Foundry NetIron M2404C and M2404F Metro Access Switches
Configuring SNMP (Rev. 03)
Simple Network Management Protocol
© 2008 Foundry Networks, Inc.
Page 42 of 48
PDUs received with community name
public
.
device-name(
config)
#snmp-server user public group public_grp v2
4. Attach the user
public
to the group
public_grp
for the security model v3.
The
restrictions of the v3_read and v3_write views will be applied on the SNMPv3
PDUs received with the user name
public
for security level AuthPriv. The PDU
will have to conform to the DES and MD5 security checks.
device-name
(config)#
snmp-server user public group public_grp v3 priv
pass1 auth md5 pass2
5. Display the created user and above assigned rights:
device-name
#
show snmp-server user
User name: public
Engine ID:1234567890ABCD
Group: public_grp model:v1
Group: public_grp model:v2c
Group: public_grp model:v3 Priv
Using SNMPv3
1. Enable the SNMP server:
device-name
#
configure terminal
device-name
(config)#
snmp-server enable
2. Configure the engine ID of the Agent:
device-name
(config)#
snmp-server engineID 1234567890
3. Create snmp view, starting from the 1.3.6 object ID in the MIB tree:
device-name
(config)#
snmp-server view MyView 1.3.6 included
4.
Configure a group with name GR1 with security model v3. Specify this
group to use authentication, read view name READ, write view for the
group WRITE and notify view with name NOTIFY for this group GR1:
device-name
(config)#
snmp-server group GR1 v3 auth read MyView write
MyView notify MyView
5. Configure a user
Mag
and assign this user to group GR1 with security model v3. Specify the
packet authentication HMAC-SHA authentication and the authentication password MAG:
device-name
(config)#
snmp-server user MAG group GR1 v3 auth sha MAG
6. Specify the notification target parameter
param1
:
device-name
(config)#
snmp-server target-param param1 MAG v3 auth PROFILE
7. Specify the notification target address 192.168.0.39. Assign a UDP port, parameter name and
tag list to the target address.
device-name
(config)#
snmp-server target-addr YOU 192.168.0.39 162 param1
tag1