What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general.

Learn more

PRTG Network Monitor

Intuitive to Use. Easy to manage.
More than 500,000 users rely on Paessler PRTG every day. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free Download

Top Tags


View all Tags

Unable to connect to Cisco Router

Votes:

1

Trying to configure traffic/bandwidth monitoring on a Cisco 2921 router, config below as well as error from SNMP tester.

SNMP has not been tested with this device previously.

Cisco router config:
snmp-server group prtg v3 auth read iso write ALL_ALLOW
snmp-server view ALL_ALLOW iso included
snmp-server user prtg prtg v3 auth md5 test123test priv aes 128 test123test
ROUTER#sh snmp user
User name: prtg
Engine ID: 123456789
storage-type: nonvolatile        active
Authentication Protocol: MD5
Privacy Protocol: AES128
Group-name: prtg
ROUTER#sh snmp group
groupname: prtg                             security model:v3 auth
contextname: <no context specified>         storage-type: nonvolatile
readview : iso                              writeview: ALL_ALLOW
notifyview: <no notifyview specified>
row status: active
SNMP tester error:
----------------------- New Test -----------------------
Paessler SNMP Tester 5.2.3 Computername: TAG9977 Interface: 172.16.129.94
3/14/2018 11:12:51 AM (2 ms) : Device: 172.16.127.1
3/14/2018 11:12:51 AM (4 ms) : SNMP V3
3/14/2018 11:12:51 AM (5 ms) : Uptime
3/14/2018 11:12:51 AM (189 ms) : SNMP Datatype: SNMP_EXCEPTION_NOSUCHOBJECT
3/14/2018 11:12:51 AM (191 ms) : -------
3/14/2018 11:12:51 AM (192 ms) : DISMAN-EVENT-MIB::sysUpTimeInstance = No such object (SNMP error # 222) ( 0 seconds )
3/14/2018 11:12:51 AM (403 ms) : SNMP Datatype: SNMP_EXCEPTION_NOSUCHOBJECT
3/14/2018 11:12:51 AM (404 ms) : HOST-RESOURCES-MIB::hrSystemUptime.0 = No such object (SNMP error # 222) ( 0 seconds )
3/14/2018 11:12:51 AM (406 ms) : Done

Any help would be greatly appreciated. Do I need to associate with an access list?

bandwidth cisco router snmp traffic

Created on Mar 14, 2018 3:26:25 PM

Last change on Mar 16, 2018 2:43:31 PM by  Luciano Lingnau [Paessler]



10 Replies

Votes:

0

No, you shouldn't have to add it to an ACL. That's the point of having separate authentication and encryption.

The error is a weird as it indicates it authenticated, but couldn't find uptime.

Can you try one of the other options in the SNMP tester? Maybe try List Interfaces?

Created on Mar 15, 2018 5:36:14 AM by  Benjamin Day [Paessler Support] (1,441) 2 1



Votes:

0

Sure, here is the result:

----------------------- New Test -----------------------
Paessler SNMP Tester 5.2.3 Computername: computername Interface: 1.1.1.1
3/15/2018 8:24:08 AM (2 ms) : Device: 2.2.2.2 (destination device trying to monitor, on a different subnet, can ping from 1.1.1.1)
3/15/2018 8:24:08 AM (3 ms) : SNMP V3
3/15/2018 8:24:08 AM (3 ms) : Scaninterfaces
Scanning Standard Interfaces...
3/15/2018 8:24:08 AM Start Scan
3/15/2018 8:24:08 AM Host: 2.2.2.2
3/15/2018 8:24:08 AM Community: public
3/15/2018 8:24:08 AM SNMP Version: V3
3/15/2018 8:24:08 AM Delay: 0
3/15/2018 8:24:08 AM Force32: No
3/15/2018 8:24:08 AM Single Get: No
3/15/2018 8:24:08 AM GET: 1.3.6.1.2.1.1.3.0
3/15/2018 8:24:08 AM Try 1
3/15/2018 8:24:09 AM DoRequest 0
3/15/2018 8:24:09 AM Init Session
3/15/2018 8:24:09 AM Host: 2.2.2.2:161
3/15/2018 8:24:09 AM Timeout: 2000000
3/15/2018 8:24:09 AM Version: 3
3/15/2018 8:24:09 AM Generate KU
3/15/2018 8:24:09 AM Open Session
3/15/2018 8:24:09 AM Send Request
3/15/2018 8:24:09 AM Send Done
3/15/2018 8:24:09 AM Start 53974048
3/15/2018 8:24:09 AM Done 53974048 Status=0
3/15/2018 8:24:09 AM 0 SNMP_ERR_NOSUCHOBJECT
3/15/2018 8:24:09 AM DoRequest 1
3/15/2018 8:24:09 AM Init Session
3/15/2018 8:24:09 AM Host: 2.2.2.2:161
3/15/2018 8:24:09 AM Timeout: 2000000
3/15/2018 8:24:09 AM Version: 3
3/15/2018 8:24:09 AM Generate KU
3/15/2018 8:24:09 AM Open Session
3/15/2018 8:24:09 AM Send Request
3/15/2018 8:24:09 AM Send Done
3/15/2018 8:24:09 AM Start 53711832
3/15/2018 8:24:09 AM Done 53711832 Status=0
3/15/2018 8:24:09 AM 0 SNMP_ERR_NOSUCHOBJECT
Result: #O244

