[ZBX-23807] SNMP V3 - Unsupported privacy protocol Created: 2023 Dec 08  Updated: 2025 Jan 06

Status: Open
Project: ZABBIX BUGS AND ISSUES
Component/s: None
Affects Version/s: 7.0.0alpha8
Fix Version/s: None

Type: Problem report Priority: Trivial
Reporter: Bruno DE BASTIANI Assignee: Aigars Kadikis
Resolution: Unresolved Votes: 0
Labels: SNMPv3
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Attachments: PNG File image-2023-12-12-15-31-28-077.png     PNG File image-2025-01-06-10-19-47-768.png     PNG File image-2025-01-06-10-20-00-130.png     PNG File image-2025-01-06-10-21-27-155.png     PNG File image-2025-01-06-10-22-43-041.png    

 Description   

Hello,

I'm trying to monitor two ILO5s with SNMP V3 using SHA256 and AES128.
I have Zabbix 7.0.0 compiled with OpenSSL 3.0.7 on a Rocky Linux 9 server. I've also tried it with Debian 11, same result.

Monitoring ILO5 with SNMP V1 and V2 works fine, but with SNMP V3, I get an "Unsupported privacy protocol" error.
snmpwalk with SNMP v3 works fine from my Zabbix server with all parameters (Security name, Context Name (= EngineID), Community, Authpriv with Authentication protocol and passphrase & Privacy protocol and passphrase)

I only got this in the zabbix_server.log :
Code:
1725:20231206:121455.840 SNMP agent item "system.net.uptime[sysUpTime.0]" on host "vmwche006z" failed: first network error, wait for 15 seconds

Thanks in advance !

 Comments   
Comment by Aigars Kadikis [ 2023 Dec 12 ]

Thank you for reporting this problem.

The first good troubleshooting tip could be getting "snmpwalk" working with SHA256 and AES128. Could you confirm it works under the Rocky 9 environment? If it's working then share the "snmpwalk" command.

I found a similar thread which is about getting SNMPv3 working on EL9 system: https://support.zabbix.com/browse/ZBX-21081

Comment by Bruno DE BASTIANI [ 2023 Dec 12 ]

Unlike the case you're talking about, snmpwalk works fine with SHA256 and AES128 on both Debian 11 and Rocky 9.
Here is the command I use :

snmpwalk -v 3 -u 'securityName' -l authPriv -A 'authPassphrase' -a SHA-256 -X 'privPassphrase' -x AES-128 -e '0x0000000000000000000' X.X.X.X

I link the image to show where I fit these informations in Zabbix.

 

Thanks for your help

 

Comment by Chengzi [ 2025 Jan 06 ]

hi, all

has there been any progress on this issue?

 

i had the same problem with zabbix.

i installed zabbix 6.4 on a Rhel 9.4 and tried to monitor a machine by SNMPv3.

 

when i try to test a discovery rule with param below:

And run "Get value and test", i just got error message "Unsupported privacy protocol [0]".

I also tried different combinations of Authentication (SHAxxx) and Privacy (AESxxx) and got the same error message.

 

but when i run snmpwalk command on the zabbix server ,  the results are normal and i can get the data correctly.

 

and i used Wireshark to minitor port 161, when the above error occurred in test, no packet was sent.  it seems that this error has occurred within zabbix.  

Do you have ant suggestions?

Generated at Thu Jun 05 22:07:22 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.