Network devices are using SNMP v3 3des

Hi All, We are trying to discover a switch that is running snmp v3, and when we select privacy protocol it only has AES and DES. Our company is using 3DES . We looked in the " Monitoring via SNMP" doc page and it makes no reference to this protocol. How do we get this to work for us?

TIA

quite easy

WATO > HOST & Service Parameter > Access to Agent > SNMP credentials of monitored hosts

create Rule:

that`s it

Greets Bernd

Hi Bernd, We have been to that selection, but we don’t understand how you can add 3DES to the selector dropdown for Privacy protocol. It only shows DES and AES.

Sorry my fault … i doesn`t have registrated 3DES

3DES i only had used onetime by using the AgentPlugins … but @ Work tomorow i take a look

Hi Bernd, Were you able to get a chance to look into why 3des is not present in the drop down and how to correct it?

The problem is not that is not existing inside the drop down menu. The actual 5.8 Net-SNMP lib are not supporting 3DES as privacy protocol.

1 Like

This was for our network equipment (cisco routers and switches ) that are using 3des encryption.

Yes that’s clear but on Linux you will not find a Net-SNMP lib supporting this.
The Net-SNMP lib is used for all snmpwalk’s or snmpget’s.

I think I understand, so the Checkmk system itself is using net-snmp 5.8 which doesn’t have that encryption version in the lib, so is there a version of net-snmp which does have a lib that supports 3des?

There is no net-snmp version available with support for 3des. If i read the documentation correctly.
The CMK enterprise version is using pysnmp for the snmp communication and this library supports 3des.
That means with the RAW edition you cannot do anything to use 3des and with enterprise it is possible but needs some code modifications.

1 Like

Thank you very much for looking into this.