Community and Support

            Steps for configuring SNMPv3 on a Router

            Here are the steps to configure SNMPv3 on arouter. Lets configure a privileged User called Henry with the relevantdetails below.

            username : Henry
            authProtocol : MD5
            privProtocol : DES
            authPassword : authUser
            privPassword : privUser
            contextname : priv


            Configure the user in router using the following commands,

            1. First telent the router .

            2. Check whether the engineID is already configured or not using the below commands

            show snmp engineID

            If it shows a unique engineID details there is no need to configure it again.  Refer this Cisco guide configure the
            Engine ID. It is unique for each SNMP agent.

            http://www.cisco.com/en/US/docs/ios/12_0t/12_0t3/feature/guide/Snmp3.html#wp17408 

            3. Create the view for read / write / notify.

            snmp-server view readview internet included

            snmp-server view writeview internet included

            snmp-server view notifyview internet included


            4. Create the user

            snmp-server user Henry privGroup v3 auth md5 authUser priv des56 privUser

            5. Map the user with group.

            snmp-server group privGroup v3 priv read readview write writeview notify notifyview

            Thats all.. Snmp V3 is correctly configured in that Router.

            Now to check whether its done properly do a snmpwalk using the following command

            snmpwalk -d -v 3 -a MD5 -A authUser -l authPriv -u Henry -x DES -X privUser <TargestHostName>:<TargetPort> system

            Ex: snmpwalk -d -v 3 -a MD5 -A authUser -l authPriv -u Henry -x DES -X privUser proto-test3:161 system

            If you can see some reply in the command line it really works Smile

            For Detailed information on SNMP v3 configuration on Routers please check the below link

            http://www.cisco.com/en/US/docs/ios/12_0t/12_0t3/feature/guide/Snmp3.html

            Now add a new Credential in OpManager under Admin --> CredentialSettings with those relevant details and add a new device to OpManagerand then check whether it helps. Do let me know how it works.
            Updated: 08 Sep 2014 09:22 AM
            Helpful?  
            Help us to make this article better
            1 0