SNMPv1 connectivity not working between monitoring servers and Brocade SAN Switches

[zabbix]

Hi there, We are trying to configure SNMPv1 on the Brocade SAN switches v9.2.1a. Port 161 and 162 are open between the monitoring servers and the SAN switches and SNMPv1 is also enabled on the switches. But when monitoring server iss trying to poll data from SAN switches, there is no response from the switch side.

We tried to trace the route from network end, and it is showing that switches are not responding to the polling data sent by the server. I was checking the documentation of Brocade and it mentions "The trap recipient must be able to pass the access control list (ACL) check." 

Can someone explain how to make sure that the trap recepient(monitoring server) pass through the ACL check? Or if there is any other step we need to take?

Thanks in advance

[Cali]

Hello,

try this:

snmpconfig --set accesscontrol -index 1 -host 2.3.4.5 -access ro
snmpconfig --show accesscontrol

Cali

[zabbix]

Hi Cali,

I did the same and the monitoring server IP is added in the ACL but still switch is not accepting the connection from monitoring server.

zbxproxy-ent01:~# snmpwalk -c public 10.186.xx.xxx -v1

Timeout: No Response from 10.186.19.70

Is there anything else we can try?

[Cali]

From Brocade® Fabric OS® Command Reference Manual, 9.2.x

Also note: Beginning with Fabric OS v9.2.2, SNMPv1 configuration is no longer supported.

So even if you have 9.1, it won't help much because it will cause the same problems with the next update.

It's time to move to SNMPv3.

Cali

[zabbix]

Yes, i know it will cause the same problem in next update and I informed the same to the monitoring team, but they are adamant to configure SNMPv1  as of now, and then later move on to v3. I have also opened a case with HPE to check on this but not getting any reply from them.

[Sunitha_Mod]

Hi @zabbix,

We regret the inconvenience caused. We request you please take a moment to reply to the private message we've sent and provide the requested information. This will enable us to address your concerns with the relevant team.