HP 6125XLG R2306-HP 6125XLG Blade Switch Network Management and Monitoring Con - Page 85

Assign the NMS SNMPv3 group, Con the SNMP NMS

Get HP 6125XLG PDF manuals and user guides View all HP 6125XLG manuals
Add to My Manuals
Save this manual to your list of manuals

Page 85 highlights

The NMS and the agent perform authentication when they set up an SNMP session. The authentication algorithm is SHA-1 and the authentication key is authkey. The NMS and the agent also encrypt the SNMP packets between them by using the AES algorithm and the privacy key prikey. Figure 25 Network diagram Configuration procedure 1. Configure the agent: # Configure the IP address of the agent, and make sure the agent and the NMS can reach each other. (Details not shown.) # Assign the NMS (SNMPv3 group managev3group) read and write access to the objects under the snmp node (OID 1.3.6.1.2.1.11), and deny its access to any other MIB object. system-view [Agent] undo snmp-agent mib-view ViewDefault [Agent] snmp-agent mib-view included test snmp [Agent] snmp-agent group v3 managev3group privacy read-view snmp write-view test # Add the user managev3user to the SNMPv3 group managev3group, and set the authentication algorithm to sha, authentication key to authkey, encryption algorithm to aes128, and privacy key to prikey. [Agent] snmp-agent usm-user v3 managev3user managev3group simple authentication-mode sha authkey privacy-mode aes128 prikey # Configure contact and physical location information for the agent. [Agent] snmp-agent sys-info contact Mr.Wang-Tel:3306 [Agent] snmp-agent sys-info location telephone-closet,3rd-floor # Enable notifications, specify the NMS at 1.1.1.2 as a trap destination, and set the username to managev3user for the traps. [Agent] snmp-agent trap enable [Agent] snmp-agent target-host trap address udp-domain 1.1.1.2 params securityname managev3user v3 privacy 2. Configure the SNMP NMS: { Specify SNMPv3. { Create the SNMPv3 user managev3user. { Enable both authentication and privacy functions. { Use SHA-1 for authentication and AES for encryption. { Set the authentication key to authkey and the privacy key to prikey. { Set the timeout time and maximum number of retries. For more information about configuring the NMS, see the NMS manual. NOTE: The SNMP settings on the agent and the NMS must match. 3. Verify the configuration: 79

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
79
The NMS and the agent perform authentication when they set up an SNMP session. The authentication
algorithm is SHA-1 and the authentication key is
authkey
. The NMS and the agent also encrypt the
SNMP packets between them by using the AES algorithm and the privacy key
prikey
.
Figure 25
Network diagram
Configuration procedure
1.
Configure the agent:
# Configure the IP address of the agent, and make sure the agent and the NMS can reach each
other. (Details not shown.)
# Assign the NMS (SNMPv3 group
managev3group
) read and write access to the objects under
the
snmp
node (OID 1.3.6.1.2.1.11), and deny its access to any other MIB object.
<Agent> system-view
[Agent] undo snmp-agent mib-view ViewDefault
[Agent] snmp-agent mib-view included test snmp
[Agent] snmp-agent group v3 managev3group privacy read-view snmp write-view test
# Add the user
managev3user
to the SNMPv3 group
managev3group
, and set the authentication
algorithm to
sha
, authentication key to
authkey
, encryption algorithm to
aes128
, and privacy key
to
prikey
.
[Agent] snmp-agent usm-user v3 managev3user managev3group simple authentication-mode
sha authkey privacy-mode aes128 prikey
# Configure contact and physical location information for the agent.
[Agent] snmp-agent sys-info contact Mr.Wang-Tel:3306
[Agent] snmp-agent sys-info location telephone-closet,3rd-floor
# Enable notifications, specify the NMS at 1.1.1.2 as a trap destination, and set the username to
managev3user
for the traps.
[Agent] snmp-agent trap enable
[Agent] snmp-agent target-host trap address udp-domain 1.1.1.2 params securityname
managev3user v3 privacy
2.
Configure the SNMP NMS:
{
Specify SNMPv3.
{
Create the SNMPv3 user
managev3user
.
{
Enable both authentication and privacy functions.
{
Use SHA-1 for authentication and AES for encryption.
{
Set the authentication key to
authkey
and the privacy key to
prikey
.
{
Set the timeout time and maximum number of retries.
For more information about configuring the NMS, see the NMS manual.
NOTE:
The SNMP settings on the agent and the NMS must match.
3.
Verify the configuration: