>>If you are using "com2sec", then this relates to SNMPv1/2.

What should I use for SNMPv3?

I created the following 2 users one has a context name defined the other
one does not. The one that uses a context name does not work, the other
one works fine.

The one that works:
com2sec userc  default       userc
group   groupc usm           userc
view  readview     included   .1
view  writeview    included   .1
access  groupc ""  usm  authPriv exact  readview writeview none
createUser userc MD5 abcdefgh DES abcdefgh

snmpget -v 3 -l priv -u userc -a MD5 -A abcdefgh -x DES -X abcdefgh
localhost SNMPv2-MIB::sysContact.0
SNMPv2-MIB::sysContact.0 = STRING: LocalHost  <<-- get worked

The one that does not work:
com2sec -Cn context1 v3user default     v3user
group   groupd usm          v3user
view  readview     included   .1
view  writeview    included   .1
access  groupd context1 usm   authPriv exact  readview writeview
notifyview
createUser v3user MD5 abcdefgh DES abcdefgh

snmpget -v 3 -n context1 -l priv -u v3user -a MD5 -A abcdefgh -x DES -X
abcdefgh localhost SNMPv2-MIB::sysContact.0
Timeout: No Response from localhost.
Also when I try to do a get via Mgsoft mib browser tool with the same
v3user entry (spcecifying context1) I do not get access to the object.
If I remove the context1 from the setup - the same entry works fine and
I am able to get sysContact.

>>What is the exact "snmpwalk" command you are using?
snmpget -v 3 -n context1 -l priv -u v3user -a MD5 -A abcdefgh -x DES -X
abcdefgh localhost SNMPv2-MIB::sysContact.0

>>Also, what MIB information have you registered in "context1", and how
have you done this?
I do not know what this means, so can you tell me what I have to do to
register mibs into context1? Also, How do I add a vacmContextEntry to
the vacmContextTable?
My context1 entry does not show up when I walk the vacmContexTable.
So what am I doing wrong?
Thanks
Joan 

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Dave Shield
Sent: Wednesday, April 09, 2008 4:22 AM
To: Joan Landry
Cc: net-snmp-users@lists.sourceforge.net
Subject: Re: Configuring a new vacmContextName

On 08/04/2008, Joan Landry <[EMAIL PROTECTED]> wrote:
> I would like to know how to add a new vacmContextName to netsnmpd.
>
> I added the following user
> com2sec -Cn context1 v3user1 default     v3user1
> access  groupd context1 usm   authPriv exact  readview writeview
notifyview

If you are using "com2sec", then this relates to SNMPv1/2.
So your "access" lines should be something like

   access  {group}  context1   v1   noauth  exact  {rview} {wview}
{nview}
   access  {group}  context1   v2c  noauth  exact  {rview} {wview}
{nview}
or
   access  {group}  context1   any noauth  exact  {rview} {wview}
{nview}


> This does not work as acces is denied when I do snmpwalk.

What is the exact "snmpwalk" command you are using?
Also, what MIB information have you registered in "context1", and how
have you done this?


Dave

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users

Reply via email to