96
# Execute the shutdown or undo shutdown command on an idle interface on the agent. You
can see the link state change traps on the NMS:
1.1.1.1/3374 V3 Trap = linkdown
SNMP Version = V3
Community = managev3user
Command = Trap
1.1.1.1/3374 V3 Trap = linkup
SNMP Version = V3
Community = managev3user
Command = Trap
SNMPv3 in RBAC mode configuration example
Network requirements
As shown in Figure 31, the NMS (1.1.1.2/24) uses SNMPv3 to monitor and manage the interface
status of the agent (1.1.1.1/24). The agent automatically sends notifications to report events to the
NMS.
The NMS and the agent perform authentication when they establish an SNMP session. The
authentication algorithm is SHA-1 and the authentication key is 123456TESTauth&!. The NMS and
the agent also encrypt the SNMP packets between them by using the AES algorithm and the privacy
key 123456TESTencr&!.
Figure 31 Network diagram
Configuration procedure
1. Configure the agent:
# Configure the IP address of the agent, and make sure the agent and the NMS can reach each
other. (Details not shown.)
# Create the user role test, and permit test to have read and write access to the snmp node
(OID 1.3.6.1.2.1.11).
<Agent> system-view
[Agent] role name test
[Agent-role-test] rule 1 permit read write oid 1.3.6.1.2.1.11
# Permit the user role test to have read-only access to the system node (OID 1.3.6.1.2.1.1)
and hh3cUIMgt node (OID 1.3.6.1.4.1.25506.2.2).
[Agent-role-test] rule 2 permit read oid 1.3.6.1.4.1.25506.2.2
[Agent-role-test] rule 3 permit read oid 1.3.6.1.2.1.1
[Agent-role-test] quit
# Create the SNMPv3 user managev3user with the user role test, and enable the
authentication with privacy security model for the user. Set the authentication algorithm to sha,
authentication key to 123456TESTauth&!, encryption algorithm to aes128, and privacy key to
123456TESTencr&!.
[Agent] snmp-agent usm-user v3 managev3user user-role test simple authentication-mode
sha 123456TESTauth&! privacy-mode aes128 123456TESTencr&!
# Configure contact and physical location information for the agent.
To Next Page
Loading...
Need help?
General
