4 Replies Latest reply on Aug 22, 2016 9:34 PM by carlos.ce

    SNMP v3 authentication error with cisco Meraki R18

    carlos.ce

      Good evening everyone, I have a question

      I am configuring a Cisco Meraki R18 for SNMP v3

      but I get an error when I add the node, the error I get is this "test failed "

       

       

      we check settings Authentication the SNMPV3

      an also the SNPMv3 privacy /encryption

       

       

      every setup is correct,someone has had this issue

      if anyone has any idea what happens,

       

       

      I am sorry for my bad english

        • Re: SNMP v3 authentication error with cisco Meraki R18
          zennifer

          I would first test SNMP on the MERAKI

          Testing SNMP

          Multiple tools exist to test SNMP functionality on various operating systems.  Windows based operating systems can use an open source tool called net-snmp.  Follow these instructions to install net-snmp and test SNMP access to the Cloud Controller:

          1. Download net-snmp and install
          2. Save the MIB file from the Dashboard (Organization > Settings > SNMP > Download MIB) to the proper net-snmp directory: C:\usr\share\snmp\mibs\ by default
          3. Copy and paste the sample snmp walk from your Controller (Organization > Settings > SNMP) and place it in a command prompt

          On a Linux-based system you can install a SNMP package to achieve the same results. Follow these instructions on Debian based systems:

          1. Install snmpd. For systems with apt-get:

             

            1sudo apt-get install snmpd

             

          2. Save the MIB file from the dashboard (Organization > Settings > SNMP > Download MIB) to the proper snmpd directory
          3. Copy and paste the example snmpwalk command from your Controller (Organization > Settings > SNMP) and place it in a terminal

           

          Testing SNMP to individual MR's is exactly the same, but you will use snmpwalk to each individual MR.  For example if you have two MR access points you would need to use snmpwalk twice (MR 1 IP: 192.168.100.15, MR2 IP: 192.168.100.16):

           

          1snmpwalk -v2c -c meraki 192.168.100.15:161

           

           

          2snmpwalk -v2c -c meraki 192.168.100.16:161

           

           

          Keep in mind that the snmpwalk command would need to modified based upon the version of SNMP that was configured.  In the above example, SNMP v2c is being used, with a community string of 'meraki', and the port has been left at a default of 161.

          The command below is an example snmpwalk for SNMPv3, using the username and passphrase configured in Network-wide > General:

           

          1snmpwalk -v3 -a sha -A <passphrase> -u <username> -x des -X <passphrase> -l authpriv <IP address>

           

           

          Sample Output

          The following is sample output from the snmpwalk command run locally, to a local MR 16:

          001sysadmin@ubuntu:~$ snmpwalk -v2c -c meraki 192.168.100.15:161

           

           

          002iso.3.6.1.2.1.1.1.0 = STRING: "Meraki MR16 Cloud Managed AP"

           

           

          003iso.3.6.1.2.1.1.2.0 = OID: iso.3.6.1.4.1.29671.2.13

           

           

          004iso.3.6.1.2.1.1.5.0 = STRING: "MR16"

           

           

          005iso.3.6.1.2.1.1.9.1.2.1 = OID: iso.3.6.1.6.3.1

           

           

          006iso.3.6.1.2.1.1.9.1.2.2 = OID: iso.3.6.1.6.3.16.2.2.1

           

           

          007iso.3.6.1.2.1.1.9.1.2.3 = OID: iso.3.6.1.2.1.31

           

           

          008iso.3.6.1.2.1.1.9.1.2.4 = OID: iso.2.840.10036

           

           

          009iso.3.6.1.2.1.1.9.1.3.1 = STRING: "The MIB module for SNMPv2 entities"

           

           

          010iso.3.6.1.2.1.1.9.1.3.2 = STRING: "View-based Access Control Model for SNMP."

