Every night at 2 AM I'm getting an error on my Dell switches: %STKUNIT1-M:CP %SNMP-3-SNMP_AUTH_FAIL: SNMP Authentication failure for SNMP request from host x.x.x.x-Error:Snmp Unknown community
I only get this from my Dell switches, my 2 Cisco switches are not logging it in my syslogs. I am not using "Public/Private" as my community string.
I have found that when I add a node I can replicate it. Watching via wireshark I see 3 attempts between the Define Node and Choose Resources node. Each of these attempts adds an "@1" to the end of the community string, which the switches then do not authenticate. It is sending the poll to get 1.3.6.1.2.1.17.7.1.2.2.1.2. I see the rest of the SNMP traffic has my normal community string, and it replies fine. It looks like all the SNMP queries to my Cisco switches include the @1. I'm not worried about it during adding a node, but every night at 2 am for all of my switches is annoying (it did even poll IP's than hadn't been added to Orion yet). Anyone have any ideas what would be causing it, or what I can do?
Orion 2017.3.4 SP4, UDT 3.3.0, NPM 12.2, VMAN 8.1.0, NetPath 1.1.2, QoE 2.4, CloudMonitoring 1.1.0, NTA 4.2.3
This installation has had Engineers web toolset, and trials of NCM and IPAM previously installed. Unfortunately I don't recall if this started after installing one of them. I thought it may be the SNMP tools from the Desktop Engineers Toolset, first changed all the default communities, then completely uninstalled it as well.