Wired Intelligent Edge

 View Only
  • 1.  BGP and OSPF info missing from SNMPv3

    Posted Feb 25, 2025 02:57 PM

    I'm using SNMPv3 to monitor many of my switches.  I would like to start monitoring routing info as well (both BGP and OSPF) but that data is unavailable when queried with SNMPv3

    root@zbx-01:~# snmpwalk -v3 -l authPriv -u *** -a SHA512 -A "*****" -x AES256 -X "*****" ww.xx.yy.zz 1.3.6.1.2.1.15
    iso.3.6.1.2.1.15 = No Such Object available on this agent at this OID

    If I try to query the same OIDs with SNMPv2c it works

    root@zbx-01:~# snmpwalk -v2c -c ***** ww.xx.yy.zz 1.3.6.1.2.1.15
    iso.3.6.1.2.1.15.1.0 = Hex-STRING: 04
    iso.3.6.1.2.1.15.2.0 = INTEGER: 22966
    ...
    

    Every other part of the SNMP tree is available on both v2c and v3.  It's just the OSPF and BGP OIDs that are missing (as far as I can tell).  Here's the snmp config from the switch in question.  Does anyone know how to make those OIDs available from SNMPv3?

    gshn(config)# show run | inc snmp
    snmp-server vrf mgmt
    snmp-server community *****
    snmpv3 user *** auth sha512 auth-pass ciphertext ***** priv aes256 priv-pass ciphertext *****
    snmpv3 context *** vrf default community *****
    


  • 2.  RE: BGP and OSPF info missing from SNMPv3

    Posted Feb 25, 2025 11:37 PM

    Is this for the same switch that snmpv2c returns value and snmpv3 does not? what firmware version is that ?



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------



  • 3.  RE: BGP and OSPF info missing from SNMPv3

    Posted Feb 26, 2025 01:59 AM

    Sorry, that would have been helpful info to include.  Both of those SNMP responses are from a JL658A 6300M 24SFP+ running firmware FL.10.14.1030.  I've checked several other switches in my environment (both 6200F and 6300M) with the same SNMP configs and they all do the same thing.




  • 4.  RE: BGP and OSPF info missing from SNMPv3

    Posted Feb 26, 2025 03:37 AM

    so is the OSPF/BGP actually configured? if so most likely it is configured for VRF default. 

    See if by changing the "snmp-server vrf default" will display the OID in SNMPv3



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------



  • 5.  RE: BGP and OSPF info missing from SNMPv3

    Posted Feb 26, 2025 05:11 AM

    Depending on the switch that I test either BGP or OSPF (or both) is configured.  On every switch the results are the same.  If the protocol is configured the info shows up when querying with v2c but not when querying with v3.  I tried your suggestion of switching to the default VRF but it didn't make any difference




  • 6.  RE: BGP and OSPF info missing from SNMPv3
    Best Answer

    Posted Feb 26, 2025 03:33 PM
    Edited by davidwk Feb 26, 2025 03:35 PM

    I solved my issue.  The problem wasn't with the switch config but with the snmpwalk command.  If you specify the context (note the addition of the '-n' flag in the following command) you can see the info

    root@zbx-01:~# snmpwalk -v3 -l authPriv -u *** -n *** -a SHA512 -A "*****" -x AES256 -X "*****" ww.xx.yy.zz 1.3.6.1.2.1.15
    iso.3.6.1.2.1.15.1.0 = Hex-STRING: 04
    iso.3.6.1.2.1.15.2.0 = INTEGER: 22966
    ...




  • 7.  RE: BGP and OSPF info missing from SNMPv3

    Posted Feb 26, 2025 05:57 PM

    that great. Yes contexts are specific to SNMP v3



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------