Shulou(Shulou.com)06/01 Report--

SNMP V3 supports triple security mechanism, which is more secure than V2C, V2 and V1.

Authentication is needed to establish a connection between NMS and Agent, encryption is needed for message transmission, and community name is needed for interaction.

1. ZTE 89 Series switch SNMP v3 configuration template:

Snmp enable inform

Snmp version v3 enable

Snmp community XXX

Snmp-server group ztegrp v3 auth read DefaultView

Snmp-server group ztegrp v3 auth write DefaultView

Snmp-server user zte ztegrp v3 auth md5 XXX priv des56 XXX

Snmp-server host 103.0.6.2 inform version 3 auth XXX

Snmp enable trap

Snmp trap-source IP/interface

Snmp-server host 103.0.6.2 trap version 3 auth XXX

Snmpwalk tests ZTE SNMPv3 configuration under kali platform:

Snmpwalk-v 3-u zte-a MD5-A XXX-l authPriv-x DES-X XXX ip iso.3.6.1.2.1.1.1.0 (access to version information of ZTE 89 series) (access to information indicates successful device configuration SNMP V3) (iso.3.6.1.2.1.1.1.0 is a MIB information base) for more information, please see: https://my.oschina.net/barter/blog/124109

The following screenshot shows that ZTE SNMP V3 configuration test is successful:

2. H3C device configuration SNMP V3 template:

Snmp-agent

Snmp-agent community read XX

Snmp-agent community write XX

Snmp-agent sys-info version v3

Snmp-agent mib-view include beita 1.3.6.1

Snmp-agent group v3 guanli

Snmp-agent group v3 guanli write-view beita

Snmp-agent usm-user v3 h4c guanli simple authentication-mode md5 XX privacy-mode des56 XX

Snmp-agent trap enable

Snmp-agent trap source M-GigabitEthernet 1/0/0/0

Snmp-agent target-host trap address udp-domain IP udp-port 162 params securityname h4c

Snmpwalk tests H3C SNMP v3 configuration on kali platform:

Snmpwalk-v 3-u h4c-a MD5-A XX-l authPriv-x DES-X XX IP iso.3.6.1.2.1.1.1.0 (get H3C device version information) (the information obtained indicates that the device configuration SNMP V3 is successful)

The following screenshot shows that the H3C SNMP V3 configuration test is successful:

3. If there is no test platform such as kali or BT, you can download the snmptester test software. The green version is attached.

Attachment: http://down.51cto.com/data/2366865

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.