           

           

          011iso.3.6.1.2.1.1.9.1.3.3 = STRING: "The MIB module to describe generic objects for network interface sub-layers"

           

           

          012iso.3.6.1.2.1.1.9.1.3.4 = STRING: "The MIB module for managing 802.11 implementations"

           

           

          013iso.3.6.1.2.1.1.9.1.4.1 = Timeticks: (0) 0:00:00.00

           

           

          014iso.3.6.1.2.1.1.9.1.4.2 = Timeticks: (1) 0:00:00.01

           

           

          015iso.3.6.1.2.1.1.9.1.4.3 = Timeticks: (6) 0:00:00.06

           

           

          016iso.3.6.1.2.1.1.9.1.4.4 = Timeticks: (6) 0:00:00.06

           

           

          017iso.3.6.1.2.1.2.1.0 = INTEGER: 3

           

           

          018iso.3.6.1.2.1.2.2.1.1.1 = INTEGER: 1

           

           

          019iso.3.6.1.2.1.2.2.1.1.2 = INTEGER: 2

           

           

          020iso.3.6.1.2.1.2.2.1.1.3 = INTEGER: 3

           

           

          021iso.3.6.1.2.1.2.2.1.2.1 = STRING: "wired0"

           

           

          022iso.3.6.1.2.1.2.2.1.2.2 = STRING: "wifi0"

           

           

          023iso.3.6.1.2.1.2.2.1.2.3 = STRING: "wifi1"

           

           

          024iso.3.6.1.2.1.2.2.1.3.1 = INTEGER: 6

           

           

          025iso.3.6.1.2.1.2.2.1.3.2 = INTEGER: 71

           

           

          026iso.3.6.1.2.1.2.2.1.3.3 = INTEGER: 71

           

           

          027iso.3.6.1.2.1.2.2.1.4.1 = INTEGER: 0

           

           

          028iso.3.6.1.2.1.2.2.1.4.2 = INTEGER: 0

           

           

          029iso.3.6.1.2.1.2.2.1.4.3 = INTEGER: 0

           

           

          030iso.3.6.1.2.1.2.2.1.5.1 = Gauge32: 0

           

           

          031iso.3.6.1.2.1.2.2.1.5.2 = Gauge32: 0

           

           

          032iso.3.6.1.2.1.2.2.1.5.3 = Gauge32: 0

           

           

          033iso.3.6.1.2.1.2.2.1.6.1 = Hex-STRING: 00 18 0A 34 36 C4

           

           

          034iso.3.6.1.2.1.2.2.1.6.2 = Hex-STRING: 00 18 0A 34 36 C4

           

           

          035iso.3.6.1.2.1.2.2.1.6.3 = Hex-STRING: 02 18 1A 34 36 C4

           

           

          036iso.3.6.1.2.1.2.2.1.7.1 = INTEGER: 1

           

           

          037iso.3.6.1.2.1.2.2.1.7.2 = INTEGER: 1

           

           

          038iso.3.6.1.2.1.2.2.1.7.3 = INTEGER: 1

           

           

          039iso.3.6.1.2.1.2.2.1.8.1 = INTEGER: 1

           

           

          040iso.3.6.1.2.1.2.2.1.8.2 = INTEGER: 1

           

           

          041iso.3.6.1.2.1.2.2.1.8.3 = INTEGER: 1

           

           

          042iso.3.6.1.2.1.2.2.1.9.1 = Timeticks: (0) 0:00:00.00

           

           

          043iso.3.6.1.2.1.2.2.1.9.2 = Timeticks: (0) 0:00:00.00

           

           

          044iso.3.6.1.2.1.2.2.1.9.3 = Timeticks: (0) 0:00:00.00

           

           

          045iso.3.6.1.2.1.2.2.1.10.1 = Counter32: 77152729

           

           

          046iso.3.6.1.2.1.2.2.1.10.2 = Counter32: 70138554

           

           

          047iso.3.6.1.2.1.2.2.1.10.3 = Counter32: 17035160

           

           

          048iso.3.6.1.2.1.2.2.1.11.1 = Counter32: 0

           

           

          049iso.3.6.1.2.1.2.2.1.11.2 = Counter32: 0

           

           

          050iso.3.6.1.2.1.2.2.1.11.3 = Counter32: 0

           

           

          051iso.3.6.1.2.1.2.2.1.12.1 = Counter32: 0

           

