snmptd not receiving traps in trap monitor log shows Rejected! Community not in list
search cancel

snmptd not receiving traps in trap monitor log shows Rejected! Community not in list

book

Article ID: 122401

calendar_today

Updated On:

Products

DX Unified Infrastructure Management (Nimsoft / UIM) CA Unified Infrastructure Management On-Premise (Nimsoft / UIM) CA Unified Infrastructure Management SaaS (Nimsoft / UIM)

Issue/Introduction

Forwarding traps from juniper firewall , however the snmptd probe is not collecting the trap from it. 
Traps are getting received in Wireshark on the same server where the snmptd probe is installed.

snmptd.log errors:

Nov 20 10:41:25:640 [13620] snmptd: (DecodeV2Trap) - Matched second varbind to .1.3.6.1.6.3.1.1.4.1.0 (Good V2 trap). 
Nov 20 10:41:25:640 [13620] snmptd: (DecodeV2Trap) - Get trapId from snprint_value - .1.3.6.1.2.1.15.7.2 
Nov 20 10:41:25:644 [13620] snmptd: (DecodeV2Trap) - trapDescr - SNMP v2 TRAP 
Nov 20 10:41:25:644 [13620] snmptd: Rejected! Community not in list 
Nov 20 10:41:25:646 [13620] snmptd: Rejected! Community not in list 
Nov 20 10:41:25:646 [13620] snmptd: (DecodeV2Trap) - Matched second varbind to .1.3.6.1.6.3.1.1.4.1.0 (Good V2 trap). 
Nov 20 10:41:25:646 [13620] snmptd: (DecodeV2Trap) - Get trapId from snprint_value - .1.3.6.1.2.1.15.7.2 
Nov 20 10:41:25:650 [13620] snmptd: (DecodeV2Trap) - trapDescr - SNMP v2 TRAP 
Nov 20 10:41:25:650 [13620] snmptd: Rejected! Community 

Environment

  • DX UIM, any version
  • snmptd probe, any version
  • network device monitoring
  • SNMPv2c
  • traps

Cause

  • Incorrect/missing community string

Resolution

The issue is related to an incorrect/missing community string value.

In snmptd probe gui config under Security Properties

1. Confirm if the community string related to this device is present or not.
    If present, double-check the correct community string spelling. This is in the probe settings under Security manager > Community tab.

    Please note that the community string is case-sensitive as well. 

2. Add an "*" (asterisk) in the community string for testing purposes.

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/ca-unified-infrastructure-management-probes/GA/monitoring/networking-infrastructure/snmptd-simple-network-management-protocol-trap-daemon-monitoring/snmptd-im-configuration.html#concept.dita_ee2349c6e6eef8a5c07df9e642a875491c6eabb7_ManageUserandSecurity
Can specify the following security aspects: 

Community: The SNMP-TRAP v1 contains community strings. Here you can specify the incoming traps that the snmptd probe accepts. 
Normally, the community string Public is used. A * (or no community string at all) means that all incoming traps are accepted.