Cisco Unified Serviceability Administration Guide Release 9.0(1)
SNMP v3 configuration
Download this chapter
SNMP v3 configurationSNMP v3 configuration
Download the complete book
Cisco Unified Serviceability Administration Guide Release 9.0(1)Cisco Unified Serviceability Administration Guide Release 9.0(1) (PDF - 2 MB)
 Feedback

SNMP v3 configuration

This chapter describes how to configure SNMP v3 so the network management system can monitor Cisco Unified CCX.


Tip

If you use SNMP v1 or v2c, see SNMP v1 and v2c configuration.

This chapter contains the following topics:

Find SNMP User


Tip

The Add New button does not display in the SNMP User Configuration window until you click Find. If no users exist and you want to add a user, click Find and wait for the window to refresh. The Add New button displays.

To find a SNMP user, perform the following procedure:

Procedure
    Step 1   Choose SNMP > V3 > User.

    The SNMP User Configuration window displays.

    Step 2   From the Find User where Name list box, choose the specific search criteria that you want to use to find the user; for example, begins with.
    Step 3   Enter the user name for which you want to search.
    Step 4   From the Server drop-down list box, choose the hostname or IP address of the server where you access the user.
    Step 5   Click Find.

    The Add New button displays. After the search results display, the Apply to All Nodes check box displays.

    Step 6   Unified CM clusters only: If you want to apply the configuration from one of the options in the search results to all nodes in the cluster, check the check box next to the name of the option and check the Apply to All Nodes check box.
    Step 7   From the list of results, click the user that you want to view.
    Step 8   To add or update a user, see Configure SNMP User.

    Configure SNMP User

    To configure users for SNMP, perform the following procedure:

    Procedure
      Step 1   Perform the procedure in Find notification destination for SNMP v3.
      Step 2   Perform one of the following tasks:
      1. To add a new SNMP user, click Add New in the SNMP User Configuration Find/List window and go to step 3.
      2. To modify an existing SNMP user, locate the user, as described in Find notification destination for SNMP v3; click the name of the SNMP user that you want to edit and go to step 3.
      3. To delete an SNMP user, see Delete SNMP user.
      Step 3   Enter the configuration settings, as described in SNMP user configuration settings for v3.
      Tip   

      Before you save the configuration, you can click Clear All at any time to delete all information that you entered for all settings in the window.

      Step 4   To add a new user, click Insert, or click Save to save changes to an existing user.
      Step 5   A message indicates that changes will not take effect until you restart the SNMP master agent. To continue the configuration without restarting the SNMP master agent, click Cancel. To restart the SNMP master agent service, click OK.
      Tip   

      Cisco recommends that you wait until you finish the SNMP configuration before you restart the SNMP master agent service. For information on how to restart the service, see Services configuration.

      Note   

      To access this server that has the user that you configure, make sure that you configure this user on the NMS with the appropriate authentication and privacy settings.

      SNMP user configuration settings

      The table below describes the SNMP user configuration settings for v3.

      Table 1 SNMP user configuration settings for v3

      Field

      Description

      Server

      This setting displays as read only because you specified the server when you performed the procedure in the Find notification destination for SNMP v3.

      To change the server where you want to provide access, perform the procedure in Find SNMP User.

      User Name

      In the field, enter the name of the user for which you want to provide access. The name can contain up to 32 characters and can contain any combination of alphanumeric characters, hyphens (-), and underscore characters (_).

      Tip   

      Enter users that you have already configured for the network management system (NMS).

      For existing SNMP users, this setting displays as read only.

      Authentication Required

      To require authentication, check the check box, enter the password in the Password and Reenter Password fields, and choose the appropriate protocol. The password must contain at least 8 characters.

      Privacy Required

      If you checked the Authentication Required check box, you can specify privacy information. To require privacy, check the check box, enter the password in the Password and Reenter Password fields, and check the protocol check box. The password must contain at least 8 characters.

      Tip    After you check the Privacy Required check box, the DES (Data Encryption Standard) check box automatically appears checked. The DES protocol prevents packets from being disclosed.

      Accept SNMP Packets from any host

      To accept SNMP packets from any host, click the radio button.

      Accept SNMP Packets only from these hosts

      To accept SNMP packets from specific hosts, click the radio button. In the Host IP Address field, enter a host from which you want to accept SNMP packets and click Insert. Repeat this process for each host from which you want to accept SNMP packets. To delete a host, choose that host from the Host IP Addresses pane and click Remove.

      Access Privileges

      From the drop-down list box, choose one of the following options for the access level:

      • ReadOnly—The user can only read the values of MIB objects.
      • ReadWrite—The user can read and write the values of MIB objects.
      • ReadWriteNotify—The user can read and write the values of MIB objects and send MIB object values for a trap messages.
      • NotifyOnly—The user can only send MIB object values for trap messages.
      • ReadNotifyOnly—The user can read values of MIB objects and also send the values for trap messages.
      • None—The user cannot read, write, or send trap information.
        Tip    To change the trap configuration parameters, you need to configure a user with NotifyOnly, ReadNotifyOnly, or ReadWriteNotify privileges.

