With the extreme kit, is the nossh image going to have decent enough encryption options for SNMP? If you’re also using some sort of gimped image for the ASA because you’re in some software-export-controlled country, the same may apply.

My config on my x670 which works, is using sha with aes 128 on xos 15.5.2.9.

If you have tried aes 128 support and it didn’t work, check you’ve configured the view properly, otherwise your snmpv3 user probably won’t be able to see anything.

In my case (again, on extreme), that means:

configure snmpv3 add group "ROGroup" user "observium" sec-model usm

configure snmpv3 add access "ROGroup" sec-model usm sec-level priv read-view "defaultAdminView" write-view "None" notify-view "None"

Phil

From: observium [mailto:observium-bounces@observium.org] On Behalf Of Henry Collins
Sent: 15 May 2015 10:01
To: observium@observium.org
Subject: [Observium] What SHA and AES does Observium use?

What are the key lengths of these algorithms that Observium uses? I have some firewalls, which require to set explicitly which algorithm they have to communicate with Observium. However, I cannot make it work, even though I tried all the key lengths on my firewalls. I am having trouble using SNMP v3 on the following devices:

Hardware	Summit X440-48t
Operating System	Extreme XOS 15.3.1.4 patch1-19 (nossh)

Hardware	Summit X440-24t
Operating System	Extreme XOS 15.3.1.4 patch1-19 (nossh)

Hardware	Summit Stack V2
Operating System	Extreme XOS 15.3.1.4 patch1-41 (nossh)

Hardware	ASA5515
Operating System	Cisco ASA 9.2(2)4

Observium does report that it could not authenticate. SNMP v2c works though.