Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

SNMP v3 authentication error with cisco Meraki R18

carlos.ce

Good evening everyone, I have a question

I am configuring a Cisco Meraki R18 for SNMP v3

but I get an error when I add the node, the error I get is this "test failed "

we check settings Authentication the SNMPV3

an also the SNPMv3 privacy /encryption

every setup is correct,someone has had this issue

if anyone has any idea what happens,

I am sorry for my bad english

Find more posts tagged with

Accepted answers

All comments

zennifer

I would first test SNMP on the MERAKI

Testing SNMP

Multiple tools exist to test SNMP functionality on various operating systems. Windows based operating systems can use an open source tool called net-snmp. Follow these instructions to install net-snmp and test SNMP access to the Cloud Controller:

Download net-snmp and install
Save the MIB file from the Dashboard (Organization > Settings > SNMP > Download MIB) to the proper net-snmp directory: C:\usr\share\snmp\mibs\ by default
Copy and paste the sample snmp walk from your Controller (Organization > Settings > SNMP) and place it in a command prompt

On a Linux-based system you can install a SNMP package to achieve the same results. Follow these instructions on Debian based systems:

Install snmpd. For systems with apt-get:
1 sudo apt-get install snmpd
Save the MIB file from the dashboard (Organization > Settings > SNMP > Download MIB) to the proper snmpd directory
Copy and paste the example snmpwalk command from your Controller (Organization > Settings > SNMP) and place it in a terminal

Testing SNMP to individual MR's is exactly the same, but you will use snmpwalk to each individual MR. For example if you have two MR access points you would need to use snmpwalk twice (MR 1 IP: 192.168.100.15, MR2 IP: 192.168.100.16):

`1`	`snmpwalk -v2c -c meraki 192.168.100.15:161`

`2`	`snmpwalk -v2c -c meraki 192.168.100.16:161`

Keep in mind that the snmpwalk command would need to modified based upon the version of SNMP that was configured. In the above example, SNMP v2c is being used, with a community string of 'meraki', and the port has been left at a default of 161.

The command below is an example snmpwalk for SNMPv3, using the username and passphrase configured in Network-wide > General:

`1`	`snmpwalk -v3 -a sha -A <passphrase> -u <username> -x des -X <passphrase> -l authpriv <IP address>`

Sample Output

The following is sample output from the snmpwalk command run locally, to a local MR 16:

001 sysadmin@ubuntu:~$ snmpwalk -v2c -c meraki 192.168.100.15:161

002 iso.3.6.1.2.1.1.1.0 = STRING: "Meraki MR16 Cloud Managed AP"

003 iso.3.6.1.2.1.1.2.0 = OID: iso.3.6.1.4.1.29671.2.13

004 iso.3.6.1.2.1.1.5.0 = STRING: "MR16"

005 iso.3.6.1.2.1.1.9.1.2.1 = OID: iso.3.6.1.6.3.1

006 iso.3.6.1.2.1.1.9.1.2.2 = OID: iso.3.6.1.6.3.16.2.2.1

007 iso.3.6.1.2.1.1.9.1.2.3 = OID: iso.3.6.1.2.1.31

008 iso.3.6.1.2.1.1.9.1.2.4 = OID: iso.2.840.10036

009 iso.3.6.1.2.1.1.9.1.3.1 = STRING: "The MIB module for SNMPv2 entities"

010 iso.3.6.1.2.1.1.9.1.3.2 = STRING: "View-based Access Control Model for SNMP."

011 iso.3.6.1.2.1.1.9.1.3.3 = STRING: "The MIB module to describe generic objects for network interface sub-layers"

012 iso.3.6.1.2.1.1.9.1.3.4 = STRING: "The MIB module for managing 802.11 implementations"

013 iso.3.6.1.2.1.1.9.1.4.1 = Timeticks: (0) 0:00:00.00

014 iso.3.6.1.2.1.1.9.1.4.2 = Timeticks: (1) 0:00:00.01

015 iso.3.6.1.2.1.1.9.1.4.3 = Timeticks: (6) 0:00:00.06

016 iso.3.6.1.2.1.1.9.1.4.4 = Timeticks: (6) 0:00:00.06

017 iso.3.6.1.2.1.2.1.0 = INTEGER: 3

018 iso.3.6.1.2.1.2.2.1.1.1 = INTEGER: 1

019 iso.3.6.1.2.1.2.2.1.1.2 = INTEGER: 2

020 iso.3.6.1.2.1.2.2.1.1.3 = INTEGER: 3

021 iso.3.6.1.2.1.2.2.1.2.1 = STRING: "wired0"

022 iso.3.6.1.2.1.2.2.1.2.2 = STRING: "wifi0"

023 iso.3.6.1.2.1.2.2.1.2.3 = STRING: "wifi1"

