Unable to add node to NPM!!

Hi All,

I have been trying to add some nodes manually to NPM (performed the Network Discovery but these devices didn't get added). When I do a test with the community string it shows me TEST FAILED. Used the public community string aswell, still doesn't work. I have check the configurations on the device everything looks perfect. I have done the packet capture on wireshark from orion server. When I did the capture and Test, I cannot see the response on the captures. Been trying in all ways. I have also restarted the SNMP services on the Cisco devices.

Any thought or suggestions !!

Thanks,

Sathvik

Find more posts tagged with

add_nodes

Accepted answers

All comments

rschroeder

Confirm routing. If NPM can ping those devices, routing is good. If it can't, fix that first.
Confirm there are no errors in the snmp strings used by NPM to discover the nodes. NPM's strings must match the strings of the nodes exactly. Triple check this, since it's the most likely problem.
Verify the snmp version required by the nodes is the same used by NPM. If the version is SNMPv3:
1. Ensure the NAME is correct
2. Verify the Authorization Method and Password are correct
3. Confirm the Encryption Method and Password match between the nodes and NPM
Determine if firewall rules or local Access Control Rules on the nodes, or between the nodes and your NPM poller, are configured to allow snmp access from your NPM poller's address
Test

If successful, add the node and move on to the next node. If unsuccessful, continue troubleshooting via the steps above until the problem is found and resolved.

Security:

SNMPv3 is the recommended method due to its security and encryption; it's also the hardest one to learn and deploy if you have no experience with it.
Read-Only SNMP is all NPM needs to discover, monitor, and alert on your devices. I don't recommend creating Read-Write SNMP setups on devices due to the vulnerabilities that can create, and due to the challenge in tracing the source of unexpected/unauthorized changes made through SNMP-v3.

Good luck, and let us know what you find fixes the issue!

Rick Schroeder

neomatrix1217

Are you running your wireshark tests from the Orion server? also try the SNMP walk tool from the Orion server SolarWinds SNMP Walk: A new tool for collecting SNMP MIB walks - SolarWinds Worldwide, LLC. Help and Support

sathvikrachha

Thank you for the input

1). I am able to ping from the server to device.

2). I have triple checked the snmp configurations on the node

3). All the configuration and commands on the nodes match the SNMP credentials on the Orion server

4). Yes, the nodes allow the snmp traffic through it

I have literally checked every possible error, but still not able to add the node. Any further suggestions please ?

sathvikrachha

Yes I have captured the packets from Orion Servers. The server is receiving any response from the node. Please have a look at the snapshot below.

I have also checked the SNMPWalk, but the same thing with that too. I have never used the SNMP Walk before, can you suggest me what the below output mean.

Thank you

rschroeder

It's time to talk with Solarwinds Support, I think.

rschroeder

Your capture seems to show one-way traffic only, where I'd build it to show two-way traffic, to enable you to see the response--or lack thereof. Remember that snmp uses both UDP 161 and 162, for sends AND receives.

stuartwhyte

Run debug snmp packets on the destination cisco device, then check the logs to show if responses are sent:

Jan 30 17:03:42.839: SNMP: Packet received via UDP from [pollerIP] on GigabitEthernet0/0

Jan 30 17:03:42.839: SNMP: Report, reqid 17319, errstat 0, erridx 0

internet.6.3.15.1.1.4.0 = 1325840

Jan 30 17:03:42.839: SNMP: Packet sent via UDP to [pollerIP]

Jan 30 17:03:42.851: SNMP: Packet received via UDP from [pollerIP] on GigabitEthernet0/0

Jan 30 17:03:42.851: SNMP: Get-bulk request, reqid 17323, nonrptr 0, maxreps 5

ipAddrEntry.2 = NULL TYPE/VALUE

Jan 30 17:03:42.851: SNMP: Response, reqid 17323, errstat 0, erridx 0

ipAddrEntry.2.x.x.x.x = 3

ipAddrEntry.2.x.x.x.x = 2

ipAddrEntry.3.x.x.x.x = 255.255.255.240

ipAddrEntry.3.x.x.x.x = 255.255.255.248

ipAddrEntry.4.x.x.x.x = 1

Jan 30 17:03:42.863: SNMP: Packet sent via UDP to [pollerIP]

etc.

If packets are being sent but not received, check for an firewall between the poller and device

jxchappell

Sounds like a FW