Hi Dave,
thanks for help.
When I understand right, to setup the trap-receiver (snmptrapd),
I have do get the engineID of the trapsender (snmpd) with
snmpget -v3 -u unsec -s noAuthNoPriv localhost:4700 snmpEngineID.0
SNMP-FRAMEWORK-MIB::snmpEngineID.0 = Hex-STRING: 80 00 1F 88 01 C0 A8
01 81
And than I add this v3 user with that engineID to the snmptrapd.conf:
createUser -e 0x80001f8801c0a80181 unsec MD5 "--none--" DES "--none--"
authUser log unsec noAuthNoPriv
Than I can setup the traptarget via snmp, which result for example to
this configuration:
snmptable -Cib -r0 localhost:4700 snmpTargetAddrTable
SNMP table: SNMP-TARGET-MIB::snmpTargetAddrTable
index TDomain TAddress Timeout
RetryCount TagList Params StorageType RowStatus
'internal0' SNMPv2-TM::snmpUDPDomain "7F 00 00 01 00 A2 "
1000 5 internal0 internal0 readOnly active
snmptable -Cib -r0 localhost:4700 snmpTargetParamsTable
SNMP table: SNMP-TARGET-MIB::snmpTargetParamsTable
index MPModel SecurityModel SecurityName SecurityLevel
StorageType RowStatus
'internal0' 3 3 unsec noAuthNoPriv
readOnly active
So it works fine :-)
With Regards,
Claus
On 15.11.2010, at 10:04, Dave Shield wrote:
> On 14 November 2010 22:25, Claus Klein <[email protected]>
> wrote:
>> I use this trap session configuration:
>> snmpd.conf:trapsess -v 3 -u unsec -l noAuthNoPriv udp:localhost:162
>>
>> This is what happens on snmptrapd:
>> read_config: ./snmptrapd.conf:23 examining:
>> createUser unsec MD5 "-- none--" DES "--none--"
>
>> usmUser: created a new user unsec at 80 00 1F 88 80 DC A8 68 0C 3F
>> 60 E0 4C
>> NET-SNMP version 5.4.3
>
>
>> usm: match on user unsec
>> usm: no match on engineID (80 00 1F 88 80 5E B8 38 0F BC 5F E0 4C )
>
>
> Note that although the username matches, the engineID is different.
> That's why the request is being rejected.
>
> Getting SNMPv3 traps to work properly is a non-trivial problem, mostly
> surrounding the issue of getting a consistent engineID for the two
> sides of the connection.
> Have a look at the tutorial web page at
> http://www.net-snmp.org/wiki/index.php/TUT:Configuring_snmptrapd_to_receive_SNMPv3_notifications
>
> Dave
------------------------------------------------------------------------------
Beautiful is writing same markup. Internet Explorer 9 supports
standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3.
Spend less time writing and rewriting code and more time creating great
experiences on the web. Be a part of the beta today
http://p.sf.net/sfu/msIE9-sfdev2dev
_______________________________________________
Net-snmp-coders mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
