SNMP Discover gives RFC Ref in UIM SNMP Discovery Only.

[Gregg Stillwell]

Hi Guys,
I have an issue open as well. Trying to discover SNMP devices in USM which eHealth and Spectrum are walking the MIB fine and get this error in d-a log. Can not try longer PW and like I said eHealth and Spectrum work fine...Any ideas? Tried different types of devices as well.

Mar 04 15:52:47:418 [PerIpDiscovery-2, discovery_agent] Exception with SNMP query for 10.****** with authentication 1: java.lang.IllegalArgumentException: USM passphrases must be at least 8 bytes long (RFC3414 §11.2)
Mar 04 15:52:47:436 [PerIpDiscovery-1, discovery_agent] Exception with SNMP query for 10.****** with authentication 1: java.lang.IllegalArgumentException: USM passphrases must be at least 8 bytes long (RFC3414 §11.2)

[Marius Nitu]

Hi,

From a google search, not sure if it works:

You can simply append the password again.
If your password is "1234" you provide "12341234"
which has 8 characters but has the same key than "1234".
https://snmp4j.agentpp.narkive.com/NQWtslr8/can-i-override-the-limitation-of-snmp-v3-minimum-passphrases-length

[Gregg Stillwell]

Marius,

Your one step ahead of me. Although that does not seem to be working it is getting further and no more error. Not sure why Spectrum does not need to do this.

[David Michel]

What are the details of it not working now? 
What is the version of UIM & discovery_agent?

------------------------------
Support Engineer
Broadcom
------------------------------

[Gregg Stillwell]

Hi David, I am not getting the error about RFC and 8 character, but now trying to verify with customer SNMP access so I am not sure repeating the less then 8 character password is working, but waiting for customer to help verify. This is brand new 9.2 discovery with latest SC. No hotfixes applied....yet.

[David Michel]

One option that can be done is to use a third party tool to test such as those available under the MIB Walk Utilities section of:
https://devicesupport.broadcom.com/

------------------------------
Support Engineer
Broadcom
------------------------------

[Gregg Stillwell]

Well that is kind of the issue. SPectrum and eHealth walk the MIB and pull the data with no issues and just use the 7 character PW. Maybe those tools backfill  spaces for 8 char.. I am letting the customer do some checking on their end and see what syslog says when Discovery tries to login. I suspect they need to revisit the devices ACL. Waiting for them.