hi,
I'm using 5.1.1 and i tried to configure vacm but is
failing.
I am following the examples given in netsnmp
tutorials. USM configuration is succeeding after which
i go ahead to define view access but is failing.
i.e. I follow the steps as below:
Step1: snmpusm -v3 -u old -n "" -l authNoPriv -a MD5
-A netsnmp_password localhost create newuser old
Step2: snmpusm -v3 -u newuser -n "" -l authNoPriv -a
MD5 -A netsnmp_password localhost passwd
netsnmp_password new_password
Step3: snmpvacm localhost createSec2Group 3 newuser
RWGroup
Step1 and Step2 are successful. I issue a set and a
get with the specified user name and password
successfully.
Step3 is failing. There is no response and the command
is timing out(even if i use -r 0 -t 1000000).
Can someone help me with this??? In which case will i
not get any response from the createSec2Group command?
My snmp.conf and snmpd.conf is as mentioned at the
end of this mail.
rgds,
- kevin.
*****snmp.conf************ is as below..********
###########################################################################
#
# snmp.conf
#
# - created by the snmpconf configuration program
#
###########################################################################
# SECTION: Default Authentication Options
#
# This section defines the default authentication
# information. Setting these up properly in your
# ~/.snmp/snmp.conf file will greatly reduce the
amount of
# command line arguments you need to type
(especially for snmpv3).
# defversion: The default snmp version number to use.
# override: with -v on the command line.
# arguments: 1|2c|3
defversion 3
# defcommunity: The default snmpv1 and snmpv2c
community name to use when needed.
# If this is specified, you don't need to include
the community
# name as an argument to the snmp applications.
# override: with -c on the command line.
# arguments: communityname
defcommunity public
# defsecurityname: The default snmpv3 security name to
use when using snmpv3
# override: with -u on the command line.
# arguments: securityname
defsecurityname newuser
# defcontext: The default snmpv3 context name to use
# override: with -n on the command line.
# arguments: contextname
defcontext none
# defsecuritylevel: The default snmpv3 security level
to use
# override: with -l on the command line.
# arguments: noAuthNoPriv|authNoPriv|authPriv
#defsecuritylevel authNoPriv
# defauthtype: The default snmpv3 authentication type
name to use
# override: with -a on the command line.
# arguments: authtype
defauthtype MD5
# defauthpassphrase: The default snmpv3 authentication
pass phrase to use
# Note: It must be at least 8 characters long.
# override: with -A on the command line.
# arguments: passphrase
defauthpassphrase new_password
# defprivtype: The default snmpv3 privacy (encryption)
type name to use
# override: with -x on the command line.
# arguments: privtype
defprivtype DES
# defprivpassphrase: The default snmpv3 privacy pass
phrase to use
# Note: It must be at least 8 characters long.
# override: with -X on the command line.
# arguments: passphrase
defprivpassphrase new_password
###########################################################################
# SECTION: Debugging output options
#
# This section allows debugging output of various
kinds to
# be turned on or off.
# dodebugging: Turns debugging output on or off (0|1)
# arguments: (0|1)
dodebugging 0
*******************************************************
*********snmpd.conf is as
below************************
###########################################################################
#
# snmpd.conf
#
# - created by the snmpconf configuration program
#
###########################################################################
# SECTION: System Information Setup
#
# This section defines some of the information
reported in
# the "system" mib group in the mibII tree.
# syslocation: The [typically physical] location of
the system.
# Note that setting this value here means that when
trying to
# perform an snmp SET operation to the sysLocation.0
variable will make
# the agent return the "notWritable" error code.
IE, including
# this token in the snmpd.conf file will disable
write access to
# the variable.
# arguments: location_string
syslocation testlocation
# syscontact: The contact information for the
administrator
# Note that setting this value here means that when
trying to
# perform an snmp SET operation to the sysContact.0
variable will make
# the agent return the "notWritable" error code.
IE, including
# this token in the snmpd.conf file will disable
write access to
# the variable.
# arguments: contact_string
syscontact [EMAIL PROTECTED]
###########################################################################
# SECTION: Access Control Setup
#
# This section defines who is allowed to talk to
your running
# snmp agent.
# rwuser: a SNMPv3 read-write user
# arguments: user [noauth|auth|priv]
[restriction_oid]
rwuser old auth
rwuser newuser auth
createUser old MD5 netsnmp_password DES
# rouser: a SNMPv3 read-only user
# arguments: user [noauth|auth|priv]
[restriction_oid]
rouser old auth
# rocommunity: a SNMPv1/SNMPv2c read-only access
community name
# arguments: community
[default|hostname|network/bits] [oid]
rocommunity public
# rwcommunity: a SNMPv1/SNMPv2c read-write access
community name
# arguments: community
[default|hostname|network/bits] [oid]
rwcommunity public
###########################################################################
# SECTION: Trap Destinations
#
# Here we define who the agent will send traps to.
# trapsink: A SNMPv1 trap receiver
# arguments: host [community] [portnum]
trapsink 10.20.30.40
# trap2sink: A SNMPv2c trap receiver
# arguments: host [community] [portnum]
trap2sink 10.20.30.40
# informsink: A SNMPv2c inform (acknowledged trap)
receiver
# arguments: host [community] [portnum]
informsink 10.20.30.40
# authtrapenable: Should we send traps when
authentication failures occur
# arguments: 1 | 2 (1 = yes, 2 = no)
authtrapenable 1
###########################################################################
# SECTION: Agent Operating Mode
#
# This section defines how the agent will operate
when it
# is running.
# master: Should the agent operate as a master agent
or not.
# Currently, the only supported master agent type
for this token
# is "agentx".
#
# arguments: (on|yes|agentx|all|off|no)
master yes
******************************************************
___________________________________________________________ALL-NEW Yahoo! Messenger -
all new features - even more fun! http://uk.messenger.yahoo.com
-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
_______________________________________________
Net-snmp-users mailing list
[EMAIL PROTECTED]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
