Network Management

Layer 2 / Layer 3 data not visible when using SNMPv3 in UDT

This article provides steps to resolve the issue when layer 2 / layer 3 data are not visible when using SNMPv3. In UDT, you may receive the following Compatibility Checker error: ERROR: 31016: Authorization Error - User does not have rights to requested MIBs The issue is caused when SNMP has not been configured to allow access to the required MIBs. To resolve, check and update the configuration for Cisco.

First published date

10/12/2018 6:23 PM

Last published date

9/8/2025 4:57 PM

Overview

This article provides brief information and steps to resolve the issue when layer 2 / layer 3 data are not visible when using SNMPv3. In UDT or any of our products using SNMPv3 but for context we will stay with UDT in our examples, you may receive the following Compatibility Checker error:
 

ERROR: 31016: Authorization Error - User does not have rights to requested MIBs 

The issue is caused when SNMP has not been configured to allow access to the required MIBs. To resolve, check and update the configuration for Cisco.

Product section

User Device Tracker

Cause

The issue is caused when SNMP has not been configured to allow access to the required MIBs.

Resolution

Below is a sample configuration that can be used on the Cisco Switch:

How to configure the SNMPV3 on Cisco Devices

  1. Create a view:
    snmp-server view <view-name> <mib-family-name>
    
    <mib-family-name>

    Includes iso, mib-2, system, interfaces, cisco, ciscoEnvMonTemperatureStatusEntry

    Example: 

    snmp-server view cisco iso included
  2. Group for the view:
    snmp-server group V3GroupName v3 [auth/noauth] read V3ReadName write V3WriteName
    
    Example: snmp-server group cisco v3 auth read cisco write cisco
    
    Example: snmp-server group cisco v3 noauth read cisco write cisco
  3. Create the user:
    snmp-server user V3UserName V3GroupName v3 auth [sha/md5] [password]

    Examples: 

     snmp-server user cisco cisco v3 auth md5 cisco priv aes 128 cisco
    
     snmp-server user cisco1 cisco v3 auth sha cisco priv aes 128 cisco

    UDT supports aes 128, aes 192, and 256 encryption.

  4. Give access to the VLAN for the Group.

    Without access list (if the switch is configured without access list):

    snmp-server group cisco v3 auth context vlan- match prefix

    With access list (if the switch is configured with access list):

    snmp-server group cisco v3 auth context vlan- match prefix access <ACL number>

    Do not enter the VLAN context in SNMPv3 Context while adding the node in UDT. See the following screen shots for your reference.

    Orion_Edit_Node.png

     

    Orion_SNMPWalk.png