Removing SNMP users / groups / communities

[shaferwr8570]

I work in an environment that has over 500 CISCO routers and switches.  We are beginning a project that converts all routers and switches from SNMP v1 to SNMP v3. Over the course of several years, there has been many different engineers, which means there are many different SNMP users, groups, and communities configured on each router and switch.  Is there a way to delete the entire SNMP database on the switches and routers without having to go in and do the single "no snmp user xxxx" for each user, group, and community?

[Joe Clarke]

You can do "no snmp-server" then write mem and reload.  Once the devices comes back up, you can re-enter the desired SNMP configuration.  You must do the reload step here as trying to reconfigure SNMP commands without the reboot will result in all of the previous configuration being re-entered into the running config.

[shaferwr8570]

Reload...

That would be a wonderful thing... for more than just SNMP issues...

Look at this:

CoreA uptime is 1 year, 47 weeks, 5 days, 16 hours, 8 minutes Time since CoreA switched to active is 1 year, 47 weeks, 5 days, 16 hours, 14 minutes System returned to ROM by  power cycle at 00:35:18 EDT Sun Apr 23 2006 (SP by power on) System restarted at 15:47:20 est Mon Jan 12 2009

As you can see, reloading the device is not something that is allowed around here.  This thing needs more than just an SNMP fix, though... an IOS upgrade would also be a relief.

Anyway, so there's no other way of removing all the users other than killing the snmp service and reloading the devices?

[Joe Clarke]

If you remove the individual lines one at a time, then they will really be gone.  The reload only replies to "no snmp-server".  If you do something like "no snmp-server user myuser" then myuser will be removed.

[Closter123]

Its possible to delete the users without a reload.  I'm in an environment where doing a reload is like pulling teeth.  Anyway, here is how.

You'll have to create the group the user was in.  It doesnt have to be exactly as it was when first created

then you'll have to make the engineID the same as its displayed for that user

Once the two above are done, then you can delete the user

Good luck.