Hi,
this topic gave me a headache for last week. I coudnt find any relevant articles about this online so lets refresh this topic.
With the newest
PL.10.09.0010 Aruba implemented SNMP read-write access so IMC is able to communicate with my CX 6100 like with the older 2530 & 2540.
CX-6100 Switch side config syntax:
snmpv3 security-level auth-privacy (Limit the SNMP users creation only for auth+privacy options)
snmp-server vrf default
snmpv3 user xxxx auth sha auth-pass plaintext yyyy priv aes priv-pass plaintext yyyy access-level rw (in older version read-only was used by default and couldnt be changed to rw)
snmp-server snmpv3-only (this is also the newest addition to CX sw, limit SNMP only fro V3 connections. So if your company have regular security checks, they wont be showing vulnerability for older V2 and V1 public community which cant be deleted...)
snmp-server host x.x.x.x trap version v3 user xxxxx (noticed that host is not added automatically like for older models so I added manually)
On IMC side AES 128 is used privacy and SHA for auth for SNMP access template + SSH template.
With this IMC will correctly recognize switch model and SNMP can DW and UP config changes.
Like Justin mentioned, for VLAN management to work you must use REST API. So create REST API access template in IMC with user able to log in via 443, assign it to switch and IMC is showing and able to work with VLANs on switch.
Tested ond HPE IMC E0706P06 and CX 6100 with PL.10.09.0010 software.
Hope this will help others like me.....
------------------------------
Juraj Stupinský
------------------------------
Original Message:
Sent: Nov 24, 2021 09:39 AM
From: Justin Guse
Subject: HPE IMC and ARUBA 6000\6100 series switch
Hello Lee,
That's correct, AOS-CX only supports SNMP Read. However this should only limit you in terms of pushing change directly from the IMC 'device details' page like Hostname or SNMP SysInfo changes. Significant features like CLI Scripts, Config Backup/Restore, Software Deploy, ACL + VLAN Management (pushed via API instead) and more are all working despite this limitation.
------------------------------
Justin Guse
------------------------------
Original Message:
Sent: Nov 24, 2021 07:24 AM
From: Lee Armano
Subject: HPE IMC and ARUBA 6000\6100 series switch
It seems that i'm not able to use SNMP-Write against AOS-cx switches.
If i remove write function and just use read the SNMP checker works fine and i'm able to update the switch information.
This is a bit sad since the result of this is that i'm not able to push information from IMC directly to the switch..
/Lee
------------------------------
Lee Armano
Original Message:
Sent: Nov 24, 2021 05:13 AM
From: Lee Armano
Subject: HPE IMC and ARUBA 6000\6100 series switch
Hi Justin
Below is the configuration i add to the switch.
Snmp-server vrf default
snmp-server community "Private_communityName"
snmp-server system-contact "Helpdesk Phonenumber"
snmp-server system-location "****"
snmp-server host 10.8.0.44 trap version v2c community "Private_communityName"
Switch shows up in IMC as: Device Model - Unknown SNMP Product
And i'm not able to communicate with the switch over SNMP. If i manually insert all settings in IMC to run a test for SNMP it just gives me a error that it can't connect.
No i havn't done a SNMP trace will test that now, i did however do a SNMP test with Paessler SNMP tester and it connects correctly to the switch.
Kind Regards
/Lee
------------------------------
Lee Armano
Original Message:
Sent: Nov 24, 2021 04:20 AM
From: Justin Guse
Subject: HPE IMC and ARUBA 6000\6100 series switch
Hello Lee,
Can you please clarify how exactly SNMP doesn't work? What does the 6100 switch look like when you add it to IMC - is it shown as ICMP device for example? What version of SNMP are you using?
Have you checked a packet trace of the SNMP traffic from IMC when adding the device or testing SNMP settings? This is a pretty reliable way to determine what is going wrong. It sounds like there's still some configuration issue, as the 6100 series is supported since the previous patch E0705P12 already.
------------------------------
Justin Guse