Managing SNMPv3 Trap Configuration

From Junos Space Platform Release 17.1R1 onward, you can modify the SNMPv3 trap configuration from the Junos Space Platform GUI. The Junos Space Network Management Platform stores the SNMPv3 trap configuration in the /opt/opennms/etc/trapd-configuration.xml file.

When a device is discovered using SNMPv3, Junos Space Platform sends the latest SNMPv3 trap configuration, which is the first item in the trapd-configuration.xml file, to the newly-discovered device. Modifications to SNMPv3 trap configuration trigger a restart of the OpenNMS and deployment of the latest configuration onto the devices.

The SNMPv3 trap configuration includes the username, security level, and authentication and privacy settings. Although you can configure multiple users, only the last modified user configuration is deployed onto the devices. The default username is JunosSpace. The security level for the JunosSpace user is by default set to authPriv.

Note: After you upgrade Junos Space Platform to Release 17.1R1 or later, modify the SNMPv3 trap configuration from the Junos Space Platform UI or merge the old and new configuration as explained in Updating Network Monitoring After Upgrading the Junos Space Network Management Platform.

1. On the Junos Space Platform UI, select Network Monitoring > Admin > SNMPv3 Trap Configuration.

   The SNMPv3 Trap Configuration page appears.

2. In the User Name field, enter a unique username.
3. From the Security Level list, select one of the following values:
   authPriv —Enables both authentication and privacy settings. if you select this, you need to specify both authentication and privacy settings.

   authNoPriv —Enables authentication without privacy settings. if you select this, you need to specify the authentication settings. The privacy settings remain disabled in the Platform UI.

   NoAuthNoPriv —Disables both authentication and privacy settings. If you select this, you cannot configure authentication or privacy settings. The authentication and privacy settings remain disabled in the Platform UI.
4. If you selected authPriv or authNoPriv from the Security Level list, configure the following authentication settings:
   Authentication Type —Select MD5 or SHA.

   Authentication Password —Type the authentication password for the user.

   Confirm Authentication Password —Retype the authentication password to confirm.

   Note: These fields remain disabled if you selected NoAuthNoPriv from the Security Level list.

5. If you selected authPriv from the Security Level list, configure the following privacy settings:
   Privacy Type —Select AES or DES.

   Privacy Password —Type the privacy password for the user.

   Confirm Privacy Password —Retype the privacy password to confirm.

   Note: These fields remain disabled if you selected authNoPriv or NoAuthNoPriv from the Security Level list.

6. To submit the changes, click OK. Alternatively, to discard the changes and close the page, click Cancel.

   If you click OK, Junos Space Platform displays the following message: Modifying SNMPv3 Trap Configuration. This action will restart OpenNMS and deploy the updated SNMP configuration to the managed devices. To submit the changes, click Yes. After you click Yes, OpenNMS restarts and Junos Space Platform deploys the modified configuration onto the managed devices.

   If you click Yes, the job ID is displayed. You can click the job ID to view the job details and status.

   Note: If you click Yes without modifying the SNMPv3 trap configuration, Junos Space Platform displays the following message: No configuration changed. Please Change SNMPv3 Configuration Before Submit.

   You can click No to go back to the SNMPv3 Trap Configuration page.

Device-side Configuration for SNMPv3 Traps

For Junos Space Platform to be able to manage SNMPv3 traps on the managed devices, you must complete the following device-side configuration:

Note: Words in Italics in the following examples indicate variables. You may need to replace that with the corresponding values used in your configuration.

snmp {

v3 {

usm {

local-engine {

user "JunosSpace" {

authentication-md5 {

authentication-key authentication-key

}

privacy-des {

privacy-key privacy-key

}

}

}

}

target-address TA_SPACE {

address ip-address;

tag-list TAG_SPACE;

target-parameters TP_SPACE;

}

target-parameters TP_SPACE {

parameters {

message-processing-model v3;

security-model usm;

security-level privacy;

security-name "JunosSpace";

}

notify-filter SPACE_TRAP_FILTER;

}

notify SPACE_TRAPS {

type trap;

tag TAG_SPACE;

}

notify-filter SPACE_TRAP_FILTER {

oid .1 include;

}

}

}

The corresponding set commands are: