Troubleshoot device discovery failure with error SNMP-E-EUSMDIGEST-[USM]: WrongDigest
Article ID: 411504
Updated On:
Products
VMware Smart Assurance
Network Observability
Issue/Introduction
Device discovery via SNMPv3 fails with error: SNMP-E-EUSMDIGEST-[USM]: WrongDigest
Environment
All Supported release of Smarts
Cause
To debug on the exception, we can check the TCPDump between Smarts IP Server and the remote device while the discovery is being run
Command to be run on the Device in this instance:
In the TCPDump we can see that the SNMP-Requests are being dropped by the device and hence the SNMPException is reported back on Smarts.sudo tcpdump -i <Smarts-Host interface name> -v -s 0 -w tcpdump.pcap host <Remote Device> and port <Port>
Example of an export from your TCPDump data shared:
=====================================================SNMP REQUEST FROM SMARTS ====================================================================
No. Time Source Destination Protocol Length Info
1 0.000000 Smarts_Host-#.#.#.# Endpoint-Device-#.#.#.# SNMP 377 get-request 1.3.6.1.2.1.15.3.1.3.Y.Y.Y.Y 1.3.6.1.2.1.15.3.1.9.Y.Y.Y.Y 1.3.6.1.2.1.15.3.1.14.Y.Y.Y.Y 1.3.6.1.2.1.15.3.1.10.Y.Y.Y.Y 1.3.6.1.2.1.15.3.1.8.Y.Y.Y.Y 1.3.6.1.2.1.15.3.1.6.Y.Y.Y.Y 1.3.6.1.2.1.15.3.1.5.Y.Y.Y.Y 1.3.6.1.2.1.15.3.1.4.Y.Y.Y.Y 1.3.6.1.2.1.15.3.1.2.Y.Y.Y.Y 1.3.6.1.2.1.15.3.1.1.Y.Y.Y.Y
Frame 1: 377 bytes on wire (3016 bits), 377 bytes captured (3016 bits)
Ethernet II, Src: VMware_b3:36:f7, Dst: All-HSRP-routers_02
Internet Protocol Version 4, Src: Smarts_Host-#.#.#.#, Dst: Endpoint-Device-#.#.#.#
Internet Protocol Version 4, Src: Smarts_Host-#.#.#.#, Dst: Endpoint-Device-#.#.#.#
User Datagram Protocol, Src Port: 38879, Dst Port: 161
Simple Network Management Protocol
msgVersion: snmpv3 (3)
msgGlobalData
msgAuthoritativeEngineID: SNMPv3-EngineID
msgAuthoritativeEngineBoots: 8
msgAuthoritativeEngineTime: 21694613
msgUserName: SNMPv3-Username
msgAuthenticationParameters: SNMPv3-msgAuthenticationParameters
msgPrivacyParameters: SNMPv3-msgPrivacyParameters
msgData: encryptedPDU (1)
encryptedPDU […]: <PDU>
Decrypted ScopedPDU […]: <PDU>
contextEngineID: SNMPv3-EngineID
contextName: <MISSING>
data: get-request (0)
get-request
request-id: 18431196
error-status: noError (0)
error-index: 0
variable-bindings: 10 items
.............
1.3.6.1.2.1.15.3.1.2.Y.Y.Y.Y: Value (Null)
Object Name: 1.3.6.1.2.1.15.3.1.2.Y.Y.Y.Y (iso.3.6.1.2.1.15.3.1.2.Y.Y.Y.Y)
Value (Null) → This value (NULL) is expected as this is a request phase of communication
==================================================================================================================================================
=====================================================RESPONSE FROM THE DEVICE ====================================================================
No. Time Source Destination Protocol Length Info
2 0.035951 Endpoint-Device-#.#.#.# Smarts_Host-#.#.#.# SNMP 168 report 1.3.6.1.6.3.15.1.1.5.0
Frame 2: 168 bytes on wire (1344 bits), 168 bytes captured (1344 bits)
Ethernet II, Src: VMware_b3:94:10, Dst: VMware_b3:36:f7
Internet Protocol Version 4, Src: Endpoint-Device-#.#.#.#, Dst: Smarts_Host-#.#.#.#
User Datagram Protocol, Src Port: 161, Dst Port: 38879
Simple Network Management Protocol
msgVersion: snmpv3 (3)
msgGlobalData
msgAuthoritativeEngineID: SNMPv3-EngineID
msgAuthoritativeEngineBoots: 8
msgAuthoritativeEngineTime: 21694614
msgUserName: SNMPv3-Username
msgAuthenticationParameters: <MISSING>
msgPrivacyParameters: <MISSING>
msgData: plaintext (0)
plaintext
contextEngineID: SNMPv3-EngineID
contextName: <MISSING>
data: report (8)
report
request-id: 2147483647
error-status: noError (0)
error-index: 0
variable-bindings: 1 item
1.3.6.1.6.3.15.1.1.5.0: 543981
Object Name: 1.3.6.1.6.3.15.1.1.5.0 (iso.3.6.1.6.3.15.1.1.5.0)
Value (Counter32): 543981 → This value keeps incrementing for every incorrect request received on the SNMPAgent
==================================================================================================================================================
Now, if we see the response from the device, 1.3.6.1.6.3.15.1.1.5.0 stands for usmStatsWrongDigests → The total number of packets received by the SNMP engine which were dropped because they didn't contain the expected digest value.
Resolution
According to the Cisco Administration Guidelines, The usmStatsWrongDigests is set when the password specified is not correct. Hence, check if both Auth and Priv passwords are correctly configured. This error is reported by the agent with its first varbind containing the OID .1.3.6.1.6.3.15.1.1.5.0.
Please evaluate with the Device Administration Team if the credentials configured on the Smarts end are valid and take corrective actions appropriately.
If the above symptoms do not match, and yet you still observe discovery issues, please raise a case with Technical Support for further troubleshooting.
Feedback
Yes
No
Powered by
