Add documentation note about SNMPv3 configuration on Cisco IOS (#288)
* Add note about SNMPv3 context config on IOS * Update changelog for snmpv3 doc note
This commit is contained in:
@@ -1,3 +1,9 @@
|
|||||||
|
2.034002 - 2017-
|
||||||
|
|
||||||
|
[ENHANCEMENTS]
|
||||||
|
|
||||||
|
* Add documentation note about SNMPv3 configuration on Cisco IOS
|
||||||
|
|
||||||
2.034001 - 2016-11-20
|
2.034001 - 2016-11-20
|
||||||
|
|
||||||
[NEW FEATURES]
|
[NEW FEATURES]
|
||||||
|
|||||||
@@ -18,6 +18,32 @@ Add this to your 37xx config:
|
|||||||
|
|
||||||
no snmp-server sysobjectid type stack-oid
|
no snmp-server sysobjectid type stack-oid
|
||||||
|
|
||||||
|
=head1 SNMPv3 Support on Cisco IOS
|
||||||
|
|
||||||
|
To access per-VLAN MAC address tables we use SNMPv3 contexts. In Cisco IOS
|
||||||
|
the access control is per-context so for each context (VLAN) you need to permit
|
||||||
|
access from the poller.
|
||||||
|
|
||||||
|
You should already have something like the following to enable SNMPv3 from Netdisco at 192.0.2.1:
|
||||||
|
|
||||||
|
snmp-server view myv3view iso included
|
||||||
|
snmp-server group myv3group v3 priv read myv3view
|
||||||
|
snmp-server user myv3user myv3group v3 auth md5 PASSWORD priv des PASSWORD
|
||||||
|
snmp-server host 192.0.2.1 version 3 auth myv3user
|
||||||
|
|
||||||
|
Then set the authorization:
|
||||||
|
|
||||||
|
snmp-server group myv3group v3 auth
|
||||||
|
snmp-server group myv3group v3 auth context vlan- match prefix
|
||||||
|
|
||||||
|
If the second command above is rejected, you have an older version of IOS and must
|
||||||
|
enter a statement for each active VLAN on the device:
|
||||||
|
|
||||||
|
snmp-server group myv3group v3 priv context vlan-1
|
||||||
|
snmp-server group myv3group v3 priv context vlan-2
|
||||||
|
snmp-server group myv3group v3 priv context vlan-3
|
||||||
|
... etc
|
||||||
|
|
||||||
=head1 Linux SNMP Service (Agent)
|
=head1 Linux SNMP Service (Agent)
|
||||||
|
|
||||||
Install the C<snmpd> (SNMP agent) and C<lldpd> (neighbor discovery) packages.
|
Install the C<snmpd> (SNMP agent) and C<lldpd> (neighbor discovery) packages.
|
||||||
|
|||||||
Reference in New Issue
Block a user