discovering Cisco Network devices - snmpv3 AES256C

galagon76

Hi

Not sure if anybody has this particular issue, but I have trying to discover Cisco IOS devices that appear to be configured with SNMPv3 priv credentials that are using AES256C (I have heard this might be Cisco's proprietary AES256). Discovering this from the GUI, there is no option to choose this and I am not sure if SW NPM is smart enough to recognize this, because it does not get a response when I try to discover this from the GUI.  If I do a snmpwalk from the command line using AES256, I get a "no response" but using AES256C, I get a response.. I have had issues with this with other tools (i.e. Ansible RBA) also but I was able to resolve it

stuartd

Sadly when it comes to encryption and cipher levels, SolarWinds tends to lag behind. I see this most often in configuring NCM backups where the cipher is at too new a level and the answer is to downgrade the level to one that they do currently support.

This page: https://solarwindscore.my.site.com/SuccessCenter/s/article/SNMPv3-Supported-Authentication-and-Encryption-for-NPM?language=en_US details the current levels they can support for SNMPv3. If you want others, then the answer is to reach out to your customer support manager and ask them to ask internally, or at least update on when XYZ level will be supported. In the meantime all you can do is change the Cisco config to match a supported one.

As I understand it, AES-256C is a Cisco variant of AES-256 with no major benefits except some esoteric additional stat gathering capability.

Bonne chance.