To configure SNMPv3, include the following statements at the [edit snmp v3] and [edit snmp] hierarchy levels:
- [edit snmp]
-
engine-id {
- (local engine-id | use-fxp0-mac-address
| use-default-ip-address);
- }
-
view view-name {
-
oid object-identifier (include | exclude);
- }
- [edit snmp v3]
-
notify name {
-
tag tag-name;
-
type (trap | inform);
- }
-
notify-filter profile-name {
-
oid object-identifier (include | exclude);
- }
-
snmp-community community-index {
-
community-name community-name;
-
security-name security-name;
-
tag tag-name;
- }
-
target-address target-address-name {
-
address address;
-
address-mask address-mask;
-
inform-retry-count number;
-
inform-timeout seconds;
-
port port-number;
-
routing-instance instance;
-
tag-list tag-list;
-
target-parameters target-parameters-name;
- }
-
target-parameters target-parameters-name {
-
notify-filter profile-name;
-
-
parameters {
-
message-processing-model (v1 | v2c | v3);
-
security-model (usm | v1 | v2c);
-
security-level (authentication | none
| privacy);
-
security-name security-name;
- }
- }
-
usm {
-
- (local-engine | remote-engine engine-id) {
-
-
user username {
-
-
authentication-md5 {
-
authentication-password authentication-password;
- }
-
authentication-none;
-
-
authentication-sha {
-
authentication-password authentication-password;
- }
-
-
privacy-3des {
-
privacy-password privacy-password;
- }
-
-
privacy-aes128 {
-
privacy-password privacy-password;
- }
-
-
privacy-des {
-
privacy-password privacy-password;
- }
-
privacy-none;
- }
- }
- }
-
vacm {
-
- access {
-
-
group group-name {
-
- default-context-prefix {
-
-
security-model (any | usm | v1 | v2c)
{
-
-
security-level (authentication | none
| privacy) {
-
notify-view view-name;
-
read-view view-name;
-
write-view view-name;
- }
- }
- }
- }
- }
-
-
security-to-group {
-
-
security-model (usm | v1 | v2c) {
-
-
security-name security-name {
-
group group-name;
- }
- }
- }
- }