Wired Intelligent Edge

last person joined: 2 days ago 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Expand all | Collapse all

SNMPv3 Help.....

This thread has been viewed 9 times
  • 1.  SNMPv3 Help.....

    Posted Jul 11, 2019 05:45 AM

    Hi,

     

    I'm new to Aruba switches and learning along the way.

    Most of our infrstructure is Cisco but we have decided to try Aruba switches as an alternative.

     

    I wish to set up SNMPv3 on our Aruba switches with Solarwinds being our NMS. But seem to be struggling.

     

    Could someone provide me with some help.

     

    Hear is an example config I have used:

     

    snmpv3 enable

    snmpv3 user test_user auth md5 xxxxxxx priv aes xxxxxxxx

    snmpv3 group managerpriv user test_user sec-model ver3

    snmpv3 targetaddress "Solarwinds" params "Solarwinds" 192.x.x.x

    (not sure if the above command is correct)

     

    All user name and accounts are configured correctly on solarwinds and work as it is the same config that works with our Ciscos.

     

    When I run network discovery on solarwinds the switch is not discovered but it is reachable.

     

    What config am I missing ? Could someone walk me through please ?

     

    Paul

     



  • 2.  RE: SNMPv3 Help.....
    Best Answer

    EMPLOYEE
    Posted Jul 18, 2019 03:18 AM

    it seems you have the corrcet commands.

    i would also use this command to delete the 'initial' user created when SNMPv3 was enabled

     

    "no snmpv3 user initial"

     

    for testing remove the "snmpv3 targetaddress " command.

    Then try these show commonds to see if it helps you narrow it down.

    show log -r

    sh snmpv3 users
    sh snmpv3 view



  • 3.  RE: SNMPv3 Help.....

    Posted Jul 25, 2019 10:45 AM

    Hi, I also use the nofify command, so then you can include that in the target

     

    such as:

      snmpv3 notify "MyNotification" tagvalue "Mytag"

      snmpv3 targetaddress "Servername" params "paramsname" x.x.x.x taglist "Mytag"

     

    As has also been suggested, I also remove the initial user and set restricted access:

    no snmp-server community public

    no snmpv3 user initial

    snmpv3 restricted-access

    snmpv3 only

     

    Hope that helps!