Last Modified: Jun 04, 2025
Affected Product(s):
F5OS F5OS-A, F5OS-C, Velos
Fixed In:
F5OS-C 1.8.0, F5OS-A 1.8.0
Opened: Sep 19, 2023 Severity: 3-Major
Snmpd daemon stuck in loop deleting and recreating 'system snmp communities community' entry after recreating and deleting SNMP config a few times.
High CPU and inconsistent state (SNMP community string comes and goes from 'show running-config system snmp' output while the user is watching it).
1. Put an SNMP configuration, e.g.: curl -sku admin:admin -H "content-type: application/yang-data+json" https://localhost/api/data/openconfig-system:system/f5-system-snmp:snmp -XPUT -d @put2.json # jq -c . <put2.json {"f5-system-snmp:snmp":{"targets":{"target":[{"name":"i10_2_108_100","config":{"name":"i10_2_108_100","community":"verynicecommunity","security-model":"v2c","ipv4":{"address":"10.2.108.100","port":162}}},{"name":"i10_2_108_101","config":{"name":"i10_2_108_101","community":"verynicecommunity","security-model":"v2c","ipv4":{"address":"10.2.108.101","port":162}}}]},"communities":{"community":[{"name":"verynicecommunity","config":{"name":"verynicecommunity","security-model":["v2c"]}}]},"engine-id":{"config":{"value":"mac"}}}} # 2. Wait 10 seconds or so 3. Delete/clear the SNMP config, using one of the two methods: a. curl -sku admin:admin -H "accept: application/yang-data+json" https://localhost/api/data/openconfig-system:system/f5-system-snmp:snmp -XDELETE b. from the confd CLI in config mode: no system snmp ; commit no-confirm 4. Wait 15 seconds, while monitoring /var/log/messages for repeating audit messages related to the SNMP config. 5. Repeat first three steps.
Restart snmpd container using docker command.
We obsoleted old SNMP configuration commands.
In latest F5OS releases (from F50S-A-1.2.x and F5OS-C-1.6.x onwards) SNMP configuration commands have been simplified. For backward compatibility, the old style SNMP configuration works until F5OS 1.7.0 and keeping a confirmation warning in the CLI asking user to use new simplified snmp commands and the old style commands will be obsolete in future releases. In latest release (from F50S-A-1.8.x and F50S-C-1.8.x), the old SNMP configuration commands are obsolete.