Wired Intelligent Edge

 View Only
last person joined: 23 hours ago 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Back to discussions
Expand all | Collapse all

SNMPv3 on AOS-CX User is disabled

This thread has been viewed 15 times

  • 1.  SNMPv3 on AOS-CX User is disabled

    Posted Mar 21, 2024 07:50 PM

    I am trying to configure SNMPv3 on my CX switches. This is the config I am using:

    snmp-server vrf mgmt
    snmp-server system-contact CONTACT_INFO
    snmp-server system-location LOCATION
    snmp-server system-description DESCRIPTION
    snmpv3 user USER_NAME auth sha auth-pass plaintext 123456 priv des priv-pass plaintext 123456
    snmpv3 user USER_NAME context CONTEXT_NAME
    snmp-server host IP_ADDRESS trap version v3 user USER_NAME vrf mgmt
    snmpv3 context CONTEXT_NAME vrf mgmt community public
    snmpv3 security-level auth-privacy
    snmpv3 user USER_NAME access-level rw

    When I get done I get the following message:

    "This SNMPv3 user will be disabled due to non-conformance with current SNMPv3 security level configured"

    I am not sure if I am using the wrong access or security level or if there is something else I am missing...




  • 2.  RE: SNMPv3 on AOS-CX User is disabled

    Posted Mar 22, 2024 03:23 AM

    Hi

    Can you try creating a user with "aes" as privacy algorithm instead of "des"? DES is outdated and insecure, maybe AOS-CX does not consider users configured with DES as secure enough for security level auth-privacy. 

    Edit: can you kindly share the output of "show snmpv3 users"?

    Regards, 
    Thomas


    Original Message


  • 3.  RE: SNMPv3 on AOS-CX User is disabled

    MVP GURU
    Posted Mar 22, 2024 06:02 AM

    Hi! something like:

    snmp-server vrf mgmt
    snmp-server system-description <system-description>
    snmp-server system-location <system-location>
    snmp-server system-contact <system-contact>
    snmpv3 user <snmpv3-user> auth sha auth-pass ciphertext <....> priv aes priv-pass ciphertext <....> 
    snmp-server host <nms-host> inform version v3 user <snmpv3-user>
    snmp-server host <nms-host> trap version v3 user <snmpv3-user>


    Original Message


  • 4.  RE: SNMPv3 on AOS-CX User is disabled

    Posted 18 days ago

    I changed it to aes from des, I think that was my mistake, it all is working now, thank you!


    Original Message


  • 5.  RE: SNMPv3 on AOS-CX User is disabled

    Posted 18 days ago

    Glad to hear that it is working. Have a good day!


    Original Message