Troubleshooting: SNMP tests

PROBLEM:

All/Some SNMP tests are not being discovered when adding SNMP tests.

SOLUTION:

Please review the below steps to identify and resolve the issue. If this does not identify the issue, please attach the snmpwalk (3a1) output and the probeSnmpTests.pl (3b) to the support ticket.

1. Environmental Causes:

* The DGE/DGEX may not have permissions to access the device. You may need to edit the SNMP configuration on the device(s) to allow the DGE/DGEX FQDN or IP to allow SNMP queries

* There may be a firewall - either on the DGE - or in the customer network - that is preventing SNMP traffic

* the SNMP agent(s) on the destination systems may not be running

* the community string may not be correct

* the SNMP agent on the target device may have been configured to respond only to requests from specific IP addresses.

You may run the following command from the DGE/DGEX to further assess the nature of the issue:

Windows:

C:
cd /D <TRAVERSE_HOME>
bin\snmpwalk -Oefqnt -v 2c -c XYZ n.n.n.n 

Linux:

cd <TRAVERSE_HOME>/bin
./snmpwalk -Oefqnt -v 2c -c XYZ n.n.n.n 

where n.n.n.n is the IP address of the device in question and XYZ is the appropriate community string. Note that the first parameter uses the uppercase letter "O", not number zero. (this example assumes that SNMP version 2c)

2. Wireshark:

A wireshark capture to a device (filtered on the SNMP protocol or the target IP address) will also show if

* the request is going out

* a response is coming in or not

3. Reviewing snmpwalk and probesnmptests.pl output:

3a1. Reviewing standard snmpwalk

To further troubleshoot this issue, we need a standard SNMP walk (output file snmpwalk-device.txt) 

To do the SNMP walk, please perform these steps:

1 - Log into the DGE\DGEx that provisions tests on that device.
2 - In the command prompt or terminal, navigate to the <Traverse Home>\bin directory.
3 - Run the below command. Note and report the time it took to complete the command.

 For SNMP v2c:
 snmpwalk -Oefqnt -v 2c -c XYZ n.n.n.n  > snmpwalk-device.txt
 where XYZ is the community string and n.n.n.n is the IP address of the device

 For SNMP v3:
 snmpwalk -Oefqnt -v3  -l <noAuthNoPriv|authNoPriv|authPriv> -u <username> [-a <MD5|SHA>] [-A <authphrase>]  [-x DES] [-X <privaphrase>] n.n.n.n  > snmpwalk-device.txt
 where n.n.n.n is the IP address of the device
 
 For SNMP v1:
 snmpwalk -Oefqnt -v 1 -c XYZ n.n.n.n  > snmpwalk-device.txt
 where XYZ is the community string and n.n.n.n is the IP address of the device

3a2. Reviewing enterprise snmpwalk

To further troubleshoot this issue, we need an enterprise SNMP walk (output file snmpwalk-enterprise.txt) 

To do the SNMP walk, please perform these steps:

1 - Log into the DGE\DGEx that provisions tests on that device.
2 - In the command prompt or terminal, navigate to the <Traverse Home>\bin directory.
3 - Run the below command. Note and report the time it took to complete the command.

 For SNMP v2c:
 snmpwalk -Oefqnt -v 2c -c XYZ n.n.n.n .1.3.6.1.4 > snmpwalk-enterprise.txt
 where XYZ is the community string and n.n.n.n is the IP address of the device

 For SNMP v3:
 snmpwalk -Oefqnt -v3  -l <noAuthNoPriv|authNoPriv|authPriv> -u <username> [-a <MD5|SHA>] [-A <authphrase>]  [-x DES] [-X <privaphrase>] n.n.n.n .1.3.6.1.4 > snmpwalk-enterprise.txt
 where n.n.n.n is the IP address of the device
 
 For SNMP v1:
 snmpwalk -Oefqnt -v 1 -c XYZ n.n.n.n .1.3.6.1.4 > snmpwalk-enterprise.txt
 where XYZ is the community string and n.n.n.n is the IP address of the device

3b. Reviewing probeSnmpTests.pl

To do the SNMP probe (output file snmpprobe-device.txt), please perform these steps:

1 - Log into the DGE\DGEx that provisions tests on that device.
2 - In the command prompt or terminal, navigate to the <Traverse Home>\utils directory.
3 - Run the below command. Note and report the time it took to complete the command.

 For SNMP 2c:
 probeSnmpTests.pl --host n.n.n.n --comm XYZ --version 2 --debug > snmpprobe-device.txt
 where n.n.n.n is the IP address of the device and XYZ is the community string

 For SNMP v3:
 probeSnmpTests.pl --host n.n.n.n --comm "USER:AUTH:ENCRYPT" --version 3 [--authproto=<none|md5|sha>] [--privproto=<none|des|aes>] --debug > snmpprobe-device.txt
 where n.n.n.n is the IP address of the device and USER is the username, AUTH is the password, and ENCRYPT is the encryption key. --authproto and --privproto are optional, but default to MD5 and DES when not passed.
 
 For SNMP v1:
 probeSnmpTests.pl --host n.n.n.n --comm XYZ --version 1 --debug > snmpprobe-device.txt
 where n.n.n.n is the IP address of the device and XYZ is the community string

Please review the files to make sure they are not empty then proceed to upload snmpwalk-device.txt, snmpwalk-enterprise.txt and snmpprobe-device.txt to the ticket opened with Support. Please do not attach them here .