Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Authorization Error after snmpv3 connect about Device Manager[PP8600]

Status
Not open for further replies.

xyCruiseryx

Technical User
Oct 18, 2004
94
DE
Hello, i try to configure SNMPv3 @ Passport8600.

I use the follow commands and entries.

1 Create a user
config snmp-v3 usm create test md5 auth test

2 Create a group and assign it to the user.
config snmp-v3 group-member create test usm group

3 Assign view access for the newly created group.
config snmp-v3 group-access create group ““ usm
auth

4 Create a MIB view.
config snmp-v3 mib-view create newmibview 1.3

5 Assign a MIB view for the group.
config snmp-v3 group-access view ngroup ““ usm
auth read newmibview write newmibview


If i try to log in with snmp-v3 (device manager) i get a authorization Error
.

My first question: What means the ““ ??? I used for number 1. is that correc
t ??

I want a easy snmpv3 configuration with 4 users and one groupe with write an
d read access.


Can anybody help me..????





Here you can see the part configuration of snmpv3.


Passport-8610:6/config/snmp-v3/usm# info

Engine ID = 80:00:08:E0:03:00:09:97:F5:D4:00

============================================================================
====
USM Configuration
============================================================================
====
User/Security Name Engine Id Protocol
----------------------------------------------------------------------------
----
test 800008E003000997F5D400 HMAC_MD5, NO PRIVACY
initial 800008E003000997F5D400 NO AUTH, NO PRIVACY

2 out of 2 Total entries displayed
------------------------------------------------------------





Passport-8610:6/config/snmp-v3/group-access# info

============================================================================
====
VACM Group Access Configuration
============================================================================
====
Group Prefix Model Level ReadV WriteV NotifyV
----------------------------------------------------------------------------
----
group 1 usm authNoPriv newmibview newmibview
initial usm noAuthNoPriv root root root
initial usm authPriv root root root
readgrp snmpv1 noAuthNoPriv v1v2only org
readgrp snmpv2c noAuthNoPriv v1v2only org
v1v2grp snmpv1 noAuthNoPriv v1v2only v1v2only v1v2only
v1v2grp snmpv2c noAuthNoPriv v1v2only v1v2only v1v2only
sBladeGrp snmpv1 noAuthNoPriv sBladeView sBladeView sBladeView
sBladeGrp snmpv2c noAuthNoPriv sBladeView sBladeView sBladeView

9 out of 9 Total entries displayed
------------------------------------------------------------




Passport-8610:6/config/snmp-v3/group-member# info

============================================================================
====
VACM Group Membership Configuration
============================================================================
====
Sec Model Security Name Group Name
----------------------------------------------------------------------------
----
snmpv1 readview readgrp
snmpv1 sBladeUser sBladeGrp
snmpv1 initialview v1v2grp
snmpv2c readview readgrp
snmpv2c sBladeUser sBladeGrp
snmpv2c initialview v1v2grp
usm test group
usm initial initial

8 out of 8 Total entries displayed
------------------------------------------------------------





Passport-8610:6/config/snmp-v3/mib-view# info

============================================================================
====
MIB View
============================================================================
====
View Name Subtree Mask Typ
e

----------------------------------------------------------------------------
----
org 1.3 inc
lude

root 1 inc
lude

snmp 1.3.6.1.6.3 inc
lude

snmp 1.3.6.1.2.1.1 inc
lude

layer1 1.3 exc
lude

layer1 1.3.6.1.2.1.2.2.1.7 inc
lude

layer1 1.3.6.1.4.1.2272.1.1.8 inc
lude

layer1 1.3.6.1.4.1.2272.1.26.2 inc
lude

layer1 1.3.6.1.4.1.2272.1.4.11.2 inc
lude

layer1 1.3.6.1.4.1.2272.1.4.10.1.1.11 inc
lude

layer1 1.3.6.1.4.1.2272.1.4.10.1.1.12 inc
lude

layer1 1.3.6.1.4.1.2272.1.4.10.1.1.14 inc
lude

layer1 1.3.6.1.4.1.2272.1.4.10.1.1.50 inc
lude

layer2 1.3 inc
lude

layer2 1.3.6.1.4.1.2272.1.8 exc
lude

layer2 1.3.6.1.4.1.2272.1.9 exc
lude

layer2 1.3.6.1.4.1.2272.1.19 exc
lude


layer2 1.3.6.1.4.1.2272.1.24 exc
lude

layer2 1.3.6.1.4.1.2272.1.29 exc
lude

layer2 1.3.6.1.4.1.2272.1.31 exc
lude

layer2 1.3.6.1.4.1.2272.1.34 exc
lude

layer2 1.3.6.1.4.1.2272.1.51 exc
lude

layer2 1.3.6.1.4.1.2272.1.23.15 exc
lude

layer2 1.3.6.1.4.1.2272.1.30.9 exc
lude

layer2 1.3.6.1.4.1.2272.1.30.10 exc
lude

layer2 1.3.6.1.4.1.2272.1.100.2 exc
lude

layer3 1.3 inc
lude

layer3 1.3.6.1.4.1.2272.1.19 exc
lude

layer3 1.3.6.1.4.1.2272.1.29 exc
lude

layer3 1.3.6.1.4.1.2272.1.31 exc
lude

layer3 1.3.6.1.4.1.2272.1.33 exc
lude

layer3 1.3.6.1.4.1.2272.1.34 exc
lude

v1v2only 1.0 inc
lude

v1v2only 1.2 inc
lude

v1v2only 1.3 inc
lude

v1v2only 1.3.6.1.6.3.15 exc
lude

v1v2only 1.3.6.1.6.3.16 exc
lude

v1v2only 1.3.6.1.6.3.18 exc
lude

newminview 1.3 inc
lude

sBladeView 1.3.6.1.4.1.1872 inc
lude



40 out of 40 Total entries displayed
------------------------------------------------------------

 
Try to delete group "group" and create again by command

config snmp-v3 group-access create group ““ usm
auth

After this assign newminview to group

config snmp-v3 group-access view ngroup ““ usm auth read newmibview write newmibview
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top