[mrtg] Re: SNMPV3

[Daniel J McDonald]

On Wed, 2006-12-27 at 13:12 +0530, Mahesh Bharadwaj wrote:
> Dear all,
> How we can configure *snmpv3* on a *cisco L3(3750).

You need the code that contains the crypto commands, with a K9 in the
file name.  
e.g. Cisco IOS Software, C3750 Software (C3750-ADVIPSERVICESK9-M),
Version 12.2(25)SEE2
>  *what are the commands
> required on the router 
First, create a group
router(config)# snmp-server group mygroup v3 priv

then create a user
router(config)# snmp-server user myuser mygroup v3 auth sha mypassword
priv des mykey 

You can grab the engineid from the show snmp user command.  For this
example I'll say it is 800000090200000D63864E01

> and at the mrtg software ? 

I normally use hashed keys:
[me at mrtghost ~]snmpkey sha mypassword 800000090200000D63864E01 des mykey                   
authKey: 0x16b5ced4f1290c7114e803b14af8bff320a34ea2
privKey: 0xa45ce7bac56ac297d4d3dd0dd89c000c


[mrtg at mrtghost cfg]$ cfgmaker --if-template=iosv3.iftemplate
--ifref=name --interfaces --host-template=iosv3.template
--subdir=tlc/HOSTNAME --username='myuser'
--authkey='0x16b5ced4f1290c7114e803b14af8bff320a34ea2' --authproto='sha'
--privkey='0xa45ce7bac56ac297d4d3dd0dd89c000c' --privproto='des'
--output=/var/mrtg/cfg/tlc/tlc-net-2.cfg
'myuser'@tlc-net-2 at example.com::2:1:1:3


I have a lot of customizations that I do with the templates, but it should work fine without templates.

-- 
Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX
Austin Energy
http://www.austinenergy.com

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://lists.ee.ethz.ch/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://lists.ee.ethz.ch/lsg2.cgi