SNMPv3 on Cisco switch(2950/2960/3850)

Posted on Edited on In Views:

謹紀錄在做專題的時候，踩過的SNMP設定小坑。

Check setup in switch

1
Switch# show snmp ?

Any command with no to remove it.

Setups

Group

1
Switch(config)# snmp-server group [groupName] v3 [auth | noauth | priv] [read read-view] [write write-view] [notify notify-view] [access access-list]

User

1
2
3
4
authNoPriv
Switch(config)# snmp-server user [userName] [groupName] [remote ip-address [udp-port port]] [encrypted] v3 [auth {md5 | sha}]
authPriv
Switch(config)# snmp-server user [userName] [groupName] [remote ip-address [udp-port port]] [encrypted] v3 [auth {md5 | sha} auth-password] [priv {3des|aes 128|aes 192|aes 256|des} pass]

View

1
Switch(config)# snmp-server view view-name oid-tree {included|excluded}

Traps

先依序設定好Group跟User。 

1
2
3
# 設定接收Notification的Server位置
# 如果最後面Trap Type留空，預設所有的Trap都會發送。
Switch(config)# snmp-server host [ip or domain] version 3 priv [user name] [trap type]

Debugging

1
Switch# debug snmp packets

Reference

Cisco Wiki SNMPv3
SNMPSecurity
SNMP XE 3SE (Catalyst 3850)
Clean Access Server Configuration Guide, Release 4.9(x)
Catalyst 2950 Desktop Switch Software Configuration Guide, 12.1(11)YJ4
Cisco设备SNMP配置(思科SNMP配置)
SNMP MIBs