Link to home
Start Free TrialLog in
Avatar of ziggynumber1
ziggynumber1Flag for Afghanistan

asked on

How do you configure SNMPv3 on a 3745 running 12.4?

Good Evening, I am installing Oputils 5 to manage the IP address used and mange the configurations of our routers and switches. The problem is that the program requires write access to the router via SNMP to manage the configurations . Obviously because of the security risk associated with write SNMPv2 being sent in clear text, they updated Oputils to use SNMPv3.

Well that presents the problem. What are the appropriate steps to configure SNMPv3 for authentication and encryption on the cisco router? Once I configure it once on my 3750 router at the house, I can start testing it int he lab before rolling it out to production. I looked at: http://www.cisco.com/en/US/docs/ios/12_0t/12_0t3/feature/guide/Snmp3.html#wp4620, but that was not clear at all as to the right steps to take. please help!
ASKER CERTIFIED SOLUTION
Avatar of atech1
atech1

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of ziggynumber1

ASKER

Thanks for the help! I tried configuring SNMPv3 and got this error message when I did a debug snmp requests:

WANrtr1#      
036181: Jun 12 22:17:58.451 UTC: %SEC-6-IPACCESSLOGP: list 102 denied tcp 218.8.245.123(6000) -> 173.15.100.113(2967), 1 packet
WANrtr1#      
036182: Jun 12 22:18:06.675 UTC: %IPS-4-SIGNATURE: Sig:2004 Subsig:0 Sev:2 ICMP Echo Req [192.168.1.23:0 -> 192.168.1.254:0]
WANrtr1#      
036183: Jun 12 22:18:06.795 UTC: SNMP: Packet received via UDP from 192.168.1.23 on FastEthernet0/0
036184: Jun 12 22:18:06.795 UTC: SNMP: Report, reqid 137, errstat 0, erridx 0
 internet.6.3.15.1.1.2.0 = 2
036185: Jun 12 22:18:06.799 UTC: SNMP: Packet sent via UDP to 192.168.1.23
036186: Jun 12 22:18:06.811 UTC: SNMP: Packet received via UDP from 192.168.1.23 on FastEthernet0/0
036187: Jun 12 22:18:06.811 UTC: SNMP: Report, reqid 2147483647, errstat 0, erridx 0
 internet.6.3.15.1.1.1.0 = 6
036188: Jun 12 22:18:06.815 UTC: SNMP: Packet sent via UDP to 192.168.1.23
WANrtr1#      
036189: Jun 12 22:18:08.791 UTC: %IPS-4-SIGNATURE: Sig:2004 Subsig:0 Sev:2 ICMP Echo Req [192.168.1.23:0 -> 192.168.1.254:0]
WANrtr1#      
036190: Jun 12 22:18:08.891 UTC: SNMP: Packet received via UDP from 192.168.1.23 on FastEthernet0/0
036191: Jun 12 22:18:08.895 UTC: SNMP: Report, reqid 2147483647, errstat 0, erridx 0
 internet.6.3.15.1.1.1.0 = 7
036192: Jun 12 22:18:08.899 UTC: SNMP: Packet sent via UDP to 192.168.1.23
WANrtr1#      

Its the software i am using i downloaded paessler snmp tester 3.2 and tested with the configs in the links you sent and i was able to pull interface stats with the software.

Thanks a !!!!million