024 iso.3.6.1.2.1.2.2.1.3.1 = INTEGER: 6

025 iso.3.6.1.2.1.2.2.1.3.2 = INTEGER: 71

026 iso.3.6.1.2.1.2.2.1.3.3 = INTEGER: 71

027 iso.3.6.1.2.1.2.2.1.4.1 = INTEGER: 0

028 iso.3.6.1.2.1.2.2.1.4.2 = INTEGER: 0

029 iso.3.6.1.2.1.2.2.1.4.3 = INTEGER: 0

030 iso.3.6.1.2.1.2.2.1.5.1 = Gauge32: 0

031 iso.3.6.1.2.1.2.2.1.5.2 = Gauge32: 0

032 iso.3.6.1.2.1.2.2.1.5.3 = Gauge32: 0

033 iso.3.6.1.2.1.2.2.1.6.1 = Hex-STRING: 00 18 0A 34 36 C4

034 iso.3.6.1.2.1.2.2.1.6.2 = Hex-STRING: 00 18 0A 34 36 C4

035 iso.3.6.1.2.1.2.2.1.6.3 = Hex-STRING: 02 18 1A 34 36 C4

036 iso.3.6.1.2.1.2.2.1.7.1 = INTEGER: 1

037 iso.3.6.1.2.1.2.2.1.7.2 = INTEGER: 1

038 iso.3.6.1.2.1.2.2.1.7.3 = INTEGER: 1

039 iso.3.6.1.2.1.2.2.1.8.1 = INTEGER: 1

040 iso.3.6.1.2.1.2.2.1.8.2 = INTEGER: 1

041 iso.3.6.1.2.1.2.2.1.8.3 = INTEGER: 1

042 iso.3.6.1.2.1.2.2.1.9.1 = Timeticks: (0) 0:00:00.00

043 iso.3.6.1.2.1.2.2.1.9.2 = Timeticks: (0) 0:00:00.00

044 iso.3.6.1.2.1.2.2.1.9.3 = Timeticks: (0) 0:00:00.00

045 iso.3.6.1.2.1.2.2.1.10.1 = Counter32: 77152729

046 iso.3.6.1.2.1.2.2.1.10.2 = Counter32: 70138554

047 iso.3.6.1.2.1.2.2.1.10.3 = Counter32: 17035160

048 iso.3.6.1.2.1.2.2.1.11.1 = Counter32: 0

049 iso.3.6.1.2.1.2.2.1.11.2 = Counter32: 0

050 iso.3.6.1.2.1.2.2.1.11.3 = Counter32: 0

051 iso.3.6.1.2.1.2.2.1.12.1 = Counter32: 0

052 iso.3.6.1.2.1.2.2.1.12.2 = Counter32: 0

053 iso.3.6.1.2.1.2.2.1.12.3 = Counter32: 0

054 iso.3.6.1.2.1.2.2.1.13.1 = Counter32: 0

055 iso.3.6.1.2.1.2.2.1.13.2 = Counter32: 0

056 iso.3.6.1.2.1.2.2.1.13.3 = Counter32: 0

057 iso.3.6.1.2.1.2.2.1.14.1 = Counter32: 0

058 iso.3.6.1.2.1.2.2.1.14.2 = Counter32: 0

059 iso.3.6.1.2.1.2.2.1.14.3 = Counter32: 0

060 iso.3.6.1.2.1.2.2.1.16.1 = Counter32: 16102848

061 iso.3.6.1.2.1.2.2.1.16.2 = Counter32: 35646246

062 iso.3.6.1.2.1.2.2.1.16.3 = Counter32: 1540911

063 iso.3.6.1.2.1.2.2.1.17.1 = Counter32: 0

064 iso.3.6.1.2.1.2.2.1.17.2 = Counter32: 97878

065 iso.3.6.1.2.1.2.2.1.17.3 = Counter32: 2728

066 iso.3.6.1.2.1.2.2.1.18.1 = Counter32: 0

067 iso.3.6.1.2.1.2.2.1.18.2 = Counter32: 0

068 iso.3.6.1.2.1.2.2.1.18.3 = Counter32: 0

069 iso.3.6.1.2.1.2.2.1.19.1 = Counter32: 0

070 iso.3.6.1.2.1.2.2.1.19.2 = Counter32: 0

071 iso.3.6.1.2.1.2.2.1.19.3 = Counter32: 0

072 iso.3.6.1.2.1.2.2.1.20.1 = Counter32: 0

073 iso.3.6.1.2.1.2.2.1.20.2 = Counter32: 0

074 iso.3.6.1.2.1.2.2.1.20.3 = Counter32: 0

075 iso.3.6.1.2.1.2.2.1.21.1 = Gauge32: 0

076 iso.3.6.1.2.1.2.2.1.21.2 = Gauge32: 0

077 iso.3.6.1.2.1.2.2.1.21.3 = Gauge32: 0

078 iso.3.6.1.2.1.2.2.1.22.1 = OID: ccitt.0

079 iso.3.6.1.2.1.2.2.1.22.2 = OID: ccitt.0

080 iso.3.6.1.2.1.2.2.1.22.3 = OID: ccitt.0

081 iso.3.6.1.2.1.31.1.1.1.1.1 = STRING: "wired0"

