Template:FAQ:Applications 21

From Net-SNMP Wiki
Revision as of 18:09, 23 January 2007 by Wes (Talk | contribs)

Jump to: navigation, search

The simplest form of SNMPv3 request is unauthenticated and unencrypted. It still requires a user name (and the agent must be configured to allow unauthenticated and unencrypted requests from that user). It would look something like:

       snmpget -v 3 -u dave -l noAuthNoPriv localhost sysUpTime.0

An authenticated request would specify a username and pass phrase to authenticate with:

       snmpget -v 3 -l authNoPriv -u dave -A "Open the Door"
                               localhost sysUpTime.0

A fully secure request would also specify the privacy pass phrase:

       snmpget -v 3 -l authPriv -u dave -A "Open the Door"
                       -X "Bet you can't see me"  localhost sysUpTime.0

In practise, most of these would probably be set via configuration directives in a personal $HOME/.snmp/snmp.conf file (note, not the agent's snmpd.conf file). The equivalent settings for the third example would be:

       defSecurityName         dave
       defSecurityLevel        authPriv
       defAuthPassphrase       "Open the Door"
       defPrivPassphrase       "Bet you can't see me"

If the AuthPassphrase and the PrivPassphrase are the same, then you can use the setting

               defPassphrase   "Open the Door and see me"

instead.

See the AGENT section for how to configure the agent to respond to SNMPv3 requests.