Unable to get response from device using SNMP V3

[Jose Gutierrez]

Hi guys,

I haver Spectrum version 10.2.2 on windows platform. I discovered a network device (Cisco Router 2911) with snmp version 3. The snmp v3 configuration was without authentication just user ID and I can model the device without problems and was answering to snmp request without problems. But some day ago the device stop to responding to snmp V3 request (ping request its OK).

Even one of the MIB browser tools are installed in the same server  were Spectrum its running.

I have another tools (CA UIM and MIB browser that they can get information from the device using snmp v3 credentials that have Spectrum. But just Spectrum its tell me that cannot get response from the device.

I don't know why Spectrum its the only one tool that its not get answer to snmp request V3.  And with MIB Browser tool I have the same error.

And Finally the device have snmp v2 community string and with that snmp v2 the device response to snmp request. This discard any port blocking communications or ACL on Firewalls.

I hope you can help me to know why Spectrum its having this behavior, because I have another devices with the same problem.

Regards

Jose

[Stephen_Warne]

Has the device been swapped out? If so the engineID will have changed.

Sent from my iPhone

[Jose Gutierrez]

Hi Stephen,

 

I will ask if the device been swapped out, but there it's any way to know using Spectrum to know it?

 

In case that the device been swapped out? What I have to do in order to fix the situation?

 

Regards

 

Jose

 

 

 

[Stephen_Warne]

Hi Jose
If it’s possible for you to do so, the quick and dirty way to fix this is to delete the model and remodel the device on Spectrum.
Regards
Stephen.


Sent from my iPhone

[Stephen_Warne]

Hi Jose 

I forgot to say if you can't remodel the device here is the option to reconfigure...

https://knowledge.broadcom.com/external/article/76838/ca-spectrum-102x-snmpv3-false-management.html

Regards 

Stephen.

Sent from my iPhone 

[Jose Gutierrez]

Hi Stephen,

 

I try to run the command for reconfigured cache on Spectrum > ./update action=0x10333 mh=0x1000000, but send me Request not implemented.

 

E:\win32app\Spectrum\SS-Tools>bash -login

Your group is currently "mkpasswd".  This indicates that

the /etc/passwd (and possibly /etc/group) files should be rebuilt.

See the man pages for mkpasswd and mkgroup then, for example, run

mkpasswd -l [-d] > /etc/passwd

mkgroup  -l [-d] > /etc/group

Note that the -d switch is necessary for domain users.

BNOPCASPECTRUM1%/e/win32app/Spectrum

> cd vnmsh/

BNOPCASPECTRUM1%/e/win32app/Spectrum/vnmsh

> pwd

/e/win32app/Spectrum/vnmsh

BNOPCASPECTRUM1%/e/win32app/Spectrum/vnmsh

> ./connect

connect: successful bnopcaspectrum1

current landscape is 0x1000000

 

WARNING:  CLI is a powerful tool that allows a user to make changes

directly to the SPECTRUM knowledge-base without the error checking

provided by OneClick.  Please read the accompanying CLI user

documentation before using the create, destroy, or update commands.

 

BNOPCASPECTRUM1%/e/win32app/Spectrum/vnmsh

> ./update action=0x10333 mh=0x1000000

update: Request not implemented

BNOPCASPECTRUM1%/e/win32app/Spectrum/vnmsh

> 

 

So I guess I have to stop and start Spectroserver? I'm right?

 

Regards

 

 

Jose

 

 

[Jose Gutierrez]

Hi Stephen,

 

I look into the Spectrum Control Panel and find info about the devices vs Engine ID for each one. All they have an associates Engine ID only the device with the problem show me NO Engine ID associated.

 

 

Maybe this it's the cause why Spectrum cannot get information about the device.

 

What I have to do?

 

Regards

 

Jose

 

 

 

De: José Gutiérrez Basurto
Enviado el: jueves, 13 de agosto de 2020 08:33 a. m.
Para: '[e-mail]' <[e-mail]>
Asunto: RE: DX NetOps : Unable to get response from device using SNMP V3
Importancia: Alta

 

Hi Stephen,

 

I try to run the command for reconfigured cache on Spectrum > ./update action=0x10333 mh=0x1000000, but send me Request not implemented.

 

E:\win32app\Spectrum\SS-Tools>bash -login

Your group is currently "mkpasswd".  This indicates that

the /etc/passwd (and possibly /etc/group) files should be rebuilt.

See the man pages for mkpasswd and mkgroup then, for example, run

mkpasswd -l [-d] > /etc/passwd

mkgroup  -l [-d] > /etc/group

Note that the -d switch is necessary for domain users.