Found standard interfaces:
No standard interfaces found

Created on Mar 15, 2018 12:28:47 PM

Last change on Mar 16, 2018 2:42:45 PM by  Luciano Lingnau [Paessler]



Votes:

0

Can I see a screenshot of the configuration you have the SNMP Tester for SNMPv3?

Created on Mar 15, 2018 7:39:05 PM by  Benjamin Day [Paessler Support] (1,441) 2 1



Votes:

0

Hi, here's an image of the snmp tester settings. 1.1.1.1 is the device where PRTG is installed on, 2.2.2.2 is the remote devices I'm trying to monitor (it's in a different subnet on the same network, traffic goes over internal dmvpn tunnel).

snmptester

And here's the router config again because I feel bad it wasn't formatted in the original post and I'm getting an error when trying to edit lol.

Cisco router config:
snmp-server group prtg v3 auth read iso write ALL_ALLOW
snmp-server view ALL_ALLOW iso included
snmp-server user prtg prtg v3 auth md5 test123test priv aes 128 test123test


ROUTER#sh snmp user
User name: prtg
Engine ID: 123456789
storage-type: nonvolatile active
Authentication Protocol: MD5
Privacy Protocol: AES128
Group-name: prtg


ROUTER#sh snmp group
groupname: prtg security model:v3 auth
contextname: <no context specified> storage-type: nonvolatile
readview : iso writeview: ALL_ALLOW
notifyview: <no notifyview specified>
row status: active

Created on Mar 15, 2018 8:09:14 PM



Votes:

0

Hi - I'm not sure if my other reply was approved or not, below is a screenshot of snmp tester settings.

Image description

Created on Mar 16, 2018 2:15:51 PM



Votes:

0

Does this router have any other layer 3 interfaces on it that you can try?

Are you running any ACLs on it?

Created on Mar 16, 2018 9:43:33 PM by  Benjamin Day [Paessler Support] (1,441) 2 1



Votes:

0

Hi, looks like the images aren't embedding properly here's the direct link if you want to take a look https://imgur.com/a/UxVeK

Yes the router does have ACL's on it, however this traffic should be routing through internal vpn tunnels which should allow communication between the server and the router.

Created on Mar 16, 2018 10:33:28 PM



Votes:

0

Everything looks OK.

Can you run a traceroute from the PRTG server to this device? Make sure nothing along the route is impeding or altering the data.

Created on Mar 20, 2018 1:08:01 AM by  Benjamin Day [Paessler Support] (1,441) 2 1



Votes:

0

Hi Benjamin, I ran a traceroute and it completed successfully, from the local router to the tunnel interface, and then the remote router.

Created on Mar 21, 2018 4:58:10 PM



Votes:

0

Is there a reason you are using SNMPv3?

Could we try this with a readonly SNMPv2c community and see if it works?

Then we could atleast rule out whether it's a path issue or a config issue.

Created on Mar 21, 2018 11:12:42 PM by  Benjamin Day [Paessler Support] (1,441) 2 1




Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.