SNMPv3 Encryption doesn't work?

RouterOS General
1

Trying to setup SNMPv3 on a few routers that are polled across the internet
If I set ‘security’ type to Authorized (no encryption) it works fine. But ‘Private’ doesn’t work
when I turn on logging on the MikroTik I see

Packet(v3)from: [Source IP]
v3 user: [Username]
bad v3 packet security level: 1
v3 erro: 0 unsupported security level

I’ve tried both AES and DES
The poller is Solarwinds which has options for DES56/AES128/AES192/AES256 have tried all of them and get exactly the same message on the MikroTik device

If I can’t use encryption it entirely defeats the purpose of SNMPv3

2

I am having the same issue.

Did you figure this one out?

Thanks

3

Which version of Ros are you running?

The original post is from 2019, so v 6.43.x, hopefully something has been done in the meantime.

Though your case might be a regression bug in this (or that) newish version.

4

SNMP v3 works fine for me on Private MD5/DES (ROS 7.20.8)
I am not using Solarwinds though.

5

I do notice when polling data with SNMPv3 with private (encryption) the resulting data is very slow in returning. For example on a CRS510 I’ll poll 100 data points (via Zabbix) every 10 minutes and I might see an updated data point every hour if not more. This is data that should be updated constantly as I’m viewing network traffic (bytes in and out) on various interfaces.

In investigating this I used Ubuntu (LTS 2024) and performed snmpwalks with v3 and the resulting data would time out after pulling

When I revert to SNMPv1 I receive the same data snaps fingers just like that. That was on 7.15 thru 7.19. I just updated some CRS518’s to long term 7.20.8 and will do the same with the CRS510s when I see them online next time.

6

Interesting. I don’t see the same performance problem on an RB5009 v7.21.2 with SHA/DES. Polling by LibreNMS averages under 4 seconds with occasional spikes to 7s. That’s to get the full set of health and performance data.

7

I have the CRS518s and CRS510s on LT 7.20.8 and CRS520s on 7.22.1

I’ll reenable the SNMPv3 and report back my findings.