Configuring SNMP v3
In contrast to SNMP version 1 (SNMPv1) and SNMP version 2 (SNMPv2), SNMP version
3 (SNMPv3) supports authentication and encryption. SNMPv3 uses the user-based
security model (USM) for message security and the view-based access control model
(VACM) for access control. USM specifies authentication and encryption. VACM specifies
access-control rules. To configure local engine information for the user-based security
model (USM) with Secure Hash Algorithm (SHA) as the authentication type for the
SNMPv3 user, enter the command:
user@jdm# set snmp v3 usm local-engine user username authentication-sha
authentication-password authentication-password
To configure local engine information for the USM with MD5 as the authentication type
for the SNMPv3 user, enter the command:
user@jdm# set snmp v3 usm local-engine user username authentication-md5
authentication-password authentication-password
Configuring SNMP Traps
To configure SNMP traps, create a named group of hosts to receive the specified trap
notifications. At least one trap group must be configured for SNMP traps to be sent:
user@jdm# set snmp trap-group group-name targets address
Querying SNMP MIBs
The NFX 250 platform supports querying SNMP MIBs on both, the JDM and the hypervisor.
NFX MIBS are read-only, which means that the values can be read from the MIB but
cannot be configured using SNMP.
The commands below are the queries on SNMP v1, SNMP v2 and SNMP v3. :
user@jdm# snmpwalk -v 1 -c community-name ip-address oid
user@jdm# snmpwalk -v 2 -c community-name ip-address oid
user@jdm# snmpwalk -v3 -u username -l authNoPriv -a SHA -A password ip-address oid
To query the hypervisor, you need to provide an additional context name, which is the
user name appended by -host:
user@jdm# snmpwalk -v 1 -c community-name-host ip-address oid
user@jdm# snmpwalk -v 2 -c community-name-host ip-address oid
user@jdm# snmpwalk -v3 -u username-host -l authNoPriv -a SHA -A password ip-address oid
You can query libvirt MIBs only as a host:
user@jdm# snmpwalk -v 2c -c community-name-host ip-address oid
Copyright © 2017, Juniper Networks, Inc.40
JDM User Guide for NFX250 Network Services Platform
To Next Page
Loading...
