1-10SNMPv3 Configuration ExampleNetwork requirementsz As shown in Figure 1-4, the NMS connects to the agent through an Ethernet.z The IP address of the NMS is 1.1.1.2/24.z The IP address of the agent is 1.1.1.1/24.z The NMS monitors and manages the interface status of the agent using SNMPv3. The agentreports errors or faults to the NMS. The inbound port for traps on the NMS is 5000.Figure 1-4 Network diagram for SNMPv3Configuration procedure1) Configuring the agent# Configure the IP address of the agent as 1.1.1.1/24 and make sure that there is a route between theagent and the NMS. (The configuration procedure is omitted here)# Configure the access right: the user can read and write the objects under the interface node with theOID of 1.3.6.1.2.1.2, and cannot access other MIB objects. Set the user name to managev3user,authentication protocol to MD5, authentication key to authkey, the privacy protocol to DES56, and theprivacy password to prikey. system-view[Sysname] undo snmp-agent mib-view ViewDefault[Sysname] snmp-agent mib-view included test interfaces[Sysname] snmp-agent group v3 managev3group read-view test write-view test[Sysname] snmp-agent usm-user v3 managev3user managev3group authentication-mode md5 authkeyprivacy-mode des56 prikey# Configure the contact person and physical location information of the device.[Sysname] snmp-agent sys-info contact Mr.Wang-Tel:3306[Sysname] snmp-agent sys-info location telephone-closet,3rd-floor# Enable sending of traps to the NMS with an IP address of 1.1.1.2/24, using public as the communityname.[Sysname] snmp-agent trap enable[Sysname] snmp-agent target-host trap address udp-domain 1.1.1.2 params securityname publicv32) Configuring the SNMP NMSSNMPv3 uses an authentication and privacy security model. On the NMS, the user needs to specify theusername and security level, and based on that level, configure the authentication mode, authenticationpassword, privacy mode, and privacy password. In addition, the timeout time and number of retriesshould also be configured. The user can inquire and configure the device through the NMS.
