« More Adobe UI Fuckups | Main | Et Tu Garmin? »

So after googling around, I found out how to do this, on a really badly-formatted site. So, here it is, a bit neater:

1. ssh into the switch, and enter configuration mode with "configure"
2. run: "snmpv3 enable"
1. you'll have to create an initial snmpv3 user called "initial"
2. I've been using the same passwords as for the "real" snmp user, but that's up to whatever your policy is. If the switch is exposed, you'd want to delete this user ASAP
3. when asked to lock SNMPv1 & SNMPv2 to read-only, say yes
4. don't create a user that uses SHA
3. create the "real" SNMPv3 user via: "snmpv3 user <username> auth md5 <authpassword> priv <encryptionpassword>"
4. create the group for snmpadmin: "snmpv3 group managerpriv user <username> sec-model ver3"
5. save the config: "write memory"

To explicitly look at the SNMPv3 user(s) use "show snmpv3 user". To view groups, "show snmpv3 groups". Note that you can use different authentication and encryption protocols if you so desire.

Comments