SNMP discovery issue

Ragav4 · ‎03-31-2020

I am trying to run a quick discovery for a firewall device, I am getting " SNMP probe timed out. Target is either unreachable or there are no valid credentials for it. ", I tried checking the SNMP v3 test credentials and its getting validated , now I am not sure why i am getting this error, after this error is logged in the discovery logs I get "

Target is blacklisted. No valid credential found for types [SSH Password,SSH Private Key]

I am not able to validate the ssh credential, Not sure why I am getting the first log even i am able to validate the credentials and then why it is going for a ssh test , this is for a firewall device. ?

joshvanharn · ‎03-31-2020

In line with Lee's comment: port 22 is open, so discovery will try an SSH connection first. You would expect that to fail if your going after a firewall. After this, it is trying an SNMP connect, but this also fails.

According to your message, it is timing out/lacks valid credentials. A thing to check is to see if it is using v3 or maybe (other) v1/v2 credentials. If the v3 work, you might want to make sure those are getting used (check the payload from the input SNMP probe). Have you touched/set the mid.snmp.use_snmp_v3 parameter? It's "true" by default, and needs to be for SNMPv3 to be used.

If it's using the v3 credentials, and to Tim's point, you might need additional privileges on the network to talk to the firewall(s).

View solution in original post

Swapnil Soni1 · ‎04-09-2020

Hey Ragav,

Please refer those like, might be helpful for you-

https://hi.service-now.com/kb_view.do?sysparm_article=KB0752582

here is one solution please check this-

https://community.servicenow.com/community?id=community_question&sys_id=b3dc0b29db9cdbc01dcaf3231f96...

Please mark correct or helpful if this helps.

Thanks

Swapnil