Manuals / Nortel Networks / Computer Equipment / Network Router

Nortel Networks 8600 manual Appendix A Configuration Files, From Configuration Example

Models: 8600

1 41

Download 41 pages 17.31 Kb

Page 39

11. Appendix A: Configuration Files

Technical Configuration Guide for SNMP

v2.0

December 2006

11. Appendix A: Configuration Files

11.1 From Configuration Example 7.5

#

#SNMP V3 GROUP MEMBERSHIP CONFIGURATION

snmp-v3 group-member create private snmpv1 no_private snmp-v3 group-member create private snmpv2c no_private snmp-v3 group-member create user1 usm group_1 snmp-v3 group-member create user2 usm group_1

#

#SNMP V3 GROUP ACCESS CONFIGURATION

snmp-v3 group-access create group_1 "" usm authNoPriv

snmp-v3 group-access view group_1 "" usm authNoPriv read "org" write "private" notify "" snmp-v3 group-access create group_1 "" usm authPriv

snmp-v3 group-access view group_1 "" usm authPriv read "org" write "org" notify "" snmp-v3 group-access create no_private "" snmpv1 noAuthNoPriv

snmp-v3 group-access view no_private "" snmpv1 noAuthNoPriv read "org" write "private_restrict" notify "org" snmp-v3 group-access create no_private "" snmpv2c noAuthNoPriv

snmp-v3 group-access view no_private "" snmpv2c noAuthNoPriv read "org" write "private_restrict" notify "org" snmp-v3 group-access create OpsQosPolicyUser "" usm authNoPriv

snmp-v3 group-access view OpsQosPolicyUser "" usm authNoPriv read "org" write "org" notify "org"

#

#SNMP V3 MIB VIEW CONFIGURATION

snmp-v3 mib-view create private_restrict 1.3.6.1.4 type exclude

11.2 From Configuration Example 8

#

#SNMP V3 GROUP MEMBERSHIP CONFIGURATION

snmp-v3 group-member create user1 usm group_1 snmp-v3 group-member create user2 usm group_1

snmp-v3 group-member create OpsQosPolicyUser usm OpsQosPolicyUser

#

#SNMP V3 GROUP ACCESS CONFIGURATION

snmp-v3 group-access create group_1 "" usm authNoPriv

snmp-v3 group-access view group_1 "" usm authNoPriv read "org" write "private" n otify ""

snmp-v3 group-access create group_1 "" usm authPriv

snmp-v3 group-access view group_1 "" usm authPriv read "org" write "org" notify

""

snmp-v3 group-access create OpsQosPolicyUser "" usm authNoPriv

snmp-v3 group-access view OpsQosPolicyUser "" usm authNoPriv read "org" write "o rg" notify "org"

#

#SNMP V3 MIB VIEW CONFIGURATION

______________________________________________________________________________________________________

NORTEL

External Distribution

38

Image 39

Nortel Networks 8600 manual Appendix A Configuration Files, From Configuration Example

