« Cisco SmartNET Gets Better: "Smart Call Home" | Main | Blocking Instant Messaging and Peer-to-Peer »
December 19, 2008
Configuring (simple) SNMPv3
SNMP is awesome...All the free SNMP utilities for Cisco devices are even more awesome...but the most popular versions of SNMP (Version 1 and 2c) are completely clear text, completely insecure. SNMPv3 adds authentication and encryption capabilities, however, GOOD LUCK finding an easy, working configuration on Cisco's website. Here's an SNMPv3 configuration that will provide both authentication and encryption services on Cisco routers and switches:
Router(config)#snmp-server group TESTGROUP v3 priv
Router(config)#snmp-server user Jeremy TESTGROUP v3 auth sha JeremyPassword priv des56 3NCRYPT!0NK3Y
*Note: "auth" methods support both md5 and sha
**Note: "priv" also allows AES encryption
***Note: Most SNMP utilities I've seen only support DES encryption
Posted by JC at December 19, 2008 9:31 AM
Comments
Thank you very much Jeremy.
Posted by: lim at December 20, 2008 4:43 PM
hello Jeremy,
i must say that u are the best. i used all your video training through out my CCNP and since i am currently studying for my QOs, i am also clued to your QOs training.
the humour that u introduce into the training makes it interesting even the knowlegdenet training on QOS( ur Session is also the best)
Jeremy i cant wait to see u, i am from Nigeria.
When will you come to africa?
i will be glad if a get a mail from u , my email is ilorah_tony@yahoo.co.uk
i need some personal advice from u
thanks
Posted by: Nwachonky at December 30, 2008 2:59 AM
Hey Jeremy, first of all I agree with the last poster, you give great info that is not always easily found elsewhere.
Just a note about the 3des and aes options above. I am finding that they are not available until 12.5. I am running 12.4(21a) and they are not available. 12.4T does have them but this is not mainline code as we all know.
Is this acurate to your knowledge?
Thanks and keep up the good work. Its much appreciated.
Posted by: Eric at February 13, 2009 2:41 PM
Yo webmaster, I dig where you're coming from.
Regards,
Posted by: Cynthia LaPalermo at January 28, 2010 9:19 PM
This is my first time i visit here. I found so many interesting stuff in your blog especially its discussion. From the tons of comments on your articles, I guess I am not the only one having all the enjoyment here! keep up the good work
Posted by: Jeni Lorsung at January 30, 2010 1:53 PM