topic RE: Easy steps to configure SNMPv3 to work with 3rd party NMS in ExtremeSwitching (EXOS/Switch Engine)

Easy steps to configure SNMPv3 to work with 3rd party NMS

Arjumand_Qazi — Thu, 20 Jul 2017 19:43:00 GMT

What are the easy steps to configure snmpv3 on XOS switch that will be discovered by 3rd party NMS via snmpv3.

in GTAC i can see some commands that is to connect the XOS device to Netsight.

is defining snmpv3 user and snmpv3 would be enough for the xos device to be seen and managed by 3rd party NMS.

RE: Easy steps to configure SNMPv3 to work with 3rd party NMS

BrandonC — Thu, 20 Jul 2017 20:46:00 GMT

Hi Arjumand,

Take a look at the following script for EXOS switches. It will walk you through SNMPv3 configuration.
https://github.com/extremenetworks/ExtremeScripting/tree/master/EXOS/Python/snmpassist

RE: Easy steps to configure SNMPv3 to work with 3rd party NMS

Jeremy_Gibbs — Thu, 20 Jul 2017 22:33:00 GMT

configure snmpv3 add user SNMPUSERNAMEE authentication md5 SOMERANDOMSTRING privacy SOMERANDOMSTRING

configure snmpv3 add group GROUPNAME user SNMPUSERNAME sec-model usm

configure snmpv3 add access GROUPNAMEnetman sec-model usm sec-level priv read-view defaultAdminView write-view defaultAdminView notify-view defaultNotifyView

RE: Easy steps to configure SNMPv3 to work with 3rd party NMS

Arjumand_Qazi — Sat, 22 Jul 2017 19:03:00 GMT

Thanks gentlemen

RE: Easy steps to configure SNMPv3 to work with 3rd party NMS

Arjumand_Qazi — Sat, 22 Jul 2017 19:05:00 GMT

Hi Jeremy,

while configuring user for snmpv3, md5 and privacy string should always be different ?

RE: Easy steps to configure SNMPv3 to work with 3rd party NMS

Jeremy_Gibbs — Sat, 22 Jul 2017 20:11:00 GMT

I think they can be different. I use the same just for convenience. Also, for security reasons, there isn't a big need for us. Some places though, you might want to think about a more complex string that's unique.

RE: Easy steps to configure SNMPv3 to work with 3rd party NMS

Arjumand_Qazi — Sun, 23 Jul 2017 15:12:00 GMT

hello,

tried snmpv3 config with Brocade's BNA. it didnt work
first tried with snmpv3 config
then with snmpv2
made an snmp user "xtreme" password of this user and md5 is same.. <-- can this be a problem.

the snmpv3 configuration made was..
configure snmpv3 add user xtreme authentication md5 xtreme123 privacy des xtreme456
configure snmpv3 add group x-group user xtreme sec-model usm
configure snmpv3 add access x-group sec-model usm sec-level priv read-view defaultAdminView write-view defaultAdminView notify-view defaultAdminView

disable snmp access snmp-v1v2c
disable snmpv3 default-user
disable snmpv3 default-group

since this config did not work i had to remove the snmpv3 and now in the "sh config" i can see this

# Module snmpMaster configuration.
#
configure snmpv3 add community "v1v2cNotifyComm1" name "xtreme@123" user "v1v2cNotifyUser1"
configure snmpv3 add community "xtreme@123" name "xtreme@123" user "v1v2c_ro"
disable snmpv3 community "xtreme@123"
configure snmpv3 add target-addr "v1v2cNotifyTAddr1" param "v1v2cNotifyParam1" ipaddress 172.16.0.91 transport-port 162 tag-list "defaultNotify"
configure snmpv3 add target-params "v1v2cNotifyParam1" user "v1v2cNotifyUser1" mp-model snmpv2c sec-model snmpv2c sec-level noauth
enable snmp access
enable snmp access snmp-v1v2c
enable snmp access snmpv3

#
# Module stp configuration.

the above community defined "xtreme@123" was for snmpv2 and snmpv3 has taken over this.

we need to remove this all configuration and add snmpv3 only..

RE: Easy steps to configure SNMPv3 to work with 3rd party NMS

Ram3 — Mon, 24 Jul 2017 07:45:00 GMT

I understand you have a opened a GTAC case for this issue. One of our GTAC engineer will get back to you shortly.

RE: Easy steps to configure SNMPv3 to work with 3rd party NMS

Arjumand_Qazi — Mon, 24 Jul 2017 13:25:00 GMT

Yes i did, i am hoping a quick resolution for this..