BNOPCASPECTRUM1%/e/win32app/Spectrum

> cd vnmsh/

BNOPCASPECTRUM1%/e/win32app/Spectrum/vnmsh

> pwd

/e/win32app/Spectrum/vnmsh

BNOPCASPECTRUM1%/e/win32app/Spectrum/vnmsh

> ./connect

connect: successful bnopcaspectrum1

current landscape is 0x1000000

 

WARNING:  CLI is a powerful tool that allows a user to make changes

directly to the SPECTRUM knowledge-base without the error checking

provided by OneClick.  Please read the accompanying CLI user

documentation before using the create, destroy, or update commands.

 

BNOPCASPECTRUM1%/e/win32app/Spectrum/vnmsh

> ./update action=0x10333 mh=0x1000000

update: Request not implemented

BNOPCASPECTRUM1%/e/win32app/Spectrum/vnmsh

> 

 

So I guess I have to stop and start Spectroserver? I'm right?

 

Regards

 

 

Jose

 

 

[Silvio Okamoto]

Hi Jose,

This snip shows an odd message: 

E:\win32app\Spectrum\SS-Tools>bash -login

Your group is currently "mkpasswd".  This indicates that

the /etc/passwd (and possibly /etc/group) files should be rebuilt.

See the man pages for mkpasswd and mkgroup then, for example, run

mkpasswd -l [-d] > /etc/passwd

mkgroup  -l [-d] > /etc/group

Note that the -d switch is necessary for domain users.

Are you logged Spectrum Install Owner account? Is the account member of the Spectrum Users group?

------------------------------
Technical Support Engineer IV
Broadcom Inc
------------------------------

[Jose Gutierrez]

Hi Silvio,

 

The answer to your questions:

 

Are you logged Spectrum Install Owner account? We use a domain account in order to made the installation called Monceprasrv

 

 

Is the account member of the Spectrum Users group? Yes the domain account its part of the Spectrum Users group

 

 

I need to run the commands showed when I run bash –login?

 

Regards

 

Jose

 

 

[Silvio Okamoto]

Hi Jose,

Yes, in a bash shell (bash -login).
What is your Spectrum version? I am guessing your release does not support the 0x10333 action code.

A new action code of 0x10333 has been introduced that will properly remove all engineid entries from the cache.
This is available in BMP2 for 10.2.2 and BMP1 for 10.2.3.  This is also available in 10.3 and above.


I did not see your issue in Spectrum 10.4.1 release.

------------------------------
Technical Support Engineer IV
Broadcom Inc
------------------------------

[Jose Gutierrez]

Hi Silvio,

 

My Spectrum versión is:

 

 

I use an MS-DOS windows and go to path E:\win32app\Spectrum\NT-Tools\SRE\bin and the run the next commands: (just to see if the Monceprasrv are present)

 

You can see that domain user called Monceprasrv exists.

 

 

And ruuning for local groups, because domains groups are a lot.

 

 

After the results I show you from both commands, it's necessary to run the commands

 

mkpasswd -l [-d] > /etc/passwd

mkgroup  -l [-d] > /etc/group

 

And If I have to run them (I never used them) can you please share the correct way to run them I don't want to crash or damage the product.

 

Regards

 

Jose

 

 

 

 

[Silvio Okamoto]

Hi Jose,

See the content of $SPECROOT/Install-Tools/.history.

If the BMP2 was not applied, the 0x10333 action is not supported.

You can download the Spectrum_10.02.02.BMP_10.2.202 from:
ftp://ftp.ca.com/CAproducts/CA-SPECTRUM/Updates/GA/Spectrum_10.02.02.BMP_10.2.202/

------------------------------
Technical Support Engineer IV
Broadcom Inc
------------------------------

[Jose Gutierrez]

OK Silvio,

 

So in my version it's not supported command. I need to upgrade my Spectrum.

 

But in my actual version in order to fix this situation I will need to stop/start SpectroServer. I'm OK?

 

Regards

 

Jose

 

 

 

[Silvio Okamoto]

Hi Jose,

Yes, to either apply the BMP (Bi-Monthly-Patch) or upgrade the Spectrum to the latest release, you have to stop the Spectrum application.

------------------------------
Technical Support Engineer IV
Broadcom Inc
------------------------------

[Jose Gutierrez]

Hi Silvio,

 

Apply the patch or upgrade will take some time. I have to passed all the internal process of my client in order to apply the patch or made upgrade.

 

Thanks for the help and the info about this issue. I learn more about Spectrum. Have a nice weekend.

 

Regards

 

Jose

 

 

[Stephen_Warne]

Jose

In my experience destroying and remodelling the device will fix this so should be considered.

Sent from my iPhone 

[Jose Gutierrez]

Hi Stephen,

 

I done it. But the device didn't response to the community string for remodeling. I have to use the snmp v2 to remodeling the device and after that change to snmp v3 again. And the problem for polled on V3 persists.

 

So I will have to stop/start Spectroserver.

 

Regards

 

Jose

 

 

[Stephen_Warne]

Hi Jose

That may work but I would rake Silvio's advice and back up and apply the hotfix as the first move.

Sent from my iPhone