Contents

Enterprise Network Engineering Document Date December 15 Technical Configuration Guide for SNMPEthernet Routing Switch EngineeringDisclaimer External Distribution AbstractDecember NORTEL8. CONFIGURATION EXAMPLE USING SNMPV3 Table of ContentsSNMP WITH RADIUS AUTHENTICATION AND ACCOUNTING CONFIGURATION EXAMPLE CHANGING SNMP COMMUNITIESNORTEL List of FiguresList of Tables DecemberFigure 1 SNMPv3 USM 1. SNMPv3 Overview2.1 Hidden File Details 2. SNMP Upgrade Considerations3. Blocking SNMP ERS-86105# config bootconfig flags block-snmp trueERS-86105# config bootconfig flags block-snmp false PP8600-B6# config snmp-v3 mib-view create v1v2only 1.3.6 type excludeERS-86065# config sys access-policy policy 1..65535 service ? ERS-86065# config sys access-policy enable true/falseERS-86065# config sys access-policy policy ERS-86065# config sys access-policy policy 1..65535 ?ERS-86065# config sys access-policy policy 2 create 3.3 SNMP Group Access Policy - Release 3.7.9, 4.1 or higher3.2.1 Configuration Example Blocking SNMP via an Access Policy ERS-86065# config sys access-policy enable trueERS-86065# config sys access-policy policy 2 create 3.3.1 SNMPv3 Group Access Policy Configuration ExampleERS-86105# config sys access-policy policy 1 service ? ERS-86065# config sys access-policy enable trueERS-86105# config sys access-policy policy 2 service snmpv3 enable 3.3.2 SNMPv1/2 Group Access Policy Configuration ExampleERS-86105# config sys access-policy policy 2 access-strict true ERS-86105# config sys access-policy policy 2 service telnet enableERS-86065# config sys access-policy policy 2 accesslevel rwa ERS-86065# config sys access-policy enable trueERS-86065# config sys access-policy policy 2 create ERS-86065# config sys access-policy policy 2 name policy23.3.3 SNMP Community Strings ERS-86065# config sys set snmp community rorwl2l3rwa commstring ERS-86065# config sys set snmp trap-recv ipaddr v2c public Whereconfig snmp-v3 community create followed by ERS-86065# config snmp-v3 community info ERS8600G3# config snmp-v3 community info3.3.4 Modifying and/or adding community strings Parameter ERS-86065# config snmp-v3 community delete index1ERS-86065# config snmp-v3 community delete index2 ERS-86065# config snmp-v3 community create third readonly readviewERS-86065# show snmp-v3 notify info ERS-86065# config snmp-v3 notify ?ERS-86065# config snmp-v3 notify create Trap2 tag trapTag2 type trap ERS-86065# config snmp-v3 target-addr ?ERS-86065# config snmp-v3 target-addr delete TAddr1 ERS-86065# config snmp-v3 target-addr infoERS-86105# config snmp-v3 target-param info ERS-86065# config bootconfig flags hsecure falsetrue 3.4 New Default Community Strings in High Secure hsecure ModeERS-86065# config ip circuitless-ip-int 1 create 1.1.1.1/32 4. SNMP SettingsERS-86065# config sys set snmp ? config sys set snmpNORTEL Technical Configuration Guide for SNMPv2.0 December5. SNMP with RADIUS Authentication and Accounting ERS-86105# config load-encryption-module AES /flash/filename.aes 6. Configuring SNMPv3ERS-86105# config load-encryption-module DES /flash/filename.des ERS-86105# config load-encryption-module 3DES /flash/filename.des6.3 Assign USM User to USM Group ERS-86105# config snmp-v3 usm infoERS-86105# config snmp-v3 group-member create user1 usm groupexample ERS-8610-C5# config snmp-v3 group-member infoERS-86105# config snmp-v3 group-access info 6.4 Assigning the USM Group Access LevelERS-86105# config snmp-v3 mib-view info 6.5 Assigning the MIB View to the USM GroupERS-86105# config snmp-v3 group-access info 6.6 Creating a MIB View ERS-86105# config snmp-v3 mib-view infoFigure 2 MIB Structure ERS-86065# config sys set snmp community ro ro567pp8600 7. Configuration Example Changing SNMP Communities7.1 Configuration Example SNMP Communities with Release ERS-86065# config sys set snmp community rwa rwa123pp86007.2 Configuration Example Changing the Default SNMP Community Name with Release 3.7 or initialview ERS-8610-C5# config snmp-v3 community infoERS-8610-C5# config snmp-v3 group-access info ERS-8610-C5# config snmp-v3 group-member infov1v2only ERS-8610-C5# config snmp-v3 mib-view infov1v2only v1v2only7.4 Testing SNMP Using Device Manager ERS-86105# config snmp-v3 group-member create private snmpv1 noprivate ERS-86105# config snmp-v3 group-access create group1 usm authPriv 8. Configuration Example Using SNMPv3ERS-86105# config load-encryption-module DES /flash/p80c3700.des ERS-86105# config snmp-v3 group-member create user1 usm group1ERS-86105# config snmp-v3 group-access create group1 usm authNoPriv 8.1 Testing SNMPv3 Using Device ManagerERS-86105# config snmp-v3 usm create user2 md5 auth user2abcd ERS-86105# config snmp-v3 group-member create user2 usm group1External Distribution 9. Software BaselineDecember NORTELDescription 10. Reference DocumentationDocument Title Publication11. Appendix A Configuration Files 11.1 From Configuration Example11.2 From Configuration Example Technical Configuration Guide for SNMP Contact us