cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2492
Views
0
Helpful
2
Replies

upgrade from snmpv1 to snmpv3

ohareka70
Level 3
Level 3

I want to change the polling for devices on snmpc from snmpv1 to snmpv3. I am not sure what I need to put on the properties of each device and if I need to put any configuration on the router iteslf.

Under properties for the device - What should I be picking in here? Is it SNMPV3 No-auth

I was thinking along these lines for the configuration of the snmpcv3 on the routers

#snmp-server group TelecomsNoAuth v3 noauth

#snmp-server user TelecomsNoAuthUser TelecomsNoAuth v3

#snmp-server group TelecomsNoAuth v3 noauth write view1

#snmp-server view view1 system included

#snmp-server host 192.168.x.x version 3 noauth TelecomsNoAuthUser

(192.168.x.x is the snmpc server)

Any advice is welcome

regards,

Kevin

1 Accepted Solution

Accepted Solutions

David Stanford
Cisco Employee
Cisco Employee

It really depends on what you want to do, that is, auth or no-auth. The same goes for priv.

You don't need to specific the group twice above, use it once with the write view included.

Here's the commmand syntax, yours looks ok if you're using noAuth

Router(config)# snmp-server group groupname (v3 (auth | noauth |  priv)) [read readview] [write write-view] [notify

Router(config)# snmp-server user username group-name [remote host  [udp-port port]] (v3 [encrypted] [auth (md5 | sha) auth-password]) [priv  (des | 3des | aes (128 | 1 92 |256)) privpassword]

Router(config)# snmp-server host (hostname | ip-address) [traps |  informs] [version (1 | 2c | 3 [auth | noauth | priv])] (community-string  | username) [udp-port port] [notification-type]
Router(config)# snmp-server enable traps [notification-type]
Router(config)# snmp-server view [view name] [OID] include/exclude

View solution in original post

2 Replies 2

David Stanford
Cisco Employee
Cisco Employee

It really depends on what you want to do, that is, auth or no-auth. The same goes for priv.

You don't need to specific the group twice above, use it once with the write view included.

Here's the commmand syntax, yours looks ok if you're using noAuth

Router(config)# snmp-server group groupname (v3 (auth | noauth |  priv)) [read readview] [write write-view] [notify

Router(config)# snmp-server user username group-name [remote host  [udp-port port]] (v3 [encrypted] [auth (md5 | sha) auth-password]) [priv  (des | 3des | aes (128 | 1 92 |256)) privpassword]

Router(config)# snmp-server host (hostname | ip-address) [traps |  informs] [version (1 | 2c | 3 [auth | noauth | priv])] (community-string  | username) [udp-port port] [notification-type]
Router(config)# snmp-server enable traps [notification-type]
Router(config)# snmp-server view [view name] [OID] include/exclude

ohareka70
Level 3
Level 3

Working example for: authNoPriv      

This goes on the switch

#snmp-server view readview internet included

#snmp-server group telecoms v3 auth write telecoms

#snmp-server user AuthNoPriv telecoms v3 auth md5 H4rdw4r3

#snmp-server host 192.168.12.15 traps telecoms

Working example for: authPriv         

This goes on the switch

#snmp-server view readview internet included

#snmp-server group telecoms v3 priv write telcoms

#snmp-server user AuthPriv telecoms v3 auth md5 password priv des56 H4rdw4r3

David - thanks for your help.

PS - remember to type in the usernames and passwords on the snmpc device itself