Submit a ticketCall us

Bridging the ITSM Divide
Integrated help desk and remote support software for faster resolution

Join us on Wednesday, November 29, 2017 at 11 a.m. CT, as we discuss the benefits of effectively integrating your help desk software with remote support solutions to help increase the efficiency of IT administration, improve communication, and decrease mean time to resolution (MTTR) for IT issues of all sizes. This directly impacts end-user satisfaction and your business’ bottom line. Register Now.

Home > Success Center > Archive > 2017November15 - Cleanup > Authentication failure in traps in SolarWinds NPM

Authentication failure in traps in SolarWinds NPM

Updated: October 26, 2017

Overview

Some devices send Traps with the following message:

"SNMPv2-MIB:authenticationFailure" and value cExtSnmpTargetAuthInetAddr=49.48.46.49

 

Environment

  • NPM

Cause

Possible causes to trigger "authenticationFailure trap" include:

  • Vlan Polling - Note: trap frequency should correspond to topology polling Interval, Default Node Topology Poll Interval, default is 30 Min
  • NCM jobs running

Another possibility of Error "SNMPv2-MIB:authenticationFailure"  is NCM Jobs running. Verify that Traps are received at the same time NCM jobs are running.

For more information about authenticationFailure traps, see

https://www.cisco.com/c/en/us/suppor...chs-19003.html  (© 2017 Cisco, available at https://www.cisco.com, obtained on November 10, 2017)

Resolution

Disable Vlan polling on the affected device.

 
 
See Receive trap in NPM with an extra IP for more information. 

cExtSnmpTargetAuthInetAddr = 49.48.46.49 

 

49 decimal in ASCII = "1" 
48 decimal in ASCII = "0" 
46 decimal in ASCII = "." 
49 decimal in ASCII = "1" 
or "10.1" 

 

If you had a hard-coded IP address instead of a hostname for its management host, the logic to resolve the hostname would get confused and attempt to do a reverse-dns lookup of the first 4 characters of the ASCII representation of the hostname, and connect to that instead. So, if your management host was "10.1.1.1" the first 4 characters were "10.1" which is 49.48.46.49

Source

https://lists.gt.net/nanog/users/138680  (© 2017 GT.net, available at https://lists.gt.net, obtained on November 10, 2017)

https://www.experts-exchange.com/que...rong-tftp.html (© 1996-2017 Experts Exchange, LLC., available at https://www.experts-exchange.com, obtained on November 10, 2017)

 

Additional information

How to Find the Source of Cisco SNMP AuthenticationFailure Traps

https://www.cisco.com/c/en/us/suppor...chs-19003.html (© 2017 Cisco, available at https://www.cisco.com, obtained on November 10, 2017)

 

SNMP AUTHENTICATION FAILURES

https://thwack.solarwinds.com/message/251130#251130 

 

How SNMP Works

https://technet.microsoft.com/en-us/...(v=ws.10).aspx (© 2017 Microsoft, available at https://technet.microsoft.com, obtained on November 10, 2017)

 

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment.  You elect to use third-party content at your own risk, and you will be solely responsible for the incorporation of the same if any.

 

JS - Archived to 2017November15 - Cleanup

Last modified

Tags

Classifications

Public