manage snmp Passwords via Netsight Console on XOS Devices
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎08-24-2015 12:12 PM
is it possible to manage / alter the snmpv3 passwords on recent XOS devices via Netsight Console like with legacy Enterasys switches ?
in my lab it does not work with Netsight V6.2.1.221 and X430-8p (XOS V16.1 / V15.7.1.4).
Is it possible to get this working ?
Here my snmp config:
X430-8p.1 # sh config snmp
#
# Module snmpMaster configuration.
#
configure snmpv3 delete user "initial" engine-id 80:00:07:7c:03:00:04:96:98:d2:49
configure snmpv3 delete user "initialmd5" engine-id 80:00:07:7c:03:00:04:96:98:d2:49
configure snmpv3 delete user "initialsha" engine-id 80:00:07:7c:03:00:04:96:98:d2:49
configure snmpv3 delete user "initialmd5Priv" engine-id 80:00:07:7c:03:00:04:96:98:d2:49
configure snmpv3 delete community "private"
configure snmpv3 delete community "public"
configure snmpv3 add user "v3user" engine-id 80:00:07:7c:03:00:04:96:98:d2:49 authentication sha auth-encrypted localized-key 2b:23:fa:23:a1:23:88:23:cb:23:16:23:e0:23:f6:63:34:76:2c:23:b2:23:d3:72:6d:23:f3:3f:3d:23:d6 privacy aes 128 privacy-encrypted localized-key 2b:23:fa:23:a1:23:88:23:cb:23:16:23:e0:23:f6:63:34:76:2c:23:b2:23:d3:72:6d
configure snmpv3 add group "v3group" user "v3user" sec-model usm
configure snmpv3 add access "v3group" sec-model usm sec-level priv read-view "defaultAdminView" write-view "defaultAdminView" notify-view "defaultAdminView"
disable snmpv3 default-group
disable snmpv3 default-user
disable snmp access vr "VR-Mgmt"
X430-8p.2 #
in my lab it does not work with Netsight V6.2.1.221 and X430-8p (XOS V16.1 / V15.7.1.4).
Is it possible to get this working ?
Here my snmp config:
X430-8p.1 # sh config snmp
#
# Module snmpMaster configuration.
#
configure snmpv3 delete user "initial" engine-id 80:00:07:7c:03:00:04:96:98:d2:49
configure snmpv3 delete user "initialmd5" engine-id 80:00:07:7c:03:00:04:96:98:d2:49
configure snmpv3 delete user "initialsha" engine-id 80:00:07:7c:03:00:04:96:98:d2:49
configure snmpv3 delete user "initialmd5Priv" engine-id 80:00:07:7c:03:00:04:96:98:d2:49
configure snmpv3 delete community "private"
configure snmpv3 delete community "public"
configure snmpv3 add user "v3user" engine-id 80:00:07:7c:03:00:04:96:98:d2:49 authentication sha auth-encrypted localized-key 2b:23:fa:23:a1:23:88:23:cb:23:16:23:e0:23:f6:63:34:76:2c:23:b2:23:d3:72:6d:23:f3:3f:3d:23:d6 privacy aes 128 privacy-encrypted localized-key 2b:23:fa:23:a1:23:88:23:cb:23:16:23:e0:23:f6:63:34:76:2c:23:b2:23:d3:72:6d
configure snmpv3 add group "v3group" user "v3user" sec-model usm
configure snmpv3 add access "v3group" sec-model usm sec-level priv read-view "defaultAdminView" write-view "defaultAdminView" notify-view "defaultAdminView"
disable snmpv3 default-group
disable snmpv3 default-user
disable snmp access vr "VR-Mgmt"
X430-8p.2 #
2 REPLIES 2
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎08-28-2015 04:54 AM
Problem is solved!
If i reduce security level from sha/aes to md5/des then it works.
i opened a GTAC case for that - engineering will tell me to fix this in NS6.5.
The good thing - root case found.
The bad thing - a long time to wait till fix (NS 6.5) will be available.
Regards
If i reduce security level from sha/aes to md5/des then it works.
i opened a GTAC case for that - engineering will tell me to fix this in NS6.5.
The good thing - root case found.
The bad thing - a long time to wait till fix (NS 6.5) will be available.
Regards
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎08-28-2015 04:54 AM
Glad you were able to get an answer, even if it's not quite the one you want. Thanks for coming back and updating the thread!
