SNMPv3

How to configure SNMPv3 in a Cisco Catalyst Switch – Series 2

In the first series we just started to know about SNMP Version 3 and we just created a SNMP View called ITKEView. Now let’s proceed further and create a SNMP group called “ITKEGroup”. This group is granted an access to view “ITKEview” which we created in the previous step. 

ITKE(config)# snmp-server group ITKEview v3 auth

Finally let’s create a SNMP username called   “ITKEuser” and grant it an access to the “ITKEGroup” that we created in previous step. We will provide an authentication password as well as privacy password which will serve as an encryption key for the SNMP protocol. ITKE(config)# nmp-server user ITKEuser  ITKEGroup  v3 auth md5 ITKEpass priv des56 ITKEpass2

How to configure SNMPv3 in a Cisco Catalyst Switch – Series 1

Configuring SNMP Version 3 in a Cisco Catalyst Switch is bit more complicated compared to SNMP v1 and v2.  But after configuring SNMPv3 you can relax as the SNMPv3 provides more security by adding authentication (username and password) as well as encryption to the protocol.  

What is SNMPv3 ?Simple Network Management Protocol version 3. The specification for this Full Standard protocol is published in RFCs 3410 and 3418. SNMPv3 provides a Full Standard administrative framework (authorization, access control, etc.) and a remote configuration/administration MIB. Also check the SNMPv3 documentation from Cisco Systems. 

How to configure SNMPv3 in a Cisco Catalyst Switch ? 

First we begin with configuration of SNMPv3 on the Cisco Catalyst Switch by creating a SNMP “view”. A “view” defines what information can be accessed by the SNMP user/group when they query the SNMPv3 enabled  Cisco Catalyst Switch.  In the below example we will create “view” called ITKEView. We will enable “system” , “internet” and  “interfaces” SNMP OIDS on the Cisco Catalyst Switch. 

ITKE(config)# snmp-server view ITKEView internet includedITKE(config)# snmp-server view ITKEView system includedITKE(config)# snmp-server view ITKEView interfaces included 

To be continued in next series