2 Replies Latest reply: Jan 14, 2010 4:02 PM by Monte.Tucker RSS

SNMP version 3 porblem with cisco device

Hi ,

i have configured my router as below

snmp-server group V3-RO-VIEW v3 auth access 500

snmp-server host 124.100.40.190 version 3 auth public

snmp-server user public V3-RO-VIEW v3 auth sha cisco priv des56 cisco

and following setting on my Solarwind engineer toolset

username public
authntication type sha 1 password cisco encryption type des56 password cisco

When I am testing this crdentials my tool giving me error

credential test fail.

 
  • Re: SNMP version 3 porblem with cisco device

    I don't see an "snmp-server view ..." declaration in there anywhere or anything in the group declaration that indicates which view the group V3-RO-VIEW should be able to access.  Here's some Cisco documentation on this.  The following should enable read-only access to all MIBs with OIDs beginning with 1 (which is pretty much everything):

    snmp-server group V3-RO-VIEW v3 auth access 500 read myview
    snmp-server view myview iso included
    snmp-server host 124.100.40.190 version 3 auth public
    snmp-server user public V3-RO-VIEW v3 auth sha cisco priv des56 cisco

    Hope this helps.

    • Re: SNMP version 3 porblem with cisco device
      Monte.Tucker

      I had the same problem until I configured views. Here is what I would dump. Not all devices may not support 'priv' so I had two different group and user scripts.

      Setting up views:
      snmp-server view viewname interfaces included
      snmp-server view viewname internet included
      snmp-server view viewname chassis included
      snmp-server view viewname system included

      ------------------------------------------
      Setting up group:
      snmp-s group snmpgroup v3 priv read viewname
      snmp-s group snmpgroup v3 priv write viewname notify viewname

      or

      snmp-s group snmpgroup v3 auth read viewname write viewname notify viewname

      ------------------------------------------
      Setting up user:
      snmp-s user snmpuser snmpgroup v3 auth md5 snmpsecret priv des56 snmpsecret

      or

      snmp-s user snmpuser snmpgroup v3 auth md5 snmpsecret