300-410 Question 267
Single answerA network engineer is troubleshooting an SNMP issue on a Cisco router. The SNMPv3 manager is unable to collect data from the router, even though the SNMP user credentials are correct. Upon inspection, the following configuration is found on the router:
snmp-server group PRIV_GROUP v3 priv snmp-server user USER1 PRIV_GROUP v3 auth md5 my_auth_password priv aes 128 my_priv_password snmp-server host 192.168.1.100 version 3 priv USER1
What could be the cause of the issue?
- A
The SNMPv3 user is configured with authentication and privacy, but the SNMP manager is not using privacy settings.
- B
The SNMPv3 group PRIV_GROUP is incorrectly configured to use 'priv' instead of 'auth'.
- C
The SNMP host 192.168.1.100 is not reachable from the router.
- D
The SNMP manager's IP address is not configured in the 'snmp-server host' command.
Show answer and explanation
Correct answer: A
Explanation
In SNMPv3, the group configuration determines the required security level (e.g., 'auth', 'priv'). If the group is set to 'priv', the manager must also use privacy settings when communicating with the router. In this case, the group PRIV_GROUP is configured with 'priv', but the manager is not using privacy, which causes the communication failure.
- A. Correct.
The SNMPv3 configuration requires both authentication and privacy settings ('priv') if the group is configured with 'priv'. If the SNMP manager does not match this requirement, communication will fail.
- B. Incorrect.
The group PRIV_GROUP is correctly configured with 'priv', which matches the user configuration. This is not the cause of the issue.
- C. Incorrect.
If the SNMP host were unreachable, the issue would be related to network connectivity, not SNMP configuration. The question focuses on SNMP troubleshooting.
- D. Incorrect.
The SNMP manager's IP address is correctly configured in the 'snmp-server host' command, so this is not the issue.