How to Find the SNMPv3 Engine-ID using snmpget command
109814
Created On 09/25/18 19:50 PM - Last Modified 10/14/26 12:44 PM
Symptom
To find SNMPv3 Engine ID.
Environment
- Palo Alto Firewall or Panorama.
- PAN-OS 8.1 and above.
- SNMPv3 Configuration.
Resolution
Use SNMPv3 GET against the OID 1.3.6.1.6.3.10.2.1.1.0 to retrieve the engineID
This 'snmpget' should respond with the engineID (in HEX).
After you configured SNMP on the firewall, you can run the 'snmpget' command from an external machine, toward the firewall to fetch the information.
In this example below, 172.16.125.249 is firewall's IP address.
user@linux$ snmpget -v 3 -u test -l authPriv -a SHA -A paloalto -x AES -X paloalto 172.16.125.249 1.3.6.1.6.3.10.2.1.1.0
iso.3.6.1.6.3.10.2.1.1.0 = Hex-STRING: 80 00 1F 88 04 30 30 30 30 30 34 39 35 32 36 30 37
The engine ID retrieved above is : 0x80001f8804303030303034393532363037 (Hex)