only give me a comms link not all the other sensors.  Insert any word you like in the blank 'Security Name' as an example. box as an example.

(CID:122096430)

[DCIM_Support]

Hi Jeff Harrold,

I.e., with the above SNMP v3 settings your DCE-server works fine? But you can not do just snmpwalk from the command line of the PC? Did I understand you correctly?

With respect.

(CID:122685175)

[DCIM_Support]

Yes you did, the SNMP v3 settings work fine with our DCE-server.  No I cannot run a command line snmpwalk command from the command line.  We usually just use the APC SNMPwalk program as it has always worked fine for V1.  Just never been able to get it to work for V3.

(CID:122685370)

[DCIM_Support]

Its ok now, I managed to download an SNMPwalk tool & when I use it via command line, I can successfully get a walk to an SNMPv3 device.

Thanks.

(CID:122685379)

[DCIM_Support]

Hi Jeff Harrold,

Thanks for the feedback: was glad to help 😀.

(CID:122685433)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.