Avaya Inc.
– External Distribution
115
avaya.com
March 2015
8.14 SNMPv3 Configuration Example
For this configuration example, we wish to accomplish the following:
Add User 1 to USM table with authentication protocol of MD5 and privacy protocol of DES, i.e.
authPriv)
o
Use a user name of
user1
, a MD5 authentication password of
user1234
, and a DES privacy
password of
userpriv
o
Allow User 1 full MIB views with full permission starting the existing view “org”
Add User 2 to USM table authentication protocol of MD5 with no privacy protocol, i.e. authNoPriv
o
Use a user name of
user2
with a MD5 authentication password of
user2abcd
o
Allow User 2 full MIB read permission starting from the exiting “org” level, but exclude write
permission from all Private Enterprise MIB’s
To accomplish the above, please follow the steps below.
8.14.1 Configuration
Step 1
– Make sure the DES file is loaded on the switch and then issue the following command –
note this step is not required for VOSS release 4.2 or higher
VSPswitch:1(config)#
load-encryption-module DES
Step 2
– Add SNMPv3 authPriv User. In this example, we will use a user name of
user1
, a MD5
password of
user1234
, and a DES privacy password of
userpriv
VSPswitch:1(config)#
snmp-server user user1 group group_1 md5 user1234 des userpriv
Step 3
– Add SNMPv3 authNoPriv User. In this example, we will use a user name of
user2
and a
MD5 password of
user2abcd
VSPswitch:1(config)#
snmp-server user user2 group group_1 md5 user2abcd
Step 4
– Add USM group using a name of
group_1
with an access level of authPriv and read &
write view to
org
. For the PPCLI, we will need to add the user name to the group; in our example,
this is
user1
VSPswitch:1(config)#
snmp-server group group_1 "" auth-priv read-view org write-view
org
Step 5
– Using USM created above,
group_1
, add an access level of authNoPriv with read view to
org
and write to
private
where we will use this level to setup the MIB view in the next step. For
the PPCLI, we will need to add the user name to the group; in our example, this is
user2
VSPswitch:1(config)#
snmp-server group group_1 "" auth-no-priv read-view org write-view
private
Step 6
– Create a new MIB view to exclude the private MIB for User 2
VSPswitch:1(config)#
snmp-server view p1