I would set the defaults to what will be the most common one you will use in the .vnmrc. The DES^ is how you specify using a different algorithm from the defaults. You use the carrot (^) to separate the algorithm from the passphrase. Since my privacy default is AES I have to specify the algorithm if it is going to be different than AES for a device. You do that by adding the name of the algorithm and separate it and the passphrase with the ^ symbol (shift-6). In the .vnmrc you cannot specify aes or 3des, you have to pick one and specify in the string if you need to use a different one. Check the Modeling and Managing your IT Infrastructure guide in chapter 8 and it explains how to use SNMPv3 in Spectrum. We run 9.2 so the doc may be different if you use a different version.
-----Original Message----- From: Tabarzadi, Shahla [mailto:[email protected]] Sent: Thursday, March 24, 2011 9:32 To: spectrum Subject: RE: [spectrum] des & 3des Default snmpv3_default_auth_protocol=md5 snmpv3_default_priv_protocol=des Should I change it to (please check the case) snmpv3_default_auth_protocol=sha snmpv3_default_priv_protocol=aes or 3des and what is the character between DES and privacy? #v3/P:auth-string:DES^privacy-string/user ------------------------------------- Shahla Tabarzadi Network and Unified Communications U.S. House of Representatives Office: 202.226.6266 Blackberry: 202.580.9525 Email: [email protected] -----Original Message----- From: Oviatt, Danial Mr CTR DISA CD553 [mailto:[email protected]] Sent: Thursday, March 24, 2011 10:19 AM To: spectrum Subject: RE: [spectrum] des & 3des Yes, we do a mix of AES and DES. We find that most times a device has 3DES it also has AES. You will need to check your .vnmrc to see what your encryption algorithms are (default is MD5 for auth and DES for privacy). If you use a different algorithm than what is in your .vnmrc you have to specify it in the string. Our defaults have been changed to SHA and AES so if a device uses those it would be: #v3/P:auth-string:privacy-string/user But if we need to use DES we have to do it like this: #v3/P:auth-string:DES^privacy-string/user -----Original Message----- From: Tabarzadi, Shahla [mailto:[email protected]] Sent: Thursday, March 24, 2011 8:00 To: spectrum Subject: [spectrum] des & 3des Hello Team, Has anybody been able des and 3des for SNMP v3. I have a mixed environment. Older IOS just do DES and newer IOS do 3DES. ------------------------------------- Regards, Shahla Tabarzadi Network and Unified Communications U.S. House of Representatives Office: 202.226.6266 Blackberry: 202.580.9525 Email: [email protected] * --To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected] --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected] --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected] --- To unsubscribe from spectrum, send email to [email protected] with the body: unsubscribe spectrum [email protected]
