Requirement:
Aruba hardware and virtual mobility controllers running version 8.x.
Solution:SNMP logging can be used to provide error information associated with authentication and privacy.
Configuration:
---------- SNMP Version 3 Configuration ----------
(StandaloneVMC) [mynode] (config) #snmp-server user snmpadmin auth-prot sha aruba123 priv-prot aes aruba123
(StandaloneVMC) ^[mynode] (config) #write memory
---------- Enable SNMP Logging ----------
(StandaloneVMC) [mynode] (config) #logging system process snmp subcat all level debugging
(StandaloneVMC) ^[mynode] (config) #write me
Saving Configuration...
Configuration Saved.
(StandaloneVMC) [mynode] (config) #exit
(StandaloneVMC) [mynode] #show logging level verbose
LOGGING LEVELS
--------------
Facility Level Sub Category Process
-------- ----- ------------ -------
arm warnings N/A N/A
network warnings N/A N/A
network debugging all snmp
security warnings N/A N/A
security debugging N/A dot1x-proc
security debugging N/A authmgr
security debugging aaa N/A
security warnings ids N/A
security warnings ids-ap N/A
system warnings N/A N/A
system debugging N/A snmp
system debugging all snmp
user debugging N/A N/A
wireless warnings N/A N/A
Verification
---------- Testing SNMP with Incorrect Privacy Password ----------
C:\snmpwalk -sn:snmpadmin -v:3 -r:10.250.111.12 -ap:sha -aw:aruba123 -pp:aes128 -pw:aruba12 -os:1.3.6.1.2.1.1.1 -op:1.3.6.1.2.1.1.6
%Failed to get value of SNMP variable. Timeout.
(StandaloneVMC) [mynode] #show log system 1
Apr 11 18:38:04 :301134: <6029> <WARN> |snmp| SNMP V3 Message parse error: parse sequence error: Possible Privacy password mismatch. 799
---------- Testing SNMP with Incorrect Authentication Password ----------
C:\snmpwalk -sn:snmpadmin -v:3 -r:10.250.111.12 -ap:sha -aw:aruba12 -pp:aes128 -pw:aruba123 -os:1.3.6.1.2.1.1.1 -op:1.3.6.1.2.1.1.6
%Received a report pdu from remote host: Authentication failure (SNMPv3)
(StandaloneVMC) [mynode] #show log system 1
Apr 11 18:35:43 :301134: <6029> <WARN> |snmp| SNMP V3 Message parse error: Authentication parameters don't match: Possible Privacy password mismatch. 644
---------- Testing SNMP with Correct Password ----------
C:\Junk>snmpwalk -sn:snmpadmin -v:3 -r:15.250.111.12 -ap:sha -aw:aruba123 -pp:aes128 -pw:aruba123 -os:1.3.6.1.2.1.1.1 -op:1.3.6.1.2.1.1.6
OID=.1.3.6.1.2.1.1.1.0, Type=OctetString, Value=ArubaOS (MODEL: ArubaMC-VA-US), Version 8.6.0.2 (73853)
OID=.1.3.6.1.2.1.1.2.0, Type=OID, Value=1.3.6.1.4.1.14823.1.1.52
OID=.1.3.6.1.2.1.1.3.0, Type=TimeTicks, Value=84 days, 5:51:01.00
OID=.1.3.6.1.2.1.1.4.0, Type=OctetString, Value=
OID=.1.3.6.1.2.1.1.5.0, Type=OctetString, Value=StandaloneVMC
Total: 5