           

          052iso.3.6.1.2.1.2.2.1.12.2 = Counter32: 0

           

           

          053iso.3.6.1.2.1.2.2.1.12.3 = Counter32: 0

           

           

          054iso.3.6.1.2.1.2.2.1.13.1 = Counter32: 0

           

           

          055iso.3.6.1.2.1.2.2.1.13.2 = Counter32: 0

           

           

          056iso.3.6.1.2.1.2.2.1.13.3 = Counter32: 0

           

           

          057iso.3.6.1.2.1.2.2.1.14.1 = Counter32: 0

           

           

          058iso.3.6.1.2.1.2.2.1.14.2 = Counter32: 0

           

           

          059iso.3.6.1.2.1.2.2.1.14.3 = Counter32: 0

           

           

          060iso.3.6.1.2.1.2.2.1.16.1 = Counter32: 16102848

           

           

          061iso.3.6.1.2.1.2.2.1.16.2 = Counter32: 35646246

           

           

          062iso.3.6.1.2.1.2.2.1.16.3 = Counter32: 1540911

           

           

          063iso.3.6.1.2.1.2.2.1.17.1 = Counter32: 0

           

           

          064iso.3.6.1.2.1.2.2.1.17.2 = Counter32: 97878

           

           

          065iso.3.6.1.2.1.2.2.1.17.3 = Counter32: 2728

           

           

          066iso.3.6.1.2.1.2.2.1.18.1 = Counter32: 0

           

           

          067iso.3.6.1.2.1.2.2.1.18.2 = Counter32: 0

           

           

          068iso.3.6.1.2.1.2.2.1.18.3 = Counter32: 0

           

           

          069iso.3.6.1.2.1.2.2.1.19.1 = Counter32: 0

           

           

          070iso.3.6.1.2.1.2.2.1.19.2 = Counter32: 0

           

           

          071iso.3.6.1.2.1.2.2.1.19.3 = Counter32: 0

           

           

          072iso.3.6.1.2.1.2.2.1.20.1 = Counter32: 0

           

           

          073iso.3.6.1.2.1.2.2.1.20.2 = Counter32: 0

           

           

          074iso.3.6.1.2.1.2.2.1.20.3 = Counter32: 0

           

           

          075iso.3.6.1.2.1.2.2.1.21.1 = Gauge32: 0

           

           

          076iso.3.6.1.2.1.2.2.1.21.2 = Gauge32: 0

           

           

          077iso.3.6.1.2.1.2.2.1.21.3 = Gauge32: 0

           

           

          078iso.3.6.1.2.1.2.2.1.22.1 = OID: ccitt.0

           

           

          079iso.3.6.1.2.1.2.2.1.22.2 = OID: ccitt.0

           

           

          080iso.3.6.1.2.1.2.2.1.22.3 = OID: ccitt.0

           

           

          081iso.3.6.1.2.1.31.1.1.1.1.1 = STRING: "wired0"

           

           

          082iso.3.6.1.2.1.31.1.1.1.1.2 = STRING: "wifi0"

           

           

          083iso.3.6.1.2.1.31.1.1.1.1.3 = STRING: "wifi1"

           

           

          084iso.3.6.1.2.1.31.1.1.1.2.1 = Counter32: 0

           

           

          085iso.3.6.1.2.1.31.1.1.1.2.2 = Counter32: 0

           

           

          086iso.3.6.1.2.1.31.1.1.1.2.3 = Counter32: 0

           

           

          087iso.3.6.1.2.1.31.1.1.1.3.1 = Counter32: 0

           

           

          088iso.3.6.1.2.1.31.1.1.1.3.2 = Counter32: 0

           

           

          089iso.3.6.1.2.1.31.1.1.1.3.3 = Counter32: 0

           

           

          090iso.3.6.1.2.1.31.1.1.1.4.1 = Counter32: 0

           

           

          091iso.3.6.1.2.1.31.1.1.1.4.2 = Counter32: 0

           

           

          092iso.3.6.1.2.1.31.1.1.1.4.3 = Counter32: 0

           

           

