Correct SNMP setting for FC5022

irkmaver

Hi all.
Brocade FC5022:

FC5022:user> snmpconfig --show snmpv3

SNMP Informs = 0 (OFF)

SNMPV3 user password encrypted  = 0 (OFF)

SNMPv3 USM configuration:

User 1 (rw): mmv3_mgr

Auth Protocol: SHA

Priv Protocol: AES128

User 2 (rw): snmpadmin2

Auth Protocol: SHA

Priv Protocol: DES

User 3 (rw): snmpadmin3

Auth Protocol: SHA

Priv Protocol: DES

User 4 (ro): snmpuser1

Auth Protocol: noAuth

Priv Protocol: noPriv

User 5 (ro): snmpuser2

Auth Protocol: SHA

Priv Protocol: DES

User 6 (ro): prtg

Auth Protocol: SHA

Priv Protocol: AES128

User 7 (ro): iom

Auth Protocol: SHA

Priv Protocol: DES

SNMPv3 Trap/Informs configuration:

Trap Entry 1:     FE80::0211:25FF:FEC3:ECA0

    Trap Port: 162

    Trap User: mmv3_mgr

    Trap recipient Severity level: 0

    Notify Type: TRAP(1)

Trap Entry 2:     No trap recipient configured yet

    Notify Type: TRAP(1)

Trap Entry 3:     No trap recipient configured yet

    Notify Type: TRAP(1)

Trap Entry 4:     No trap recipient configured yet

    Notify Type: TRAP(1)

Trap Entry 5:     No trap recipient configured yet

    Notify Type: TRAP(1)

Trap Entry 6:     prtg.local

    Trap Port: 162

    Trap User: prtg

    Trap recipient Severity level: 4

    Notify Type: TRAP(1)

Trap Entry 7:     No trap recipient configured yet

    Notify Type: TRAP(1)

FC5022:user> snmpconfig --show accessControl

SNMP access list configuration:

Entry 0:  No access host configured yet

Entry 1:  No access host configured yet

Entry 2:  No access host configured yet

Entry 3:  No access host configured yet

Entry 4:  No access host configured yet

Entry 5:  No access host configured yet

FC5022:user> firmwareshow 
Appl     Primary/Secondary Versions 
------------------------------------------
FOS      v8.2.0
            v8.2.0

From stor2rrd:

[lpar2rrd@stor2rdd ~]$ snmpwalk -v 3 -u snmpuser1 SwitchIp 1.3.6.1.2.1.1.5
snmpwalk: Unknown user name

I checked this forum https://forum.xorux.com/discussion/471/fc5022-san-switch-issue-unsupported-security-level. The settings look correct. Can anyone check in their environment?

irkmaver

Any suggestions?

Karel

Hi,

what returns this command?

brocade01:admin> snmpconfig --show secLevel

GET security level = 0, SET level = 0

SNMP GET Security Level: No security

SNMP SET Security Level: No security

irkmaver

Hi.

FC5022:admin> snmpconfig --show secLevel
GET security level = 0, SET level = 3
SNMP GET Security Level: No security
SNMP SET Security Level: No Access

Karel

Hi,

snmpv1 works?

snmpwalk -v 1 -c <community string> <SwitchIp> 1.3.6.1.2.1.1.5

irkmaver

Yes, if I previously enable it:

snmpconfig --enable snmpv1
Committing configuration.....done.

Then:

[lpar2rrd@stor2rdd bin]$ snmpwalk -v 1 -c public SwitchIP 1.3.6.1.2.1.1.5
SNMPv2-MIB::sysName.0 = STRING: FC5022

Pavel

as per manual, do not you use snmp host access list?

if so, is stor2rrd host allowed?

http://www.stor2rrd.com/pics/storage/san-switch-cfg.jpg

Pavel

do you have more switches?

Are they working fine?

irkmaver

Hi, Pavel.
I have two switches in the chassis. Both work normally. But snmp3 does not work with stor2rrd. Other monitoring systems work fine with snmp3.
The access list is empty on both:

snmpconfig --show accessControl

SNMP access list configuration:
Entry 0:  No access host configured yet
Entry 1:  No access host configured yet
Entry 2:  No access host configured yet
Entry 3:  No access host configured yet
Entry 4:  No access host configured yet
Entry 5:  No access host configured yet

Pavel

what is difference between working and not working switches?

FOS? other HW?

I am afraid we cannot help you more, we have tried everything we know.

Try Brocade support.

irkmaver

Pavel, thanks for the help.
As a workaround, I enabled the snmpv1 protocol.