Matching Test of snmp V3 configuration template and kali snmpwalk for H3C equipment and ZTE 89 Series switch

SNMP V3 supports triple security mechanism, which is more secure than V2C, V2 and V1.

Authentication is needed to establish a connection between NMS and Agent, encryption is needed for message transmission, and community name is needed for interaction.

1. ZTE 89 Series switch SNMP v3 configuration template:

Snmp enable inform

Snmp version v3 enable

Snmp community XXX

Snmp-server group ztegrp v3 auth read DefaultView

Snmp-server group ztegrp v3 auth write DefaultView

Snmp-server user zte ztegrp v3 auth md5 XXX priv des56 XXX

Snmp-server host 103.0.6.2 inform version 3 auth XXX

Snmp enable trap

Snmp trap-source IP/interface

Snmp-server host 103.0.6.2 trap version 3 auth XXX

Snmpwalk tests ZTE SNMPv3 configuration under kali platform:

Snmpwalk-v 3-u zte-a MD5-A XXX-l authPriv-x DES-X XXX ip iso.3.6.1.2.1.1.1.0 (access to version information of ZTE 89 series) (access to information indicates successful device configuration SNMP V3) (iso.3.6.1.2.1.1.1.0 is a MIB information base) for more information, please see: https://my.oschina.net/barter/blog/124109

The following screenshot shows that ZTE SNMP V3 configuration test is successful:

2. H3C device configuration SNMP V3 template:

Snmp-agent

Snmp-agent community read XX

Snmp-agent community write XX

Snmp-agent sys-info version v3

Snmp-agent mib-view include beita 1.3.6.1

Snmp-agent group v3 guanli

Snmp-agent group v3 guanli write-view beita

Snmp-agent usm-user v3 h4c guanli simple authentication-mode md5 XX privacy-mode des56 XX

Snmp-agent trap enable

Snmp-agent trap source M-GigabitEthernet 1/0/0/0

Snmp-agent target-host trap address udp-domain IP udp-port 162 params securityname h4c

Snmpwalk tests H3C SNMP v3 configuration on kali platform:

Snmpwalk-v 3-u h4c-a MD5-A XX-l authPriv-x DES-X XX IP iso.3.6.1.2.1.1.1.0 (get H3C device version information) (the information obtained indicates that the device configuration SNMP V3 is successful)

The following screenshot shows that the H3C SNMP V3 configuration test is successful:

3. If there is no test platform such as kali or BT, you can download the snmptester test software. The green version is attached.

Attachment: http://down.51cto.com/data/2366865