I would very much appreciate someone's help with the following NET-SNMP config issue.

 

I have tried to determine why a SNMPD.CONF file does not work on a SNMP V3 authentication setup in the following file. After reviewing the CONF file many times, I have not been able to identify it. My basic intent is to create 2 users - 1 with access to the mib-2::system subarea and the other of the mib-2::interfaces subtree in the views view1 and view2. The snmpwalk command always returns:

Error in packet.

Reason: authorizationError (access denied to that object)

Here is my CONF file which describes all of the views, groups, and accesses :

#

# net-snmp (or ucd-snmp) persistent data file.

#

syslocation unknown

syscontact unknown

sysservices 72

rocommunity public

rwcommunity private

 

#

# SMUX peer support (gated)

#

smuxpeer .1.3.6.1.4.1.4.3.1.4 secret

 

#send v1 traps

trapsink 192.168.1.3 public

#send v2 traps

trap2sink 192.168.1.3 secret

#send authentication traps

authtrapenable 1

 

# SNMP v3 configuration

 

createUser tester1 MD5 testpasswd DES

createUser tester2 MD5 testpass DES

com2sec tester1 default  public

com2sec tester2 default  public

group   test1   usm     tester1

group   test2   usm     tester2

view    view1   included   system 0

view    view2   included   interfaces 0

access  test1   ""      any     auth     exact  view1   none    none

access  test2   ""      any     auth    exact   view2   none    none

 

# Used with ifMibObjects alias support

ifalias /etc/rcZ.d/ifalias

 

# To limit the size of the RMON logfile

logentry 5000

# End of snmpd.conf

 

The following SNMP v3 requests all return authorization errors :

1.snmpwalk -v3 -A "testpasswd" -n "" -u tester1 -l authNoPriv 192.168.1.26 interfaces

2.snmpwalk -v3 -A "testpasswd" -n "" -u tester1 -l authNoPriv 192.168.1.26 system

3.snmpwalk -v3 -A "testpass" -n "" -u tester2 -l authNoPriv 192.168.1.26 system

4.snmpwalk -v3 -A "testpass" -n "" -u tester2 -l authNoPriv 192.168.1.26 interfaces

 

I believe that with the above setup, test 1 and 3 should not work. Only 2 and 4 should work, but this is not occurring. Is there something wrong in my SNMPD.CONF file. I cannot determine if it is the mask for the view or another issue.

 

Thanks for your time and look forward to hearing from you soon.

 

Regards 

Manish

 

 

 

 

Reply via email to