xyCruiseryx
Technical User
Hello, i try to configure SNMPv3 @ Passport8600.
I use the follow commands and entries.
1 Create a user
config snmp-v3 usm create test md5 auth test
2 Create a group and assign it to the user.
config snmp-v3 group-member create test usm group
3 Assign view access for the newly created group.
config snmp-v3 group-access create group ““ usm
auth
4 Create a MIB view.
config snmp-v3 mib-view create newmibview 1.3
5 Assign a MIB view for the group.
config snmp-v3 group-access view ngroup ““ usm
auth read newmibview write newmibview
If i try to log in with snmp-v3 (device manager) i get a authorization Error
.
My first question: What means the ““ ??? I used for number 1. is that correc
t ??
I want a easy snmpv3 configuration with 4 users and one groupe with write an
d read access.
Can anybody help me..????
Here you can see the part configuration of snmpv3.
Passport-8610:6/config/snmp-v3/usm# info
Engine ID = 80:00:08:E0:03:00:09:97:F54:00
============================================================================
====
USM Configuration
============================================================================
====
User/Security Name Engine Id Protocol
----------------------------------------------------------------------------
----
test 800008E003000997F5D400 HMAC_MD5, NO PRIVACY
initial 800008E003000997F5D400 NO AUTH, NO PRIVACY
2 out of 2 Total entries displayed
------------------------------------------------------------
Passport-8610:6/config/snmp-v3/group-access# info
============================================================================
====
VACM Group Access Configuration
============================================================================
====
Group Prefix Model Level ReadV WriteV NotifyV
----------------------------------------------------------------------------
----
group 1 usm authNoPriv newmibview newmibview
initial usm noAuthNoPriv root root root
initial usm authPriv root root root
readgrp snmpv1 noAuthNoPriv v1v2only org
readgrp snmpv2c noAuthNoPriv v1v2only org
v1v2grp snmpv1 noAuthNoPriv v1v2only v1v2only v1v2only
v1v2grp snmpv2c noAuthNoPriv v1v2only v1v2only v1v2only
sBladeGrp snmpv1 noAuthNoPriv sBladeView sBladeView sBladeView
sBladeGrp snmpv2c noAuthNoPriv sBladeView sBladeView sBladeView
9 out of 9 Total entries displayed
------------------------------------------------------------
Passport-8610:6/config/snmp-v3/group-member# info
============================================================================
====
VACM Group Membership Configuration
============================================================================
====
Sec Model Security Name Group Name
----------------------------------------------------------------------------
----
snmpv1 readview readgrp
snmpv1 sBladeUser sBladeGrp
snmpv1 initialview v1v2grp
snmpv2c readview readgrp
snmpv2c sBladeUser sBladeGrp
snmpv2c initialview v1v2grp
usm test group
usm initial initial
8 out of 8 Total entries displayed
------------------------------------------------------------
Passport-8610:6/config/snmp-v3/mib-view# info
============================================================================
====
MIB View
============================================================================
====
View Name Subtree Mask Typ
e
----------------------------------------------------------------------------
----
org 1.3 inc
lude
root 1 inc
lude
snmp 1.3.6.1.6.3 inc
lude
snmp 1.3.6.1.2.1.1 inc
lude
layer1 1.3 exc
lude
layer1 1.3.6.1.2.1.2.2.1.7 inc
lude
layer1 1.3.6.1.4.1.2272.1.1.8 inc
lude
layer1 1.3.6.1.4.1.2272.1.26.2 inc
lude
layer1 1.3.6.1.4.1.2272.1.4.11.2 inc
lude
layer1 1.3.6.1.4.1.2272.1.4.10.1.1.11 inc
lude
layer1 1.3.6.1.4.1.2272.1.4.10.1.1.12 inc
lude
layer1 1.3.6.1.4.1.2272.1.4.10.1.1.14 inc
lude
layer1 1.3.6.1.4.1.2272.1.4.10.1.1.50 inc
lude
layer2 1.3 inc
lude
layer2 1.3.6.1.4.1.2272.1.8 exc
lude
layer2 1.3.6.1.4.1.2272.1.9 exc
lude
layer2 1.3.6.1.4.1.2272.1.19 exc
lude
layer2 1.3.6.1.4.1.2272.1.24 exc
lude
layer2 1.3.6.1.4.1.2272.1.29 exc
lude
layer2 1.3.6.1.4.1.2272.1.31 exc
lude
layer2 1.3.6.1.4.1.2272.1.34 exc
lude
layer2 1.3.6.1.4.1.2272.1.51 exc
lude
layer2 1.3.6.1.4.1.2272.1.23.15 exc
lude
layer2 1.3.6.1.4.1.2272.1.30.9 exc
lude
layer2 1.3.6.1.4.1.2272.1.30.10 exc
lude
layer2 1.3.6.1.4.1.2272.1.100.2 exc
lude
layer3 1.3 inc
lude
layer3 1.3.6.1.4.1.2272.1.19 exc
lude
layer3 1.3.6.1.4.1.2272.1.29 exc
lude
layer3 1.3.6.1.4.1.2272.1.31 exc
lude
layer3 1.3.6.1.4.1.2272.1.33 exc
lude
layer3 1.3.6.1.4.1.2272.1.34 exc
lude
v1v2only 1.0 inc
lude
v1v2only 1.2 inc
lude
v1v2only 1.3 inc
lude
v1v2only 1.3.6.1.6.3.15 exc
lude
v1v2only 1.3.6.1.6.3.16 exc
lude
v1v2only 1.3.6.1.6.3.18 exc
lude
newminview 1.3 inc
lude
sBladeView 1.3.6.1.4.1.1872 inc
lude
40 out of 40 Total entries displayed
------------------------------------------------------------
I use the follow commands and entries.
