This seems like an obvious question, but if I am using SNMPv3 authentication, do I need to configure a separate community string for the SNMP/TFTP NCM captures to work?
Just make sure the SNMPv3 username has *write* privilege. Spectrum NCM will send *SNMP set* to the device to invoke TFTP of the configuration data.
Is there any anything I have to do to the "out of the box" NCM settings before it can capture a Cisco IOS device config?
I get the "SPC-OCC-10747: Error capturing configuration for host: Device reported no config error"
That error normally due to Firewall blocking communication between SpectroSERVER and the device.
What NCM Device Family the device belong to? Do you have TFTP server running on the SpectroSERVER machine? Have you set TFTP settings in Configuration Manager node > Information tab > TFTP Configuration subview?
To check if SNMPv3 username has write access, using OneClick Console you may test to change Information tab > General Information > Contact (SysContact) by clicking the blue 'set' link and modify the value (e.g. add a 'dot' at the end). If you can modify it that means the user has SNMP write access. With TFTP server running you may SSH login to the router, change to 'enable' and run the following command
copy running-config tftp:
At the prompt you can specify IP of your SpectroSERVER machine where TFTP server is running on and destination filename. Verify if TFTP transferred the running-config.
If both SNMP write access and TFTP tests work but NCM capture still fails then I guess you should raise call ticket with us for further investigation.
You can put a read only community in the CommunityName attribute and a read-write community in the CommunityNameForSNMPSets attribute. That way you are using read only for daily polling but you can still send writes for NCM.