SNMP V3 traps not processed by Spectrum

Products

• CA Spectrum

Issue/Introduction

SNMP V3 traps not processed by Spectrum. The device sending the trap is modeled in Spectrum using a SNMP V3 profile. The V3 credentials in the trap match the credentials in the V3 profile used to model the device in Spectrum.

Environment

Release:
Component: SPCCSS

Cause

Run a sniffer and check the value of the msgAuthoritativeEngineBoots in the trap. If the value of msgAuthoritativeEngineBoots is less than the value of the snmpEngineBoots on the device, Spectrum will not process the trap.

Resolution

The Spectrum code checks the value of the msgAuthoritativeEngineBoots in the trap against the polled snmpEngineBoots value on the device. The value of the msgAuthoritativeEngineBoots in the trap MUST match or be higher than the polled snmpEngineBoots value on the device. If not, Spectrum will not process the trap. This is in line with RFC 3414 "User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3)"