Switch SNMPv3 settings changed to AES128 without warning

MikeHunt
Here to help

Switch SNMPv3 settings changed to AES128 without warning

One of my sites's SNMPv3 reporting went offline earlier tonight.


The Sites' > Network-Wide > Configure > General > SNMP section had a new Privacy Mode = AES128 dropdown.


Of course our monitoring software is still configured for the previous DES setting


This is easy enough to 'update' our Network Monitor to AES too, which is definitely the preferred option - but seriously WTF was this changed to begin with? This wasn't a change we triggered nor did I receive any advice about this. This caused mass panic & confusion as to why we're suddenly started loosing SNMP polling progressively across all Meraki switches on the site.


To possibly make matters worse - Some of my other sites also have this new AES128 dropdown - yet are still polling fine on the existing DES settings.  WTF is going on with the change control process here?

3 Replies 3
alemabrahao
Kind of a big deal

It's a complicated situation and I'm sorry for you, but it would be a good idea for you to contact Meraki support.

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
matts3
New here

Yes! I just noticed this too, all of our devices just dropped off from SNMP monitoring and I couldn't work out why. Thank you for sharing this.

 

It's worth noting that if you have mixed networks, i.e. both switching and wireless, that drop down doesn't even show up!

 

Annoyingly, this change hasn't hit all of our networks yet, just the one or two :S

 

Thanks Meraki for making silent changes....

elves
Here to help

having the same issue now random devices area having communication issues on prtg and others dont

 

Get notified when there are additional replies to this discussion.