96
# Execute the
shutdown
or
undo shutdown
command on an idle interface on the agent. You
can see the link state change traps on the NMS:
1.1.1.1/3374 V3 Trap = linkdown
SNMP Version = V3
Community = managev3user
Command = Trap
1.1.1.1/3374 V3 Trap = linkup
SNMP Version = V3
Community = managev3user
Command = Trap
SNMPv3 in RBAC mode configuration example
Network requirements
As shown in
, the NMS (1.1.1.2/24) uses SNMPv3 to monitor and manage the interface
status of the agent (1.1.1.1/24). The agent automatically sends notifications to report events to the
NMS.
The NMS and the agent perform authentication when they establish an SNMP session. The
authentication algorithm is SHA-1 and the authentication key is
123456TESTauth&!
. The NMS and
the agent also encrypt the SNMP packets between them by using the AES algorithm and the privacy
key
123456TESTencr&!
.
Figure 31 Network diagram
Configuration procedure
1.
Configure the agent:
# Configure the IP address of the agent, and make sure the agent and the NMS can reach each
other. (Details not shown.)
# Create the user role
test
, and permit
test
to have read and write access to the
snmp
node
(OID 1.3.6.1.2.1.11).
<Agent> system-view
[Agent] role name test
[Agent-role-test] rule 1 permit read write oid 1.3.6.1.2.1.11
# Permit the user role
test
to have read-only access to the
system
node (OID 1.3.6.1.2.1.1)
and
hh3cUIMgt
node (OID 1.3.6.1.4.1.25506.2.2).
[Agent-role-test] rule 2 permit read oid 1.3.6.1.4.1.25506.2.2
[Agent-role-test] rule 3 permit read oid 1.3.6.1.2.1.1
[Agent-role-test] quit
# Create the SNMPv3 user
managev3user
with the user role
test
, and enable the
authentication with privacy security model for the user. Set the authentication algorithm to
sha
,
authentication key to
123456TESTauth&!
, encryption algorithm to
aes128
, and privacy key to
123456TESTencr&!
.
[Agent] snmp-agent usm-user v3 managev3user user-role test simple authentication-mode
sha 123456TESTauth&! privacy-mode aes128 123456TESTencr&!
# Configure contact and physical location information for the agent.
