Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Getting SNMP AuthenticationFailure traps even with valid community strings

I've noticed lately that on many of our devices, though not all, running an inventory results in many snmpv2-mib:authenticationfailure traps being sent from the device. This is despite the fact that I've triple checked the community strings being used, and verified that they are correct and that orion is able to connect with them. I've also tried using snmp for requesting configs from devices, and this works fine. Only when used for inventory does it cause a problem. The devices are all various models of Cisco. Any ideas why the traps may be appearing?

Thanks

Mike

Find more posts tagged with

Accepted answers

All comments

Omegatek

Has anyone found an answer or suggestion to this? We're having similar issues with our Cisco devices, not all, but some. And it's exhibiting the same MIB error (IPs removed for safety):

snmpTrapEnterprise = RAPID-CITY:snmpTraps
experimental.1057.1 = x.x.x.x
cExtSnmpTargetAuthInetAddr = x.x.x.x
cExtSnmpTargetAuthInetType = 1
authAddr = x.x.x.x
snmpTrapOID = SNMPv2-MIB:authenticationFailure
sysUpTime = 204 days 2 hours 31 minutes 31.26 seconds

chris.lapoint

For each of the devices that you've received authentication failure traps, can you go to NCM device details and click Actions > Verify SNMP Credentials and ensure that everything reports back successful.

If so, then go ahead and open a support ticket on this issue. We'll likely need a pcap from an inventory run for troubleshooting so if you can attach that to your case after creating, that would help accelerate the process.

Omegatek

Chris,

Thank you for your quick response! However, I've tried to drill down into NCM to find that reporting option, but it's not shown. I have 'Home', 'Configuration Management,' 'Inventory,' 'Compliance' as upper level tabs and drilling down into any of those devices doesn't invoke the ability to click Actions. We're running NCM 5.5.1

Any specific type of inventory run to capture?

michaelh1

Just an update based on the ticket I had opened. Looks like one item in the inventory process, specifically the bridge table, has an issue with the MIB and OID that NCM attempts to poll. From the response I received:

"The Trap Authentication Failure I have generally seen on the Bridge table item in the inventory. I do not know why, but this is device issue not supporting the OID we are pulling it for. the device is not rejecting the Community strings in general, just for that certain SNMP requests. I have seen this before and this is a device issue not supporting that particular OID. it is not that it requires Read Write as the OID for the Bridge table is a Read Only."

Removing the Bridge Table from the items inventoried cleared up the problem and stop the authentication traps

chris.lapoint

Thank you for your quick response! However, I've tried to drill down into NCM to find that reporting option, but it's not shown. I have 'Home', 'Configuration Management,' 'Inventory,' 'Compliance' as upper level tabs and drilling down into any of those devices doesn't invoke the ability to click Actions. We're running NCM 5.5.1
Any specific type of inventory run to capture?

To validate credentials, you're going to need to go to the NCM desktop application installed on your NCM server (Start > All Programs > SolarWinds Orion Network Configuration Manager > Orion Network Configuration Manager)

In any case, please see michaelh's last post. in the NCM desktop application, you can adjust the inventory settings in your job to unselect the Bridge Table and see if that resolves the issue.

chris.lapoint

Just an update based on the ticket I had opened. Looks like one item in the inventory process, specifically the bridge table, has an issue with the MIB and OID that NCM attempts to poll. From the response I received:
"The Trap Authentication Failure I have generally seen on the Bridge table item in the inventory. I do not know why, but this is device issue not supporting the OID we are pulling it for. the device is not rejecting the Community strings in general, just for that certain SNMP requests. I have seen this before and this is a device issue not supporting that particular OID. it is not that it requires Read Write as the OID for the Bridge table is a Read Only."
Removing the Bridge Table from the items inventoried cleared up the problem and stop the authentication traps

good news, thanks for the update!

Clint.D.Russell

These seems to be happing with NCM 6.1 also. It was working and then it just strating giving the SNMP failure. Just on inventory when testing snmp credential the check passes. I have unselected bridge table and still get the error.