H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 48)

39
SNMPv3 configuration example
Network requirements
As shown in Figure 19 , the NMS (1.1.1.2/24) uses SNMPv3 to monitor and manage the interface status
of the AP (1.1.1.1/24). The AP automatically sends traps to report events to the NMS, and the NMS uses
UDP port 5000 for SNMP traps.
The NMS and the AP perform authentication when they set up an SNMP session. The authentication
algorithm is MD5 and the authentication key is authkey. The NMS and the AP also encrypt the SNMP
packets between them by using the DES algorithm and the privacy key prikey.
Figure 19 Network diagram
Configuration procedure
1. Configure the AP:
# Configure the IP address of the AP and make sure that the AP and the NMS can reach each other.
(Details not shown.)
# Assign the NMS (username managev3user) read and write access to the objects under the interfaces
node (OID of 1.3.6.1.2.1.2), and deny its access to any other MIB object. Set the authentication algorithm
to MD5, authentication key to authkey, the encryption algorithm to DES56, and the privacy key to prikey.
system-view
[AP] undo snmp-agent mib-view ViewDefault
[AP] snmp-agent mib-view included test interfaces
[AP] snmp-agent group v3 managev3group read-view test write-view test
[AP] snmp-agent usm-user v3 managev3user managev3group authentication-mode md5 authkey
privacy-mode des56 prikey
# Configure contact and physical location information for the AP.
[AP] snmp-agent sys-info contact Mr.Wang-Tel:3306
[AP] snmp-agent sys-info location telephone-closet,3rd-floor
# Enable traps, specify the NMS at 1.1.1.2/24 as a trap destination, and set the username to
managev3user for the traps.
[AP] snmp-agent trap enable
[AP] snmp-agent target-host trap address udp-domain 1.1.1.2 udp-port 5000 params
securityname managev3user v3 privacy
2. Configure the SNMP NMS:
{
Specify SNMPv3.
{
Create the SNMP user managev3user.
{
Enable both authentication and privacy functions.
{
Use MD5 for authentication and DES for encryption.
{
Set the authentication key to authkey and the privacy key to prikey.
{
Set the timeout time and maximum number of retries.
NMS
1.1.1.2/24
AP
1.1.1.1/24