Managing SNMPv3 Trap Configuration
From Junos Space Platform Release 17.1R1 onward, you can modify the SNMPv3 trap configuration from the Junos Space Platform GUI. The Junos Space Network Management Platform stores the SNMPv3 trap configuration in the /opt/opennms/etc/trapd-configuration.xml file.
When a device is discovered using SNMPv3, Junos Space Platform sends the latest SNMPv3 trap configuration, which is the first item in the trapd-configuration.xml file, to the newly-discovered device. Modifications to SNMPv3 trap configuration trigger a restart of the OpenNMS and deployment of the latest configuration onto the devices.
The SNMPv3 trap configuration includes the username, security level, and authentication and privacy settings. Although you can configure multiple users, only the last modified user configuration is deployed onto the devices. The default username is JunosSpace. The security level for the JunosSpace user is by default set to authPriv.
After you upgrade Junos Space Platform to Release 17.1R1 or later, modify the SNMPv3 trap configuration from the Junos Space Platform UI or merge the old and new configuration as explained in Updating Network Monitoring After Upgrading the Junos Space Network Management Platform.
To modify the SNMPv3 trap configuration on the Junos Space Platform:
Device-side Configuration for SNMPv3 Traps
For Junos Space Platform to be able to manage SNMPv3 traps on the managed devices, you must complete the following device-side configuration:
Words in Italics in the following examples indicate variables. You may need to replace that with the corresponding values used in your configuration.
snmp { v3 { usm { local-engine { user "JunosSpace" { authentication-md5 { authentication-key authentication-key } privacy-des { privacy-key privacy-key } } } } target-address TA_SPACE { address ip-address; tag-list TAG_SPACE; target-parameters TP_SPACE; } target-parameters TP_SPACE { parameters { message-processing-model v3; security-model usm; security-level privacy; security-name "JunosSpace"; } notify-filter SPACE_TRAP_FILTER; } notify SPACE_TRAPS { type trap; tag TAG_SPACE; } notify-filter SPACE_TRAP_FILTER { oid .1 include; } } }
The corresponding set
commands are:
set snmp v3 usm local-engine user JunosSpace authentication-md5 authentication-key authentication-key set snmp v3 usm local-engine user JunosSpace privacy-des privacy-key privacy-key set snmp v3 target-address TA_SPACE address ip-address set snmp v3 target-address TA_SPACE tag-list TAG_SPACE set snmp v3 target-address TA_SPACE target-parameters TP_SPACE set snmp v3 target-parameters TP_SPACE parameters message-processing-model v3 set snmp v3 target-parameters TP_SPACE parameters security-model usm set snmp v3 target-parameters TP_SPACE parameters security-level privacy set snmp v3 target-parameters TP_SPACE parameters security-name JunosSpace set snmp v3 target-parameters TP_SPACE notify-filter SPACE_TRAP_FILTER set snmp v3 notify SPACE_TRAPS type trap set snmp v3 notify SPACE_TRAPS tag TAG_SPACE set snmp v3 notify-filter SPACE_TRAP_FILTER oid .1 include