<HTML>
<HEAD>
<TITLE>Re: [mrtg] help on SNMPv3 configurtion in .cfg</TITLE>
</HEAD>
<BODY>
<FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>On 4/13/11 6:21 AM, "Cihan Subasi (Garanti Teknoloji)" <<a href="CihanS@garanti.com.tr">CihanS@garanti.com.tr</a>> wrote:<BR>
<BR>
</SPAN></FONT><BLOCKQUOTE><SPAN STYLE='font-size:11pt'><FONT FACE="Arial">I have not been able to run snmpv3 configured .cfg file, below is mine, can you share with us a sample .cfg or correct our mistakes below? thank you<BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"> <BR>
<BR>
</FONT><FONT FACE="Arial">WorkDir: /export/sun4_share2/testrtr<BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"> <BR>
</FONT><FONT FACE="Arial">#Options[_]:bits,growright<BR>
Options[_]:bits,growright<BR>
#Options[_]:enablesnmpv3,snmp-options=:::::3,contextengineid=800000090300001BD53DB640<BR>
EnableSnmpV3: yes<BR>
Xsize[_]: 550<BR>
Ysize[_]: 250<BR>
Ytics[_]: 10<BR>
Withpeak[_]: ym<BR>
#Suppress[_]: y<BR>
Interval: 6<BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial"> <BR>
</FONT><FONT FACE="Arial">#<BR>
Target[testrtr-s0101]: \Serial0/1/0\:1:<a href="grnt2011@1.1.1.1:::::3">grnt2011@1.1.1.1:::::3</a><BR>
SnmpOptions[testrtr-s0101]: username=>'xxxxxx',authprotocol=>'md5',authkey=>'0x80b746aa503f97bf37e1d93e90438d24',privprotocol=>'3d<BR>
es',privkey=>'0x80b746aa503f97bf37e1d93e90438d24daf8f544b59d592dea3aac0de8cbbbb0',contextengineid=>'800000090300001BD5FDB000',privpa<BR>
ssword=>'yyyyyyyy'<BR>
<BR>
</FONT></SPAN></BLOCKQUOTE><SPAN STYLE='font-size:11pt'><FONT FACE="Arial">If you are using authkey and privkey, you don’t need privpassword or contextengineid, as the privkey is the hash of the privpassword and the contextengineid<BR>
<BR>
<BR>
I’ll also note this from the Net-SNMP 5.2.0 releasenotes:<BR>
The non-core modules Crypt::DES, Digest::MD5, Digest::SHA1, and <BR>
Digest::HMAC are needed to support SNMPv3.<BR>
<BR>
In order to support the AES Cipher Algorithm as a SNMPv3 privacy <BR>
protocol, the non-core module Crypt::Rijndael is needed.<BR>
<BR>
<BR>
Here is a working sample, sanitized...<BR>
Target[router1.example.com.cpu1]: cpmCPUTotal5secRev.1&cpmCPUTotal1mi<BR>
nRev.1:<a href="foo@router1.example.com::3:1:1:3">foo@router1.example.com::3:1:1:3</a><BR>
SnmpOptions[router1.example.com.cpu1]: authkey=>'0xf0aba...',authprotocol=>'sha',privprotocol=>'aescfb128',username=><BR>
'foo',privkey=>'0x03b...’<BR>
<BR>
<BR>
</FONT><FONT FACE="Calibri, Verdana, Helvetica, Arial">-- <BR>
Daniel J McDonald, CCIE # 2495, CISSP # 78281<BR>
</FONT></SPAN>
</BODY>
</HTML>