cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1990
Views
0
Helpful
5
Replies

SNMP Config

alkabeer80
Level 1
Level 1

Hi,

I need to configure cisco router 2921 for snmp v3, can you provide proper configure ?

thanksss                  

5 Replies 5

kcnajaf
Level 7
Level 7

Hi Kabeer,

Hope below url will help.

Please let us know if you need any specific informations.

http://www.cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a0080094489.shtml

Regards

Najaf

Please rate when applicable or helpful !!!

Hi, i am trying to configure snmv3 on router for monitoring.

i am not able to have proper config. do i need to put all config on the router ? if there is optimized config. i can apply it will be much better.

thanks

Vinod Arya
Cisco Employee
Cisco Employee

Configuring SNMPv3 on Cisco device is pretty simple and is MUCH preferred over v1 or v2. SNMPv3 has three big benefits:

authentication — we can be assured that the message originated from a valid source

integrity — we can be assured that a packet has not been modified in transit

encryption — no more plain-text SNMP data flying around our network

In v1 or v2 all you have to do to get the device able to get polled is configure SNMP COMMUNITY STRING.

In SNMP v3 due to increased security the steps flow is like this :

1. Create a SNMP View ---> 2. Create a GROUP for that View --> 3. Create USERS under GROUP

1. snmp-server view view-name oid-tree {included | excluded}

2. snmp-server group [groupname {v1 | v2c | v3{auth | noauth | priv}}] [read readview] [write writeview] [notify notifyview] [access access-list]

3. snmp-server user username [groupname remote ip-address [udp-port port] {v1 | v2c | v3 [encrypted] [auth {md5 | sha} auth-password [priv des56 priv password]] [access access-list]

EXAMPLE:

> Router(config)# snmp-server view target1 internet included

> Router(config)# snmp-server group mygroup v3 auth write target1

> Router(config)#snmp-server user myuser mygroup v3 encrypted auth md5 myuser

This is simplest configuration you need on a device to make it running. Than you can try to poll you device using snmp v3 username and password according to the tool to see it is wokring correctly.

For more refrence you can check following links:

http://www.cisco.com/en/US/docs/ios/12_0t/12_0t3/feature/guide/Snmp3.html#wp18842

http://evilrouters.net/2010/03/03/configuring-snmpv3-on-catalyst-switches/

http://blogs.manageengine.com/netflowanalyzer/2011/05/31/configuring-snmp-v3-on-cisco-router-and-manageengine-netflow-analyzer/

-Thanks

-Thanks Vinod **Rating Encourages contributors, and its really free. **

Hi,

thanks for config., but i need also to know which traps i should enable and how to enable traps ?

Is there any way i can test that snmp working ( tool ?)

thanks

Which traps should be configured and enabled, is usually on the Network administrator to decide what traps are important as per their network.

How to enable is simple and is almost similar for all the versions of SNMP, say v1, v2c or v3.

You can see some reference on them from :

Cisco IOS SNMP Traps Supported and How to Configure Them

-Thanks

-Thanks Vinod **Rating Encourages contributors, and its really free. **

Review Cisco Networking for a $25 gift card