EcoStruxure IT forum
Schneider Electric support forum about installation and configuration for DCIM including EcoStruxure IT Expert, IT Advisor, Data Center Expert, and NetBotz
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 03:43 PM . Last Modified: 2024-04-08 12:52 AM
Hello!
I know, that useful description, how to generate WALK file is here:
http://www.apc.com/lv/en/faqs/FA158391/
But also using this template I failed to generate WALK file for SNMP v3 device.
The customer uses SNMP v3 for device I need to scan. Can someone please provide me an example with the text, which I need to write in devlist to scan SNMP v3 device, if the credentials are following:
Best regards,
Janis Magazeinis
(CID:117999958)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 03:43 PM . Last Modified: 2024-04-08 12:52 AM
Hi Janis Magazeinis,
Here is an example of the contents of the devlist file for your case on the screenshot, i.e. for securitylevel nAnP (Authentication Protocol: None, Privacy Protocol: None):
192.168.0.139 v3 nAnP apcsnmpprofile4 MD5 skfhbkjdvhfnvldfkgjlokgagsdfyags sdfbjkerhfkjgtkghonbmgfnbjkdfhbf
And the confirmation of a successful scan result in the form of sapnwalk.log:
textsapnwalk.log - nAnPThu May 04 10:11:34 2017 : BASIC : LOG: sapnwalk started on inputfile = devlist Thu May 04 10:11:34 2017 : BASIC : LOG: thread started. Thu May 04 10:11:34 2017 : BASIC : .\sapwalk2 -i 192.168.0.139 -v v3 -l nAnP -u apcsnmpprofile4 -o walkfiles\192.168.0.139.walk -s 1.3 -f 1 Thu May 04 10:11:34 2017 : BASIC : TRACE: system returned from sapwalk Thu May 04 10:11:39 2017 : BASIC : LOG: sapnwalk completedAn example of the contents of the devlist file for securitylevel AnP (Authentication Protocol: MD5, Privacy Protocol: None):
192.168.0.139 v3 AnP apcsnmpprofile4 MD5 skfhbkjdvhfnvldfkgjlokgagsdfyags sdfbjkerhfkjgtkghonbmgfnbjkdfhbf
And the confirmation of a successful scan result in the form of sapnwalk.log:
textsapnwalk.log - AnPThu May 04 10:04:16 2017 : BASIC : LOG: sapnwalk started on inputfile = devlist Thu May 04 10:04:16 2017 : BASIC : LOG: thread started. Thu May 04 10:04:16 2017 : BASIC : .\sapwalk2 -i 192.168.0.139 -v v3 -l AnP -u apcsnmpprofile4 -xt MD5 -xa skfhbkjdvhfnvldfkgjlokgagsdfyags -o walkfiles\192.168.0.139.walk -s 1.3 -f 1 Thu May 04 10:05:05 2017 : BASIC : TRACE: system returned from sapwalk Thu May 04 10:05:07 2017 : BASIC : LOG: sapnwalk completedAnother example of the contents of the devlist file for securitylevel AP (Authentication Protocol: MD5, Privacy Protocol: DES):
192.168.0.139 v3 AP apcsnmpprofile4 MD5 skfhbkjdvhfnvldfkgjlokgagsdfyags sdfbjkerhfkjgtkghonbmgfnbjkdfhbf
And the confirmation of a successful scan result in the form of sapnwalk.log:
textsapnwalk.log - APThu May 04 09:56:14 2017 : BASIC : LOG: sapnwalk started on inputfile = devlist Thu May 04 09:56:14 2017 : BASIC : LOG: thread started. Thu May 04 09:56:14 2017 : BASIC : .\sapwalk2 -i 192.168.0.139 -v v3 -l AP -u apcsnmpprofile4 -xt MD5 -xa skfhbkjdvhfnvldfkgjlokgagsdfyags -xp sdfbjkerhfkjgtkghonbmgfnbjkdfhbf -o walkfiles\192.168.0.139.walk -s 1.3 -f 1 Thu May 04 10:01:27 2017 : BASIC : TRACE: system returned from sapwalk Thu May 04 10:01:30 2017 : BASIC : LOG: sapnwalk completedI hope this helps.
(CID:118000266)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 03:43 PM . Last Modified: 2024-04-08 12:52 AM
Hi Janis Magazeinis,
Can you show a fragment of your devlist file for SNMP v3 devices (while hiding private information)?
In addition, can you show a screenshot of the error that you get when you try to scan SNMP v3 devices?
With best regards.
