Users Guide

OS10(config)# snmp-server user n3user ngroup remote 172.31.1.3 udp-port 5009 3 auth md5
authpasswd
Display SNMP users
OS10# show snmp user
User name : privuser
Group : v3group
Version : 3
Authentication Protocol : MD5
Privacy Protocol : AES
Generate SNMPv3 localized keys
The user-based security model in SNMP v3 offers strong authentication and encryption using the following algorithms:
● Authentication algorithms—MD5 and SHA
● Encryption algorithms—DES and AES-128
While configuring SNMP users, instead of using plain text passwords, you can use localized keys that are encrypted using
authentication and encryption algorithms. To generate the localized keys, use the Snmpkey utility in Linux. Ensure that you have
the following packages installed in the Linux server to generate the localized keys:
● libnet-snmp-perl
● libcrypt-des-perl
● libdigest-hmac-perl
● libcrypt-rijndael-perl
Use the following command to generate the localized keys that you can use when configuring a user:
snmpkey {md5 | sha} authpassword engineID [des | 3des | aes] privpassword
where authpassword is the password that you specify for the authentication protocol, engineID is the local engineID, and
privpassword is the password that you specify for the privacy protocol.
Use the show snmp engineID local command to view the local engineID.
OS10# show snmp engineID local
Local default SNMP engineID: 0x800002a2036c2b59fbd8a0
Enter the following command on the Linux server where you have the Snmpkey utility installed:
snmpkey md5 testauthpasswd 0x800002a2036c2b59fbd8a0 des testprivpasswd
authKey: 0xaa5bb0eb6e6a9f036dc548e4ad9405f8
privKey: 0xaa5bb0eb6e6a9f036dc548e4ad9405f8
The system generates the authentication and privacy keys.
Use the localized keys while configuring the SNMP user.
OS10(config)# snmp-server user user3 Group3 3 localized auth md5
0xaa5bb0eb6e6a9f036dc548e4ad9405f8 priv des 0xaa5bb0eb6e6a9f036dc548e4ad9405f8
Configure SNMP traps
The SNMP agent sends notification of events to the management station using unsolicited SNMP messages called SNMP traps.
SNMP traps optimize the use of network resources.
SNMP version 1 and version 2C traps can coexist with version 3 traps. SNMP versions 1 and 2C use the trap category for
access control. SNMP version 3 traps are associated to SNMP users with a given authentication level.
Configure SNMP traps on the OS10 switch for it to send notifications to the management station.
156
System management