          093iso.3.6.1.2.1.31.1.1.1.5.1 = Counter32: 0

           

           

          094iso.3.6.1.2.1.31.1.1.1.5.2 = Counter32: 0

           

           

          095iso.3.6.1.2.1.31.1.1.1.5.3 = Counter32: 0

           

           

          096iso.3.6.1.2.1.31.1.1.1.6.1 = Counter64: 77152729

           

           

          097iso.3.6.1.2.1.31.1.1.1.6.2 = Counter64: 70138621

           

           

          098iso.3.6.1.2.1.31.1.1.1.6.3 = Counter64: 17035162

           

           

          099iso.3.6.1.2.1.31.1.1.1.7.1 = Counter64: 0

           

           

          100iso.3.6.1.2.1.31.1.1.1.7.2 = Counter64: 0

           

           

          101iso.3.6.1.2.1.31.1.1.1.7.3 = Counter64: 0

           

           

          102iso.3.6.1.2.1.31.1.1.1.8.1 = Counter64: 0

           

           

          103iso.3.6.1.2.1.31.1.1.1.8.2 = Counter64: 0

           

           

          104iso.3.6.1.2.1.31.1.1.1.8.3 = Counter64: 0

           

           

          105iso.3.6.1.2.1.31.1.1.1.9.1 = Counter64: 0

           

           

          106iso.3.6.1.2.1.31.1.1.1.9.2 = Counter64: 0

           

           

          107iso.3.6.1.2.1.31.1.1.1.9.3 = Counter64: 0

           

           

          108iso.3.6.1.2.1.31.1.1.1.10.1 = Counter64: 16102848

           

           

          109iso.3.6.1.2.1.31.1.1.1.10.2 = Counter64: 35646309

           

           

          110iso.3.6.1.2.1.31.1.1.1.10.3 = Counter64: 1540911

           

           

          111iso.3.6.1.2.1.31.1.1.1.11.1 = Counter64: 0

           

           

          112iso.3.6.1.2.1.31.1.1.1.11.2 = Counter64: 97878

           

           

          113iso.3.6.1.2.1.31.1.1.1.11.3 = Counter64: 2728

           

           

          114iso.3.6.1.2.1.31.1.1.1.12.1 = Counter64: 0

           

           

          115iso.3.6.1.2.1.31.1.1.1.12.2 = Counter64: 0

           

           

          116iso.3.6.1.2.1.31.1.1.1.12.3 = Counter64: 0

           

           

          117iso.3.6.1.2.1.31.1.1.1.13.1 = Counter64: 0

           

           

          118iso.3.6.1.2.1.31.1.1.1.13.2 = Counter64: 0

           

           

          119iso.3.6.1.2.1.31.1.1.1.13.3 = Counter64: 0

           

           

          120iso.3.6.1.2.1.31.1.1.1.15.1 = Gauge32: 0

           

           

          121iso.3.6.1.2.1.31.1.1.1.15.2 = Gauge32: 0

           

           

          122iso.3.6.1.2.1.31.1.1.1.15.3 = Gauge32: 0

           

           

          123iso.3.6.1.2.1.31.1.1.1.18.1 = ""

           

           

          124iso.3.6.1.2.1.31.1.1.1.18.2 = ""

           

           

          125iso.3.6.1.2.1.31.1.1.1.18.3 = ""

           

           

          After verifying that SNMP is functioning properly, the network management system (NMS) can be configured to poll either the dashboard, MR's, or both.  Consult your NMS documentation for configuration steps to add a new managed device (MR/dashboard).

          • Re: SNMP v3 authentication error with cisco Meraki R18
            jblowerytc

            I can't speak directly for NPM, but I'm out here just like you searching for a quick answer to a discrepancy I see for NCM that you might also be encountering. NCM documentation says it supports SNMPv3 with "AES256" encryption, but I also read in the NCM guide that you have to fall back to AES128 due to an issue, then change back to AES256. You might try SNMPv3 with no encryption, and narrow it down that way, but in reading Cisco documentation they use DES56 instead of AES, and a quick google seems to indicate Meraki's also use DES. I hope this helps!!!