To configure SNMPv3, include the following statements at the [edit snmp v3] and [edit snmp] hierarchy levels:
- [edit snmp]
- engine-id {
- (local engine-id | use-fxp0-mac-address
| use-default-ip-address);
- }
- view view-name {
- oid object-identifier (include | exclude);
- }
- [edit snmp v3]
- notify name {
- tag tag-name;
- type (trap | inform);
- }
- notify-filter profile-name {
- oid object-identifier (include | exclude);
- }
- snmp-community community-index {
- community-name community-name;
- security-name security-name;
- tag tag-name;
- }
- target-address target-address-name {
- address address;
- address-mask address-mask;
- inform-retry-count number;
- inform-timeout seconds;
- port port-number;
- routing-instance instance;
- tag-list tag-list;
- target-parameters target-parameters-name;
- }
- target-parameters target-parameters-name {
- notify-filter profile-name;
-
- parameters {
- message-processing-model (v1 | v2c | v3);
- security-model (usm | v1 | v2c);
- security-level (authentication | none
| privacy);
- security-name security-name;
- }
- }
- usm {
-
- (local-engine | remote-engine engine-id) {
-
- user username {
-
- authentication-md5 {
- authentication-password authentication-password;
- }
- authentication-none;
-
- authentication-sha {
- authentication-password authentication-password;
- }
-
- privacy-3des {
- privacy-password privacy-password;
- }
-
- privacy-aes128 {
- privacy-password privacy-password;
- }
-
- privacy-des {
- privacy-password privacy-password;
- }
- privacy-none;
- }
- }
- }
- vacm {
-
- access {
-
- group group-name {
-
- default-context-prefix {
-
- security-model (any | usm | v1 | v2c)
{
-
- security-level (authentication | none
| privacy) {
- notify-view view-name;
- read-view view-name;
- write-view view-name;
- }
- }
- }
- }
- }
-
- security-to-group {
-
- security-model (usm | v1 | v2c) {
-
- security-name security-name {
- group group-name;
- }
- }
- }
- }