
User’s Manual
475 Mini Crate Series
W-I
e
–
N
e
-R
Plein & Baus GmbH
12/11/2017
25
Now change AUTH and PRIV passwords together with user guru for user admin from newsyrupA ->
MySecret
$ snmpusm
–
v 3 -u guru
-l authPriv -a MD5 -A newsyrup -x DES -X newsyrup
192.168.91.222 passwd
newsyrupA MySecret admin
And finally change AUTH and PRIV passwords together with user guru for user guru (himself) from
newsyrup -> MySecret
$ snmpusm
–
v 3 -u guru
-l authPriv -a MD5 -A newsyrup -x DES -X newsyrup
192.168.91.222 passwd
newsyrup MySecret
3.5.8 Changing the Security Level
The factory default security level is set to authPriv (the strictest setting).
This setting can be retrieved and changed (relaxed) by modifying the usmUserTable. According to the
SNMP-USER-BASED-SM-MIB
(RFC3414) the settings can not be changed back from
usmNoAuthProtocol (or usmNoPrivProtocol) to smoething more restrictive. The only way to do this
is to restore the default SNMP settings.
First get the values of the usmUserPriv protocol
$ snmpwalk -v 3 -u guru -l authPriv -a MD5 -A MySecret -x DES -X MySecret 192.168.91.222
usmUserPrivProtocol
SNMP-USER-BASED-SM-MIB::usmUserPrivProtocol."..M...P.-.."."guru" = OID: SNMP-USER-BASED-SM-
MIB::usmDESPrivProtocol
SNMP-USER-BASED-SM-MIB::usmUserPrivProtocol."..M...P.-.."."admin" = OID: SNMP-USER-BASED-SM-
MIB::usmDESPrivProtocol
SNMP-USER-BASED-SM-MIB::usmUserPrivProtocol."..M...P.-.."."public" = OID: SNMP-USER-BASED-SM-
MIB::usmDESPrivProtocol
SNMP-USER-BASED-SM-MIB::usmUserPrivProtocol."..M...P.-.."."wiener" = OID: SNMP-USER-BASED-SM-
MIB::usmDESPrivProtocol
SNMP-USER-BASED-SM-MIB::usmUserPrivProtocol."..M...P.-.."."private" = OID: SNMP-USER-BASED-SM-
MIB::usmDESPrivProtocol
You need the compete OID of the usmUserPrivProtocol to access it with the snmpset command. The
previous output shows only dots for some not printable OID parts of the (textual) OID. To get the
complete values, repeat the command and add the
–
On option:
$ snmpwalk -v 3 -u guru -l authPriv -a MD5 -A MySecret -x DES -X MySecret 192.168.91.222 -On
usmUserPrivProtocol
.1.3.6.1.6.3.15.1.2.2.1.8.11.128.0.77.235.3.0.80.194.45.202.164.4.103.117.114.117 = OID:
.1.3.6.1.6.3.10.1.2.2
.1.3.6.1.6.3.15.1.2.2.1.8.11.128.0.77.235.3.0.80.194.45.202.164.5.97.100.109.105.110 = OID:
.1.3.6.1.6.3.10.1.2.2
.1.3.6.1.6.3.15.1.2.2.1.8.11.128.0.77.235.3.0.80.194.45.202.164.6.112.117.98.108.105.99 = OID:
.1.3.6.1.6.3.10.1.2.2
.1.3.6.1.6.3.15.1.2.2.1.8.11.128.0.77.235.3.0.80.194.45.202.164.6.119.105.101.110.101.114 = OID:
.1.3.6.1.6.3.10.1.2.2
.1.3.6.1.6.3.15.1.2.2.1.8.11.128.0.77.235.3.0.80.194.45.202.164.7.112.114.105.118.97.116.101 = OID:
.1.3.6.1.6.3.10.1.2.2