SNMPv3 View

[oneirishpollack]

Hi all,

Quick question, we are transitioning to SNMPv3. I am trying to understand the the whole view to group to user relationships. What view, when applied to a group, will allow all the users in the group the ability to see all the OIDs (everything "seeable")?

Thanks.

[Nael Mohammad · Accepted solution]

SNMPv3 by default allows you to poll all the oid till you enable restrictions using cut methods to restrict polling of specific OIDS.  Here is a sample for the configuration.

snmp-server group v3group v3 auth

snmp-server user v3user v3group v3 auth md5 v3pass123

For write access, you add the line below. 

snmp-server group v3group v3 auth write v1default

Joe has a great explaination on this thread:

https://supportforums.cisco.com/thread/171669

[oneirishpollack]

Great, so if I understand it correctly, if you don't utilize a specific view, the default is implemented and it allows group members to see the entire OID structure, correct?

[oneirishpollack]

After looking at the SNMP tree, is it fair to say that giving a user a view to  iso or internet is pretty much giving them a view to most everything?

[oneirishpollack]

Setup my SNMP with the following......

*************************************************

snmp-server view readview internet included

snmp-server view writeview internet included

snmp-server view readview internet included

snmp-server group readonly v3 priv read readview access 20

snmp-server user username readonly v3 auth md5 password priv des56 password

snmp-server view writeview internet included

snmp-server group readwrite v3 priv write writeview access 10

snmp-server user username readwrite v3 auth md5 password priv des56 password

*********************************

This seems to work fine for SNMP polling, but now I am trying to setup traps. I want to encrypt the SNMP data coming back to my management box. I am assuming I need a SNMP manager capable of processing v3 (encrypted) SNMP packets. I am guessing it is something along the lines of.....

snmp-server host 10.1.5.23 traps version 3 priv username

snmp-server enable traps

The problem: I am not receiving traps. I am using Kiwi Syslog to receive them, and I am guessing it is because it looks incompatible with SNMP v3 - correct?

Thanks.