snmp-agent acl 2000
snmp-agent local-engineid 800007DB03C88D83B40801
snmp-agent community write cipher %^%#2$T[=)e<W:P$7L8g9+^Mf|A4Zl7Ea*O\O::~l}WBR|TK4Egen={8>ZX#9bYM_M<X)eB&VA|X\P!#`}+!%^%# acl 2000
snmp-agent sys-info version v2c v3
snmp-agent community complexity-check disable
故障现象:在网管上通过命令“snmpwalk -cjcbank -v2c 10.22.49.14 .1”读取设备OID时,提示 “Timeout:No Response form 10.22.49.14”
Aug 8 2017 16:33:34+08:00 CE12804 %%01SNMP/4/SNMP_IPLOCK(s):CID=0x80d504c6;The source IP was locked because of the failure of login through SNMP.(SourceIP=10.22.49.250, VPN=_public_)
Aug 8 2017 17:19:11+08:00 12804
%%01SNMP/3/SNMP_AUTHEN_FAILED(s):CID=0x80d504c6;Failed to login through
SNMP. (Version=v2c, UserName=**, Ip=10.22.49.250, VpnName=_public_,
Reason=Community is incorrect.)
snmp-agent acl 2000
snmp-agent local-engineid 800007DB03C88D83B40801
snmp-agent community write cipher %^%#2$T[=)e<W:P$7L8g9+^Mf|A4Zl7Ea*O\O::~l}WBR|TK4Egen={8>ZX#9bYM_M<X)eB&VA|X\P!#`}+!%^%# acl 2000
snmp-agent sys-info version v2c v3
snmp-agent community complexity-check disable
3.在查看设备配置同时,设备报告警提示:“Aug 8 2017 16:33:34+08:00 CE12804 %%01SNMP/4/SNMP_IPLOCK(s):CID=0x80d504c6;The source IP was locked because of the failure of login through SNMP.(SourceIP=10.22.49.250, VPN=_public_)、Aug 8 2017 17:19:11+08:00 12804
%%01SNMP/3/SNMP_AUTHEN_FAILED(s):CID=0x80d504c6;Failed to login through
SNMP. (Version=v2c, UserName=**, Ip=10.22.49.250, VpnName=_public_,
Reason=Community is incorrect.) ”由于SNMP登录认证失败,导致源IP锁定。随后向网络设备调试人员和网管工作人员了解SNMP写团体字是否有修改过,网管人员表示未在网络和设备侧进行修改,网络设备调试人员表示近期接到领导通知要将写团体字修改为复杂密码,曾对设备写团体字进行过修改,但网管侧人员并不知晓,此时建议网管侧也将写团体字修改为和设备侧一致,问题解决。
