topic Re: ERS 4850 SNMP in General Network Management

ERS 4850 SNMP

bfaltys — Thu, 18 Mar 2021 01:48:51 GMT

Is it possible to use SNMP (v2c) on the ERS 4850 to configure a RADIUS server? If not that, is it possible to set the login to use local instead of RADIUS, also via SNMP? We have a few switches that someone configured with an incorrect IP and we’re unable to login when we SSH. We could go on site at some point, but this would save us some time.

Re: ERS 4850 SNMP

Markus_Nikulski — Thu, 22 Apr 2021 23:05:16 GMT

configuring a Radius server via MIB is possible but very complex, because you have to create a instance first and than set several parameter to make to setup shared secret and so on.

here a example for my radius server IP 10.8.255.17
1.3.6.1.4.1.45.5.21.1.3.1.3.1.4.10.8.255.17

all this one have to be configured
1.3.6.1.4.1.45.5.21.1.3.1.3.1.4.10.8.255.17 (gauge) 3799
1.3.6.1.4.1.45.5.21.1.3.1.4.1.4.10.8.255.17 (octet string) (zero-length)
1.3.6.1.4.1.45.5.21.1.3.1.5.1.4.10.8.255.17 (integer) 1
1.3.6.1.4.1.45.5.21.1.3.1.6.1.4.10.8.255.17 (integer) 1
1.3.6.1.4.1.45.5.21.1.3.1.7.1.4.10.8.255.17 (integer) 1
1.3.6.1.4.1.45.5.21.1.3.1.8.1.4.10.8.255.17 (integer) 1
1.3.6.1.4.1.45.5.21.1.3.1.9.1.4.10.8.255.17 (integer) 1
1.3.6.1.4.1.45.5.21.1.3.1.10.1.4.10.8.255.17 (integer) 1

Re: ERS 4850 SNMP

Dan15 — Mon, 26 Apr 2021 19:16:08 GMT

At OID 1.3.6.1.4.1.45.1.6.4.4.40 you can set the auth method for SSH to either none or local:

iso.org.dod.internet.private.enterprises.synoptics.products.series5000.s5Agent.s5AgentSystem.s5AgSysTelnetSessionLoginAuthenType 1.3.6.1.4.1.45.1.6.4.4.40 s5AgSysTelnetSessionLoginAuthenType

OBJECT-TYPE SYNTAX Integer {
none(1),

local(2),

radius(3),

tacacs(4) }

MAX-ACCESS Read/Write STATUS Current DESCRIPTION

This object controls the authentication method used for telnet session logins. The values of this object have the following meanings:

none(1) ---- No username/password is required for login.

local(2) --- The locally configured usernames/passwords are used to authenticate login attempts. radius(3) -- The configured RADIUS server is contacted to authenticate login attempts.

tacacs(4) -- The configured TACACS+ server is contacted to authenticate login attempts.