We are in the process of changing authentication and encryption passwords to strings with more characters.
Our current snmp v3 configuration s work well and we are able to poll our devices from our NMS.
Our current configuration is as follows.
snmp-server group usergroup1 v3 priv notify *tv.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF7F
snmp-server group usergroup2 v3 priv read SNMP-View access MONITORING
snmp-server view SNMP-View internet included
snmp-server view SNMP-View system included
snmp-server view SNMP-View interfaces included
snmp-server view SNMP-View chassis included
snmp-server enable traps snmp linkdown linkup coldstart warmstart
snmp-server enable traps envmon fan shutdown temperature status
snmp-server host X.X.X.X version 3 priv user
snmp ifmib ifindex persist
User name: user1
Engine ID: 800000090300001F6DF5FE83
storage-type: nonvolatile active access-list: MONITORING
Authentication Protocol: MD5
Privacy Protocol: AES128
Group-name: usergroup2
#sh snmp group
groupname: usergroup1 security model:v3 priv
readview : <no readview specified> writeview: <no writeview specified>
notifyview: *tv.FFFFFFFF.FFFFFFFF.FFFFFFFF.F
row status: active
groupname: usergroup2 security model:v3 priv
readview : SNMP-View writeview: <no writeview specified>
notifyview: <no notifyview specified>
row status: active access-list: MONITORING
To change the authentication password , delete all the commands using the no option, then write memory and input my new configuration with new credentials.
snmp-server group usergroup1 v3 priv
snmp-server group usergroup2 v3 priv read SNMP-Secure-View access MONITORING
snmp-server group user1 usergroup2 v3 v3 auth md5 pass1 priv aes pass2
snmp-server view SNMP-View internet included
snmp-server view SNMP-View system included
snmp-server view SNMP-View interfaces included
snmp-server view SNMP-View chassis included
snmp-server enable traps snmp linkdown linkup coldstart warmstart
snmp-server enable traps envmon fan shutdown temperature status
snmp-server host X.X.X.X version 3 priv user
snmp ifmib ifindex persist
But snmp fails because the user does not show active Accesslist as before t configutation change.
User name: user1
Engine ID: 800000090300001F6DF5FE83
storage-type: nonvolatile active
Authentication Protocol: MD5
Privacy Protocol: AES128
Group-name: usergroup2
#sh snmp group
groupname: usergroup1 security model:v3 priv
readview : <no readview specified> writeview: <no writeview specified>
notifyview: *tv.FFFFFFFF.FFFFFFFF.FFFFFFFF.F
row status: active
groupname: usergroup2 security model:v3 priv
readview : SNMP-View writeview: <no writeview specified>
notifyview: <no notifyview specified>
row status: active access-list: MONITORING
Any suggestion as to why user1 is not showing Monitoring acceslist as before?
