Enterasys C5G124-24 Configuration Manual page 198

Configuring SNMP
Procedure 12-2 SNMPv3 Configuration (continued)
Step
6.
7.
The following example is an SNMPv3 configuration using the steps in
how to
• Create the user Enterasys_user, specifying authentication, encryption, and security
credentials.
• Assign Enterasys_user to the Enterasys group and associate it to the SNMPv3 security model,
usm.
• Specify that, if SNMP messages are received with authentication and encryption, the view,
readView for read requests, and the view writeView for write requests will be applied to this
user group based on the USM security model.
• For the view writeView, include the MIB subtree denoted with OID 1, and exclude the subtree
denoted by OID 1.3.6.1.4.1.5624.1.2.16 (which is the Configuration Management MIB).
• Assign an SNMPv3 target parameters entry named enterasysn to the Enterasys_user using
the USM security model.
• Create a target address entry named Enterasys_Networks at IP address 172.29.10.1 which will
use security and authorization criteria contained in a target parameters entry called
enterasysn, and bind these parameters together with a tag entry called v3TrapTag.
enterasys(su)-> set snmp user Enterasys_user privacy my_privacy authentication md5
enterasys(su)-> set snmp group Enterasys user Enterasys_user security-model usm
enterasys(su)-> set snmp access Enterasys security-model usm privacy read readView
enterasys(su)-> set snmp view viewname readView subtree 1
enterasys(su)-> set snmp view viewname writeView subtree 1
enterasys(su)-> set snmp view viewname writeView subtree 1.3.6.1.4.1.5624.1.2.16
enterasys(su)-> set snmp targetparams enterasysn user Enterasys_user
enterasys(su)-> set snmp targetaddr Enterasys_Networks 172.29.10.1 param
12-12 Configuring SNMP
Task
Set the SNMP target address for notification
message generation.
• If not specified, udpport will be set to 162.
• If not specified, mask will be set to
255.255.255.255.
• If not specified, timeout will be set to 1500 (15
seconds).
• If not specified, number of retries will be set
to 3.
• If taglist is not specified, none will be set.
• If not specified, storage type will be
nonvolatile.
Set SNMP notification parameters.
• If not specified, message type will be set to
trap.
• If not specified, storage type will be set to
nonvolatile.
my_authentication
write writeView
excluded
security-model usm message-processing v3
enterasysn taglist v3TrapTag
Command(s)
set snmp targetaddr targetaddr
ipaddr param param [udpport udpport]
[mask mask] [timeout timeout]
[retries retries] [taglist taglist]
[volatile | nonvolatile]
set snmp notify notify tag tag [trap
| inform] [volatile | nonvolatile]
Procedure 12-2. It shows