Difference between revisions of "Netband Project - SNMPv3"
From Teknologisk videncenter
								
												
				 (→Configuration)  | 
				|||
| (10 intermediate revisions by 3 users not shown) | |||
| Line 1: | Line 1: | ||
| − | + | =SNMPv3=  | |
| + | This page is part of the [[Netband%20Project|Netband Project]]<br>  | ||
*provides secure access to devices by authenticating and encrypting packets over the network.  | *provides secure access to devices by authenticating and encrypting packets over the network.  | ||
| Line 27: | Line 28: | ||
== Configuration ==  | == Configuration ==  | ||
<pre>snmp-server group mrtg-snmp-group v3 priv  | <pre>snmp-server group mrtg-snmp-group v3 priv  | ||
| − | + | !  | |
| − | snmp-server mrtg-snmp-group v3 auth sha ciscodisco priv des ciscodisco  | + | snmp-server user mrtg-user mrtg-snmp-group v3 auth sha ciscodisco priv des ciscodisco  | 
!  | !  | ||
HQRT1#sh snmp user  | HQRT1#sh snmp user  | ||
| Line 39: | Line 40: | ||
</pre>    | </pre>    | ||
<pre>root@hqmgmt1:~# snmpget -v3 -a sha -u mrtg-user -x des -A ciscodisco -X ciscodisco -l authpriv 10.0.0.11 1.3.6.1.2.1.1.3.0  | <pre>root@hqmgmt1:~# snmpget -v3 -a sha -u mrtg-user -x des -A ciscodisco -X ciscodisco -l authpriv 10.0.0.11 1.3.6.1.2.1.1.3.0  | ||
| + | |||
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (77270968) 8 days, 22:38:29.68  | DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (77270968) 8 days, 22:38:29.68  | ||
</pre>  | </pre>  | ||
| − | *enable the router to send snmp notifications when a certain event takes place  | + | *enable the router to send snmp notifications when a certain event takes place, like linkup/down, ospf state changes and many more.  | 
<pre>snmp-server enable traps  | <pre>snmp-server enable traps  | ||
| + | </pre>  | ||
| + | |||
| + | <pre>snmp-server host 10.1.1.10 version 3 priv mrtg-user ospf  | ||
</pre>  | </pre>  | ||
| Line 48: | Line 53: | ||
[http://www.cisco.com/en/US/docs/ios/netmgmt/configuration/guide/nm_cfg_snmp_sup_ps6441_TSD_Products_Configuration_Guide_Chapter.html Cisco IOS Network Management Configuration Guide, Release 12.4T]  | [http://www.cisco.com/en/US/docs/ios/netmgmt/configuration/guide/nm_cfg_snmp_sup_ps6441_TSD_Products_Configuration_Guide_Chapter.html Cisco IOS Network Management Configuration Guide, Release 12.4T]  | ||
| + | [[Category:network]][[Category:CCNP]][[category:students]]  | ||
Latest revision as of 06:55, 13 May 2009
SNMPv3
This page is part of the Netband Project
- provides secure access to devices by authenticating and encrypting packets over the network.
 
|  Level | 
 Authentication | 
 Encryption | 
|  noAuthNoPriv | 
 Username | 
 no | 
|  authNoPriv | 
 md5 or sha | 
 no | 
|  authPriv  | 
 md5 or sha | 
 des | 
Configuration
snmp-server group mrtg-snmp-group v3 priv ! snmp-server user mrtg-user mrtg-snmp-group v3 auth sha ciscodisco priv des ciscodisco ! HQRT1#sh snmp user User name: mrtg-user Engine ID: 800000090300001BD40F8AA4 storage-type: nonvolatile active Authentication Protocol: SHA Privacy Protocol: DES Group-name: mrtg-snmp-group
root@hqmgmt1:~# snmpget -v3 -a sha -u mrtg-user -x des -A ciscodisco -X ciscodisco -l authpriv 10.0.0.11 1.3.6.1.2.1.1.3.0 DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (77270968) 8 days, 22:38:29.68
- enable the router to send snmp notifications when a certain event takes place, like linkup/down, ospf state changes and many more.
 
snmp-server enable traps
snmp-server host 10.1.1.10 version 3 priv mrtg-user ospf
External links
Cisco IOS Network Management Configuration Guide, Release 12.4T