SNMPv3修改local-engineid和采用cipher类型密码注意事项
小结:
1、SNMPv3版本的用户名、密文密码等的生成都和引擎ID相关联,如果更改了引擎ID,则原引擎ID下配置的用户名、密码失效,需要手工重新配置。
2、SNMPv3密码使用cipher时,一定要使用snmp-agent calculate-password命令用来计算。
详细说明:
[DY_ZhongJiang_H3C6608]dis cur | inc snmp
snmp-agent
snmp-agent local-engineid 000007DB7FFFFFFF00006AA5
snmp-agent sys-info contact chengdubanshichu 028-86200988
snmp-agent sys-info location DeYang ZhongJiang Telecom,Office
snmp-agent sys-info version v3
snmp-agent group v3 dyga privacy read-view viewv3 write-view viewv3
snmp-agent target-host trap address udp-domain 10.66.74.200 params securityname dyganm v3 privacy
snmp-agent mib-view included viewv3 iso
snmp-agent mib-view included viewv3 snmp
snmp-agent usm-user v3 dyganm dyga cipher authentication-mode sha $c$3$pGSNwEpq/SXRyCbXqGY1aylz/EjFW8xZaFPa5Fd7mJA5DfbWn9w= privacy-mode des56 $c$3$Gw2wNXG7AWo1xlyoxEhNJKJYwY9ELpXY0bXRHgkap57eeA==
snmp-agent trap enable arp
snmp-agent trap enable radius
snmp-agent trap source LoopBack0
snmp-agent packet max-size 4096
IMC侧设备状态正常:
[DY_ZhongJiang_H3C6608]snmp-agent local-engineid 000007DB7FFFFFFF00006AA6 //修改snmp-agent local-engineid
[DY_ZhongJiang_H3C6608]display cur | inc snmp
snmp-agent
snmp-agent local-engineid 000007DB7FFFFFFF00006AA6
snmp-agent sys-info contact chengdubanshichu 028-86200988
snmp-agent sys-info location DeYang ZhongJiang Telecom,Office
snmp-agent sys-info version v3
snmp-agent group v3 dyga privacy read-view viewv3 write-view viewv3
snmp-agent target-host trap address udp-domain 10.66.74.200 params securityname dyganm v3 privacy
snmp-agent mib-view included viewv3 iso
snmp-agent mib-view included viewv3 snmp
//没有snmp-agent usm-user v3 dyganm命令,命令手册“SNMPv3版本的用户名、密文密码等都和引擎ID相关联,如果更改了引擎ID,则原引擎ID下配置的用户名、密码失效。”
snmp-agent trap enable arp
snmp-agent trap enable radius
snmp-agent trap source LoopBack0
snmp-agent packet max-size 4096
[DY_ZhongJiang_H3C6608] snmp-agent usm-user v3 dyganm dyga cipher authentication-mode sha DYga$2598208 privacy-mode des56 DYs.8208 //尝试手工配置snmpv3用户
[DY_ZhongJiang_H3C6608]display cur | inc snmp
snmp-agent
snmp-agent local-engineid 000007DB7FFFFFFF00006AA6
snmp-agent sys-info contact chengdubanshichu 028-86200988
snmp-agent sys-info location DeYang ZhongJiang Telecom,Office
snmp-agent sys-info version v3
snmp-agent group v3 dyga privacy read-view viewv3 write-view viewv3
snmp-agent target-host trap address udp-domain 10.66.74.200 params securityname dyganm v3 privacy
snmp-agent mib-view included viewv3 iso
snmp-agent mib-view included viewv3 snmp
//仍没有snmp-agent usm-user v3 dyganm命令,没有生效
snmp-agent trap enable arp
snmp-agent trap enable radius
snmp-agent trap source LoopBack0
snmp-agent packet max-size 4096
IMC侧设备状态异常:一直转圈
[DY_ZhongJiang_H3C6608] snmp-agent usm-user v3 dyganm dyga simple authentication-mode sha DYga$2598208 privacy-mode des56 DYs.8208 //尝试手工配置snmpv3用户(注意使用simple类型)
[DY_ZhongJiang_H3C6608]undo snmp-agent
[DY_ZhongJiang_H3C6608]snmp-agent
[DY_ZhongJiang_H3C6608]dis cur | inc snmp
snmp-agent
snmp-agent local-engineid 000007DB7FFFFFFF00006AA6
snmp-agent sys-info contact chengdubanshichu 028-86200988
snmp-agent sys-info location DeYang ZhongJiang Telecom,Office
snmp-agent sys-info version v3
snmp-agent group v3 dyga privacy read-view viewv3 write-view viewv3
snmp-agent target-host trap address udp-domain 10.66.74.200 params securityname dyganm v3 privacy
snmp-agent mib-view included viewv3 iso
snmp-agent mib-view included viewv3 snmp
snmp-agent usm-user v3 dyganm dyga cipher authentication-mode sha $c$3$pGSNwEpq/SXRyCbXqGY1aylz/EjFW8xZaFPa5Fd7mJA5DfbWn9w= privacy-mode des56 $c$3$Gw2wNXG7AWo1xlyoxEhNJKJYwY9ELpXY0bXRHgkap57eeA==
//snmp-agent usm-user v3 dyganm命令出现,生效了。
snmp-agent trap enable arp
snmp-agent trap enable radius
snmp-agent trap source LoopBack0
snmp-agent packet max-size 4096
IMC侧设备状态正常:
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作