Question
How to check SNMPv3 walk?
Solution
This article explains the process to check SNMPv3 walk.
Follow these steps before checking SNMP v3 walk.
vuser using MD5 Auth, AES priv, and password versa123.Example:
set snmp usm local user vuser auth md5 password versa123 set snmp usm local user vuser priv aes password versa123
internet provides access to all the OIDs under tree 1.2,1.3 and 1.3.6.1.Example:
% show snmp vacm view
view internet {
subtree 1.2 {
included;
}
subtree 1.3 {
included;
}
subtree 1.3.6.1 {
included;
}
}Run the set snmp vacm group all-rights access any auth-priv notify-view internet read-view internet CLI command to create a View-based Access Control (VACM) view called all-rights.Example:
set snmp vacm group all-rights access any auth-priv notify-view internet read-view internet
VACM has these properties:
all-rights all-rights group is used by users accessing via any version (v1/v2/usm) of the protocolnternet (shown in 2.)vuser to the all-rights group.vuser to the NACM group.Example:
set nacm groups group admin user-name vuser ^^^^^ admin has full access to everything in our case (via his NACM rules)
% set snmp community public name public % set snmp vacm group all-rights member public sec-model v2c
Example:
$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::system
SNMPv2-MIB::sysDescr.0 = STRING: Versa Appliance
SNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2
SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73
SNMPv2-MIB::sysContact.0 = STRING:
SNMPv2-MIB::sysName.0 = STRING:
SNMPv2-MIB::sysLocation.0 = STRING:
SNMPv2-MIB::sysServices.0 = INTEGER: 72
SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00$ snmpwalk -v2c -c public -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::systemSNMPv2-MIB::sysDescr.0 = STRING: Versa ApplianceSNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2SNMPv2-MIB::sysUpTime.0 = Timeticks: (4773) 0:00:47.73SNMPv2-MIB::sysContact.0 = STRING:SNMPv2-MIB::sysName.0 = STRING:SNMPv2-MIB::sysLocation.0 = STRING:SNMPv2-MIB::sysServices.0 = INTEGER: 72SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00Example
admin@flexvnf-cli(config)% show confdConfig snmpAgent snmpEngine snmpEngineID snmpEngineID 80:00:a5:77:01:0a:28:0f:38; [ok][2015-11-14 15:04:54] Or Run below command on latest release [admin@flexvnf: ~] # vsh engine-id 80:00:a5:77:01:0a:28:0f:38
$ snmpwalk -v 3 -E 8000a577010a280f38 -n "" -u vuser -l authPriv -a MD5 -A versa123 -x AES -X versa123 -m ALL -M ./versa-mibs 10.40.15.56 SNMPv2-MIB::system SNMPv2-MIB::sysDescr.0 = STRING: Versa Appliance SNMPv2-MIB::sysObjectID.0 = OID: VERSA-MIB::applications.2.2 SNMPv2-MIB::sysUpTime.0 = Timeticks: (81467) 0:13:34.67 SNMPv2-MIB::sysContact.0 = STRING: SNMPv2-MIB::sysName.0 = STRING: SNMPv2-MIB::sysLocation.0 = STRING: SNMPv2-MIB::sysServices.0 = INTEGER: 72 SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00
Refer to this sample configuration to configure SNMPv3 walk:
snmp {
agent {
enabled;
ip 10.40.15.56;
udp-port 161;
version {
v1;
v2c;
v3;
}
engine-id {
enterprise-number 42359;
from-ip 10.40.15.56;
}
max-message-size 50000;
}
usm {
local {
user vuser {
auth {
md5 {
password versa123;
}
}
priv {
aes {
password versa123;
}
}
}
}
}
community public {
sec-name public;
}
vacm {
group all-rights {
member public {
sec-model [ v2c ];
}
member vuser {
sec-model [ usm ];
}
access any no-auth-no-priv {
read-view internet;
notify-view internet;
}
access any auth-priv {
read-view internet;
notify-view internet;
}
}
view internet {
subtree 1.2 {
included;
}
subtree 1.3 {
included;
}
subtree 1.3.6.1 {
included;
}
}
}
}To ensure successful communication between an SNMP manager (such as Cacti or Nagios) and Versa VOS devices, the SNMPv3 security parameters must match the specific cryptographic algorithms supported by the VOS software.
Supported Algorithms
Versa VOS currently supports the following standard algorithms for secured SNMPv3 polling:
Note: Attempting to use higher-level algorithms (e.g., SHA-224, SHA-256, or AES-256) will result in an authentication failure, as these are not currently supported for SNMPv3 polling on the platform.
Configuration Verification:
You can verify the connectivity and credentials using the snmpwalk utility. Ensure the -a (Authentication Protocol) and -x (Privacy Protocol) flags are set correctly.
Successful Connection Example
When the manager is configured with SHA-1 and AES-128, the device returns the expected MIB data:
snmpwalk -v3 -u CactiV3User -l authPriv -a SHA-1 -A '<PASS>' -x AES-128 -X '<PASS>' <VOS-IP> sysName.0
Output: SNMPv2-MIB::sysName.0 = STRING: <Site-Name>
Troubleshooting: Authentication Failures:
If you use an unsupported algorithm, the VOS device will reject the request. This often appears as a generic timeout or a "Sub-id not found" error because the initial handshake fails.
Example of an Unsupported Configuration: In this instance, using SHA-224 causes the connection to fail:
snmpwalk -v3 -u CactiV3User -l authPriv -a SHA-224 -A '<PASS>' -x AES-128 -X '<PASS>' <VOS-IP> sysName.0
Error Message: snmpwalk: Authentication failure (incorrect password, community or key) (Sub-id not found: (top) -> sysName)