1 Create a user
config snmp-v3 usm create test md5 auth test
2 Create a group and assign it to the user.
config snmp-v3 group-member create test usm group
3 Assign view access for the newly created group.
config snmp-v3 group-access create group ““ usm
auth
4 Create a MIB view.
config snmp-v3 mib-view create newmibview 1.3
5 Assign a MIB view for the group.
config snmp-v3 group-access view ngroup ““ usm
auth read newmibview write newmibview
If i try to log in with snmp-v3 (device manager) i get a authorization Error
.
My first question: What means the ““ ??? I used for number 1. is that correc
t ??
I want a easy snmpv3 configuration with 4 users and one groupe with write an
d read access.
Can anybody help me..????
Here you can see the part configuration of snmpv3.
Passport-8610:6/config/snmp-v3/usm# info
Engine ID = 80:00:08:E0:03:00:09:97:F54:00
============================================================================
====
USM Configuration
============================================================================
====
User/Security Name Engine Id Protocol
----------------------------------------------------------------------------
----
test 800008E003000997F5D400 HMAC_MD5, NO PRIVACY
initial 800008E003000997F5D400 NO AUTH, NO PRIVACY
2 out of 2 Total entries displayed
------------------------------------------------------------
Passport-8610:6/config/snmp-v3/group-access# info
============================================================================
====
VACM Group Access Configuration
============================================================================
====
Group Prefix Model Level ReadV WriteV NotifyV
----------------------------------------------------------------------------
----
group 1 usm authNoPriv newmibview newmibview
initial usm noAuthNoPriv root root root
initial usm authPriv root root root
readgrp snmpv1 noAuthNoPriv v1v2only org
readgrp snmpv2c noAuthNoPriv v1v2only org
v1v2grp snmpv1 noAuthNoPriv v1v2only v1v2only v1v2only
v1v2grp snmpv2c noAuthNoPriv v1v2only v1v2only v1v2only
sBladeGrp snmpv1 noAuthNoPriv sBladeView sBladeView sBladeView
sBladeGrp snmpv2c noAuthNoPriv sBladeView sBladeView sBladeView
9 out of 9 Total entries displayed
------------------------------------------------------------
Passport-8610:6/config/snmp-v3/group-member# info
============================================================================
====
VACM Group Membership Configuration
============================================================================
====
Sec Model Security Name Group Name
----------------------------------------------------------------------------
----
snmpv1 readview readgrp
snmpv1 sBladeUser sBladeGrp
snmpv1 initialview v1v2grp
snmpv2c readview readgrp
snmpv2c sBladeUser sBladeGrp
snmpv2c initialview v1v2grp
usm test group
usm initial initial
8 out of 8 Total entries displayed
------------------------------------------------------------
Passport-8610:6/config/snmp-v3/mib-view# info
============================================================================
====
MIB View
============================================================================
====
View Name Subtree Mask Typ
e
----------------------------------------------------------------------------
----
org 1.3 inc
lude
root 1 inc
lude
snmp 1.3.6.1.6.3 inc
lude
snmp 1.3.6.1.2.1.1 inc
lude
layer1 1.3 exc
lude
layer1 1.3.6.1.2.1.2.2.1.7 inc
lude
layer1 1.3.6.1.4.1.2272.1.1.8 inc
lude
layer1 1.3.6.1.4.1.2272.1.26.2 inc
lude
layer1 1.3.6.1.4.1.2272.1.4.11.2 inc
lude
layer1 1.3.6.1.4.1.2272.1.4.10.1.1.11 inc
lude
layer1 1.3.6.1.4.1.2272.1.4.10.1.1.12 inc
lude
layer1 1.3.6.1.4.1.2272.1.4.10.1.1.14 inc
lude
layer1 1.3.6.1.4.1.2272.1.4.10.1.1.50 inc
lude
layer2 1.3 inc
lude
layer2 1.3.6.1.4.1.2272.1.8 exc
lude
layer2 1.3.6.1.4.1.2272.1.9 exc
lude
layer2 1.3.6.1.4.1.2272.1.19 exc
lude
layer2 1.3.6.1.4.1.2272.1.24 exc
lude
layer2 1.3.6.1.4.1.2272.1.29 exc
lude
layer2 1.3.6.1.4.1.2272.1.31 exc
lude
layer2 1.3.6.1.4.1.2272.1.34 exc
lude
layer2 1.3.6.1.4.1.2272.1.51 exc
lude
layer2 1.3.6.1.4.1.2272.1.23.15 exc
lude
layer2 1.3.6.1.4.1.2272.1.30.9 exc
lude
layer2 1.3.6.1.4.1.2272.1.30.10 exc
lude
layer2 1.3.6.1.4.1.2272.1.100.2 exc
lude
layer3 1.3 inc
lude
layer3 1.3.6.1.4.1.2272.1.19 exc
lude
layer3 1.3.6.1.4.1.2272.1.29 exc
lude
layer3 1.3.6.1.4.1.2272.1.31 exc
lude
layer3 1.3.6.1.4.1.2272.1.33 exc
lude
layer3 1.3.6.1.4.1.2272.1.34 exc
lude
v1v2only 1.0 inc
lude
v1v2only 1.2 inc
lude
v1v2only 1.3 inc
lude
v1v2only 1.3.6.1.6.3.15 exc
lude
v1v2only 1.3.6.1.6.3.16 exc
lude
v1v2only 1.3.6.1.6.3.18 exc
lude
newminview 1.3 inc
lude
sBladeView 1.3.6.1.4.1.1872 inc
lude
40 out of 40 Total entries displayed
------------------------------------------------------------