082 iso.3.6.1.2.1.31.1.1.1.1.2 = STRING: "wifi0"

083 iso.3.6.1.2.1.31.1.1.1.1.3 = STRING: "wifi1"

084 iso.3.6.1.2.1.31.1.1.1.2.1 = Counter32: 0

085 iso.3.6.1.2.1.31.1.1.1.2.2 = Counter32: 0

086 iso.3.6.1.2.1.31.1.1.1.2.3 = Counter32: 0

087 iso.3.6.1.2.1.31.1.1.1.3.1 = Counter32: 0

088 iso.3.6.1.2.1.31.1.1.1.3.2 = Counter32: 0

089 iso.3.6.1.2.1.31.1.1.1.3.3 = Counter32: 0

090 iso.3.6.1.2.1.31.1.1.1.4.1 = Counter32: 0

091 iso.3.6.1.2.1.31.1.1.1.4.2 = Counter32: 0

092 iso.3.6.1.2.1.31.1.1.1.4.3 = Counter32: 0

093 iso.3.6.1.2.1.31.1.1.1.5.1 = Counter32: 0

094 iso.3.6.1.2.1.31.1.1.1.5.2 = Counter32: 0

095 iso.3.6.1.2.1.31.1.1.1.5.3 = Counter32: 0

096 iso.3.6.1.2.1.31.1.1.1.6.1 = Counter64: 77152729

097 iso.3.6.1.2.1.31.1.1.1.6.2 = Counter64: 70138621

098 iso.3.6.1.2.1.31.1.1.1.6.3 = Counter64: 17035162

099 iso.3.6.1.2.1.31.1.1.1.7.1 = Counter64: 0

100 iso.3.6.1.2.1.31.1.1.1.7.2 = Counter64: 0

101 iso.3.6.1.2.1.31.1.1.1.7.3 = Counter64: 0

102 iso.3.6.1.2.1.31.1.1.1.8.1 = Counter64: 0

103 iso.3.6.1.2.1.31.1.1.1.8.2 = Counter64: 0

104 iso.3.6.1.2.1.31.1.1.1.8.3 = Counter64: 0

105 iso.3.6.1.2.1.31.1.1.1.9.1 = Counter64: 0

106 iso.3.6.1.2.1.31.1.1.1.9.2 = Counter64: 0

107 iso.3.6.1.2.1.31.1.1.1.9.3 = Counter64: 0

108 iso.3.6.1.2.1.31.1.1.1.10.1 = Counter64: 16102848

109 iso.3.6.1.2.1.31.1.1.1.10.2 = Counter64: 35646309

110 iso.3.6.1.2.1.31.1.1.1.10.3 = Counter64: 1540911

111 iso.3.6.1.2.1.31.1.1.1.11.1 = Counter64: 0

112 iso.3.6.1.2.1.31.1.1.1.11.2 = Counter64: 97878

113 iso.3.6.1.2.1.31.1.1.1.11.3 = Counter64: 2728

114 iso.3.6.1.2.1.31.1.1.1.12.1 = Counter64: 0

115 iso.3.6.1.2.1.31.1.1.1.12.2 = Counter64: 0

116 iso.3.6.1.2.1.31.1.1.1.12.3 = Counter64: 0

117 iso.3.6.1.2.1.31.1.1.1.13.1 = Counter64: 0

118 iso.3.6.1.2.1.31.1.1.1.13.2 = Counter64: 0

119 iso.3.6.1.2.1.31.1.1.1.13.3 = Counter64: 0

120 iso.3.6.1.2.1.31.1.1.1.15.1 = Gauge32: 0

121 iso.3.6.1.2.1.31.1.1.1.15.2 = Gauge32: 0

122 iso.3.6.1.2.1.31.1.1.1.15.3 = Gauge32: 0

123 iso.3.6.1.2.1.31.1.1.1.18.1 = ""

124 iso.3.6.1.2.1.31.1.1.1.18.2 = ""

125 iso.3.6.1.2.1.31.1.1.1.18.3 = ""

After verifying that SNMP is functioning properly, the network management system (NMS) can be configured to poll either the dashboard, MR's, or both. Consult your NMS documentation for configuration steps to add a new managed device (MR/dashboard).

carlos.ce

Thanks for your help Zennifer ,

I understand the tutorial , and it works,

but in my NPM does not give me the authentication, and I do not know why

FormerMember

I can't speak directly for NPM, but I'm out here just like you searching for a quick answer to a discrepancy I see for NCM that you might also be encountering. NCM documentation says it supports SNMPv3 with "AES256" encryption, but I also read in the NCM guide that you have to fall back to AES128 due to an issue, then change back to AES256. You might try SNMPv3 with no encryption, and narrow it down that way, but in reading Cisco documentation they use DES56 instead of AES, and a quick google seems to indicate Meraki's also use DES. I hope this helps!!!

carlos.ce

Thank you very much for the information