topic Re: SNMP Access Violations in Switches, Hubs, and Modems

SNMP Access Violations

Jason Scott — Wed, 05 Jul 2006 09:50:30 GMT

I've got a 2848 switch which, despite have a correct config, refuses to be accessed via snmp from both PCM and Inmon Traffic Sentinel / Sflowtrend.

The log has many SNMP violation entries but I've triple checked the community strings and authorised managers are correct. We have around 100 other HP switches, including 4 2848s and these all work fine.

Any suggestions?

Re: SNMP Access Violations

Jonathan Axford — Wed, 05 Jul 2006 10:06:07 GMT

The first few things i would check (In terms of PCM+ accessing the device) is the Telnet/CLI username and password combo, also, check that there isn;t an operator account setup with the same password.

Also, check that the switch is set to go straight to CLI mode and not to MENU mode when accessed.

None of these should be causing the SNMP access violations though...

Re: SNMP Access Violations

Les Ligetfalvy — Wed, 05 Jul 2006 10:32:48 GMT

Jason,
Check out my recent thread https://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1040250

I ran into an issue where the global setting changed and recently discovered switches were getting denied yet older discovered switches were fine.

Double check your global settings if you use them, otherwise check the per-device settings. Run the Test Communication Parms wizard to verify.

Re: SNMP Access Violations

Jason Scott — Wed, 05 Jul 2006 10:32:58 GMT

Yep, all checked. The config is almost a mirror image (aside from ip details etc) of our other HP switches, all of which work ok. Its baffling.

The switch is running 08.56 software so I'm going to schedule an upgrade.

Re: SNMP Access Violations

Matt Hobbs — Wed, 05 Jul 2006 16:30:40 GMT

I've heard of something similar to this. I believe a reboot will fix it, but definitely go with the firmware update at the same time.

Re: SNMP Access Violations

Werner Weiss — Thu, 06 Jul 2006 01:35:57 GMT

I have the same problem a few years ago. After change or remove the public community, I get "snmp access violations". With a sniffer I found out, that HP JetAdmin causes this error messages. On some PC was this software installed, and this polled around the network for HP printers...
In my case, I added the public community with read only rights until I have removed all JetAdmins installations....
Maybe there is a similar software installed on a PC?