manage snmp Passwords via Netsight Console on XOS Devices


Userlevel 6
is it possible to manage / alter the snmpv3 passwords on recent XOS devices via Netsight Console like with legacy Enterasys switches ?

in my lab it does not work with Netsight V6.2.1.221 and X430-8p (XOS V16.1 / V15.7.1.4).



Is it possible to get this working ?

Here my snmp config:

X430-8p.1 # sh config snmp
#
# Module snmpMaster configuration.
#
configure snmpv3 delete user "initial" engine-id 80:00:07:7c:03:00:04:96:98:d2:49
configure snmpv3 delete user "initialmd5" engine-id 80:00:07:7c:03:00:04:96:98:d2:49
configure snmpv3 delete user "initialsha" engine-id 80:00:07:7c:03:00:04:96:98:d2:49
configure snmpv3 delete user "initialmd5Priv" engine-id 80:00:07:7c:03:00:04:96:98:d2:49
configure snmpv3 delete community "private"
configure snmpv3 delete community "public"
configure snmpv3 add user "v3user" engine-id 80:00:07:7c:03:00:04:96:98:d2:49 authentication sha auth-encrypted localized-key 2b:23:fa:23:a1:23:88:23:cb:23:16:23:e0:23:f6:63:34:76:2c:23:b2:23:d3:72:6d:23:f3:3f:3d:23:d6 privacy aes 128 privacy-encrypted localized-key 2b:23:fa:23:a1:23:88:23:cb:23:16:23:e0:23:f6:63:34:76:2c:23:b2:23:d3:72:6d
configure snmpv3 add group "v3group" user "v3user" sec-model usm
configure snmpv3 add access "v3group" sec-model usm sec-level priv read-view "defaultAdminView" write-view "defaultAdminView" notify-view "defaultAdminView"
disable snmpv3 default-group
disable snmpv3 default-user
disable snmp access vr "VR-Mgmt"
X430-8p.2 #[/code][/code][/code]

2 replies

Userlevel 6
Problem is solved!

If i reduce security level from sha/aes to md5/des then it works.

i opened a GTAC case for that - engineering will tell me to fix this in NS6.5.

The good thing - root case found.
The bad thing - a long time to wait till fix (NS 6.5) will be available.

Regards
Userlevel 7
M.Nees wrote:

Problem is solved!

If i reduce security level from sha/aes to md5/des then it works.

i opened a GTAC case for that - engineering will tell me to fix this in NS6.5.

The good thing - root case found.
The bad thing - a long time to wait till fix (NS 6.5) will be available.

Regards

Glad you were able to get an answer, even if it's not quite the one you want. Thanks for coming back and updating the thread!

Reply