Configuring SNMPv3 as a USM Model

Configuring SNMPv3 as a USM Model:

  1. From the CLI manager navigate to Administration > OS Console.

    The command prompt appears.

  2. Perform the following steps to comment the rocommunity string.

    1. Edit the snmpd.conf using a text editor.

      /etc/snmp/snmpd.conf

    2. Prepend a # to comment the rocommunity string.

    3. Save the changes.

  3. Run the following command to set the path for the snmpd.conf file.

    export datarootdir=/usr/share

  4. Stop the SNMP daemon using the following command:

    /etc/init.d/snmpd stop

  5. Add a user with read-only permissions using the following command:

    net-snmp-create-v3-user -ro -A <authorization password> -a MD5 -X <authorization password> -x DES snmpuser

    For example,

    net-snmp-create-v3-user -ro -A snmpuser123 -a MD5 -X snmpuser123 -x DES snmpuser

  6. Start the SNMP daemon using the following command:

    /etc/init.d/snmpd start

  7. Verify if SNMPv1 is disabled using the following command:

    snmpwalk -v 1 -c public <hostname or IP address>

  8. Verify if SNMPv3 is enabled using the following command:

    snmpwalk -u <username> [-A (authphrase)] [-a (MD5|SHA)] [-x DES] [-X (privaphrase)] (ipaddress)[:(dest_port)] [oid]

    For example,

    snmpwalk -u snmpuser -A snmpuser123 -a MD5 -X snmpuser123 -x DES -l authPriv 127.0.0.1 -v3

  9. Unset the variable assigned to the snmpd.conf file using the following command.

    unset datarootdir
Last modified February 7, 2025