Changes between Initial Version and Version 1 of NSM2021/Agenda/SNMP-Hands-on

Timestamp:

May 10, 2021, 11:25:20 AM (5 years ago)

Author:

admin

Comment:

--

NSM2021/Agenda/SNMP-Hands-on

@@ +1 @@
+= SNMP Hands - On =
+
+=== Goals ===
+- Install and learn to use the SNMP commands
+- Install vendor specific MIBs and use those with the SNMP commands
+
+=== Notes ===
+- For below hands-on we will be using Ubuntu 20.04 version.
+- If you are installing snmp client (manager) tools on a remote server/computer you will need to connect the server through a SSH connection.
+
+== Installing SNMP Client (Manager) tools ==
+
+Connect to the server which will be used as the NMS (Network Management Station) and Open the Terminal program.
+
+Update your software package repository
+{{{
+$ sudo apt-get update
+}}}
+This might take a few moments if everyone in class is doing this at the same moment.
+
+Install the net-snmp tools:
+{{{
+$ sudo apt-get install snmp
+$ sudo apt-get install snmp-mibs-downloader
+}}}
+The second of the two commands downloads the standard IETF and IANA SNMP MIBs which are not included by default.
+
+Now, edit the file /etc/snmp/snmp.conf:
+{{{
+$ sudo vi /etc/snmp/snmp.conf
+}}}
+
+Note: Here we are using '''vi''' editor. You can use any text editor you are familiar with
+
+Change this line:
+{{{
+mibs :
+}}}
+
+so that it looks like:
+{{{
+# mibs :
+}}}
+
+(You are "commenting out" the empty mibs statement, which was telling the snmp* tools not to automatically load the mibs in the /usr/share/mibs/ directory)
+
+=== User specific SNMP configurations ===
+Now, in your home directory make a .snmp directory with file snmp.conf inside it, make it readable only be you, and add the credentials to it:
+{{{
+$ cd
+$ mkdir .snmp
+$ chmod 700 .snmp/
+$ vi .snmp/snmp.conf
+}}}
+
+
+Put the following contents in the file:
+{{{
+
+defVersion 3
+
+# SNMP v3 Configurations
+defSecurityLevel authNoPriv
+defSecurityName admin
+defAuthPassphrase <class passowrd>
+defAuthType SHA
+
+# SNMP v2c default community string
+defCommunity <class passowrd>
+
+}}}
+
+== Configuration of SNMP Agent on Routers and Switches ==
+
+==== Cisco ====
+
+connect to your router and go to configure mode.
+{{{
+Router> enable
+
+Router# configure terminal
+}}}
+Now we need to add an Access Control List rule for SNMP access, turn on SNMP, assign a read-only SNMP community string as well as a SNMPv3 group and user and tell the router to maintain SNMP information across reboots. To do this we do:
+{{{
+Router(config)# access-list 99 permit 192.248.6.0 255.255.255.0
+Router(config)# snmp-server community <class passowrd> ro 99
+Router(config)# snmp-server group ReadGroup v3 auth access 99
+Router(config)# snmp-server user admin ReadGroup v3 auth sha <Class Password>
+Router(config)# snmp-server ifindex persist
+Now let's exit and save this new configuration to the routers permanent config.
+
+Router(config)# exit
+Router# write memory            
+Router# exit       
+}}}              
+
+==== HP ====
+Connect to the Router and go to config mode
+{{{
+<Router> system-view
+}}}
+
+Add the following configurations
+{{{
+[Router]acl number 2000
+[Router-acl-basic-2000]rule 0 permit source 192.248.6.0 0.0.0.255
+[Router]snmp-agent
+[Router]snmp-agent community read <class passowrd>
+[Router]snmp-agent sys-info version all
+[Router]snmp-agent group v3 ReadGroup authentication acl 2000
+[Router]snmp-agent usm-user v3 admin ReadGroup authentication-mode sha <class passowrd>
+}}}
+
+== Testing SNMP ==
+Now we have both a SNMP Manager and SNMP Agent. To check that your SNMP installation works, run the snmpstatus command on the SNMP Manager host.
+
+{{{
+$ snmpstatus <IP_ADDRESS> 
+}}}
+Note that you just used was the SNMPv3 because we set the default version as SNMPv3. Try again, adding "-v2c" as a parameter. Notice that the command automatically uses the community string in the snmp.conf file instead of the v3 user credentials. Try "-v1".
+
+To use the SNMP v2 or v1 we can add an option as below. Which will override the settings in the configuration file(/.snmp/snmp.conf).
+
+snmpstatus -v2c <IP_ADDRESS> 
+snmpstatus -v1 <IP_ADDRESS> 
+
+Again we didn't want set Community string as it was set in the manager configuration file.
+
+For the Router,
+{{{
+#snmpstatus <Router IP>
+}}}
+
+For the Switch,
+{{{
+#snmpstatus <Switch IP>
+}}}