(CID:117999985)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 03:43 PM . Last Modified: 2024-04-08 12:52 AM
Hi Janis Magazeinis,
Here is an example of the contents of the devlist file for your case on the screenshot, i.e. for securitylevel nAnP (Authentication Protocol: None, Privacy Protocol: None):
192.168.0.139 v3 nAnP apcsnmpprofile4 MD5 skfhbkjdvhfnvldfkgjlokgagsdfyags sdfbjkerhfkjgtkghonbmgfnbjkdfhbf
And the confirmation of a successful scan result in the form of sapnwalk.log:
textsapnwalk.log - nAnPThu May 04 10:11:34 2017 : BASIC : LOG: sapnwalk started on inputfile = devlist Thu May 04 10:11:34 2017 : BASIC : LOG: thread started. Thu May 04 10:11:34 2017 : BASIC : .\sapwalk2 -i 192.168.0.139 -v v3 -l nAnP -u apcsnmpprofile4 -o walkfiles\192.168.0.139.walk -s 1.3 -f 1 Thu May 04 10:11:34 2017 : BASIC : TRACE: system returned from sapwalk Thu May 04 10:11:39 2017 : BASIC : LOG: sapnwalk completedAn example of the contents of the devlist file for securitylevel AnP (Authentication Protocol: MD5, Privacy Protocol: None):
192.168.0.139 v3 AnP apcsnmpprofile4 MD5 skfhbkjdvhfnvldfkgjlokgagsdfyags sdfbjkerhfkjgtkghonbmgfnbjkdfhbf
And the confirmation of a successful scan result in the form of sapnwalk.log:
textsapnwalk.log - AnPThu May 04 10:04:16 2017 : BASIC : LOG: sapnwalk started on inputfile = devlist Thu May 04 10:04:16 2017 : BASIC : LOG: thread started. Thu May 04 10:04:16 2017 : BASIC : .\sapwalk2 -i 192.168.0.139 -v v3 -l AnP -u apcsnmpprofile4 -xt MD5 -xa skfhbkjdvhfnvldfkgjlokgagsdfyags -o walkfiles\192.168.0.139.walk -s 1.3 -f 1 Thu May 04 10:05:05 2017 : BASIC : TRACE: system returned from sapwalk Thu May 04 10:05:07 2017 : BASIC : LOG: sapnwalk completedAnother example of the contents of the devlist file for securitylevel AP (Authentication Protocol: MD5, Privacy Protocol: DES):
192.168.0.139 v3 AP apcsnmpprofile4 MD5 skfhbkjdvhfnvldfkgjlokgagsdfyags sdfbjkerhfkjgtkghonbmgfnbjkdfhbf
And the confirmation of a successful scan result in the form of sapnwalk.log:
textsapnwalk.log - APThu May 04 09:56:14 2017 : BASIC : LOG: sapnwalk started on inputfile = devlist Thu May 04 09:56:14 2017 : BASIC : LOG: thread started. Thu May 04 09:56:14 2017 : BASIC : .\sapwalk2 -i 192.168.0.139 -v v3 -l AP -u apcsnmpprofile4 -xt MD5 -xa skfhbkjdvhfnvldfkgjlokgagsdfyags -xp sdfbjkerhfkjgtkghonbmgfnbjkdfhbf -o walkfiles\192.168.0.139.walk -s 1.3 -f 1 Thu May 04 10:01:27 2017 : BASIC : TRACE: system returned from sapwalk Thu May 04 10:01:30 2017 : BASIC : LOG: sapnwalk completedI hope this helps.
(CID:118000266)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 03:43 PM . Last Modified: 2024-04-08 12:52 AM
Hello!
Thank you for the answer, but I still have some unclarities.
It seems to me, that you did not changed Authentication and Privacy Protocols and also Passphrases respectively in the examples for devlist:
So, if my assumption is correct, it would be great if you can provide examples once again.
Would it be correct to write following for my nAnP example:
"192.168.0.139 v3 nAnP username"?
Best regards,
Janis Magazeinis
(CID:118001885)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 03:43 PM . Last Modified: 2024-04-08 12:52 AM
Hi Janis Magazeinis,
According readme.txt from above said archive isxc_devicewalk.zip follows:
2) edit devlist to list the devices to walk. Change the sample device communication line for the first device. Add lines in the same format if more than 1 device. If snmp version is v3, instead of community name specify securitylevel (nAnP/AnP/AP), username, authtype (MD5/SHA), authpass and privpass.
I.e., the sequence of parameters is desired to strictly observe.
Therefore, for your example, when both passphrases are given, but no authentication and privacy protocols are set, i.e. Securitylevel=nAnP, is enough use:
192.168.0.139 v3 nAnP apcsnmpprofile4
Q1: Maybe you did not configure both passphrases?
Q2: In addition, some error or problem you see in sapnwalk.log file?
Q3: In Access Control option for SNMP v3 on device you enabled access or not?
Q4: On you device SNMPv3 Access enabled or not?
With best regards.
(CID:118001931)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 03:43 PM . Last Modified: 2024-04-08 12:52 AM
I too am having issues walking to SNMP V3 devices. Here is a pic of the settings from a PDU that we use. ISX/DCE 7.4.2 sees all the oids perfectly using these settings, I just want to be able to do an SNMP walk. SNMP v1 will only give me a comms link not all the other sensors. Insert any word you like in the blank 'Security Name' as an example. box as an example.
(CID:122096430)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 03:44 PM . Last Modified: 2024-04-08 12:52 AM
Hi Jeff Harrold,
I.e., with the above SNMP v3 settings your DCE-server works fine? But you can not do just snmpwalk from the command line of the PC? Did I understand you correctly?
With respect.
(CID:122685175)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 03:44 PM . Last Modified: 2024-04-08 12:52 AM
Yes you did, the SNMP v3 settings work fine with our DCE-server. No I cannot run a command line snmpwalk command from the command line. We usually just use the APC SNMPwalk program as it has always worked fine for V1. Just never been able to get it to work for V3.
(CID:122685370)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 03:44 PM . Last Modified: 2024-04-08 12:52 AM
Its ok now, I managed to download an SNMPwalk tool & when I use it via command line, I can successfully get a walk to an SNMPv3 device.
Thanks.
(CID:122685379)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 03:44 PM . Last Modified: 2024-04-08 12:52 AM
Hi Jeff Harrold,
Thanks for the feedback: was glad to help 😀.
(CID:122685433)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-03 03:44 PM . Last Modified: 2023-10-22 04:16 AM
This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.
Link copied. Please paste this link to share this article on your social media post.
Create your free account or log in to subscribe to the board - and gain access to more than 10,000+ support articles along with insights from experts and peers.