      Unified CM clusters only:

      Apply To All Nodes

      To apply the user configuration to all nodes in the cluster, check this check box.

      Delete SNMP user

      To delete a user for SNMP, perform the following procedure:

      Procedure
        Step 1   Locate the SNMP user, as described in SNMP user configuration settings for v3.
        Step 2   From the list of matching records, check the check box next to the user that you want to delete.
        Step 3   Click Delete Selected.
        Step 4   A message indicates that the system will delete notification entries that relate to this user. To continue the deletion, click OK.
        Step 5   A message indicates that changes will not take effect until you restart the SNMP master agent. To continue the configuration without restarting the SNMP master agent, click Cancel. To restart the SNMP master agent service, click OK.
        Tip   

        Cisco recommends that you wait until you finish all the SNMP configuration before you restart the SNMP master agent service. For information on how to restart the service, see Services configuration.

        After the window refreshes, the user that you deleted no longer displays in the results.

        Find notification destination for SNMP v3


        Tip

        The Add New button does not display in the SNMP Notification Destination Configuration window until you click Find. If no users exist and you want to add want a user, click Find and wait for the window to refresh. The Add New button displays.

        To find a notification destination for V3, perform the following procedure:

        Procedure
          Step 1   Choose SNMP > V3 > Notification Destination.
          Step 2   From the Find Notification where Destination IP drop-down list box, choose the specific search criteria that you want to use to find the notification destination; for example, begins with.
          Step 3   Enter the IP address/hostname of notification destination for which you want to search.
          Step 4   In the Server field, choose the hostname or IP address of the server that supports the notification destination.
          Step 5   Click Find.

          The Add New button displays. After the search results display, the Apply to All Nodes check box displays.

          Step 6   Unified CM clusters only: If you want to apply the configuration from one of the options in the search results to all nodes in the cluster, check the check box next to the name of the option and check the Apply to All Nodes check box.
          Step 7   From the list of results, click the notification destination that you want to view.
          Step 8   To add or update a notification destination, see Configure notification destination for SNMP v3.

          Configure notification destination for SNMP v3

          To configure the trap receiver, perform the following procedure:

          Procedure
            Step 1   Perform the procedure in the Find notification destination for SNMP v3.
            Step 2   Perform one of the following tasks:
            1. To add a new SNMP notification destination, click Add New in the search results window and go to step 3.
            2. To modify an existing SNMP notification destination, locate the notification destination in the search results window; click the name of the SNMP notification destination that you want to edit and go to step 3.
            3. To delete an SNMP notification destination, see Delete notification destination for SNMP v3.
            Step 3   Configure the settings, as described in notification destination configuration settings for v3.
            Tip   

            Before you save the configuration, you can click Clear at any time to delete all information that you entered for all settings in the window.

            Step 4   To save a notification destination, click Insert, or click Save to save changes to an existing notification destination.
            Step 5   A message indicates that changes will not take effect until you restart the SNMP master agent. To continue the configuration without restarting the SNMP master agent, click Cancel. To restart the SNMP master agent service, click OK.
            Tip   

            Cisco recommends that you wait until you finish the SNMP configuration before you restart the SNMP master agent service. For information on how to restart the service, see Services configuration.

            Notification destination configuration settings for SNMP v3

            The table below describes the notification destination configuration settings for v3.

            Table 2 notification destination configuration settings for v3

            Field

            Description

            Server

            This setting displays as read only because you specified the server when you performed the procedure in the Find notification destination for SNMP v3.

            To change the server for the notification destination, perform the procedure in the Find notification destination for SNMP v3.

            Host IP Addresses

            From the drop-down list box, choose the Host IP address or choose Add New. If you chose Add New, enter the IP address for the host.

            Port Number

            In the field, enter the notification-receiving port number on the destination server.

            Notification Type

            From the drop-down list box, choose Trap.

            Remote SNMP Engine Id

            This setting displays if you chose Inform from the Notification Type drop-down list box.

            From the drop-down list box, choose the engine ID or choose Add New. If you chose Add New, enter the ID in the Remote SNMP Engine Id field, which requires a hexidecimal value.

            Security Level

            From the drop-down list box, choose the appropriate security level for the user.

            • noAuthNoPriv—No authentication or privacy configured.
            • authNoPriv—Authentication configured, but no privacy configured.
            • authPriv—Authentication and privacy configured.

            User Information pane

            From the pane, perform one of the following tasks to associate or disassociate the notification destination with the user.

            1. To create a new user, click Create New User and see the Configure SNMP User.
            2. To modify an existing user, click the radio button for the user and click Update Selected User; then, see the Configure SNMP User.
            3. To delete a user, click the radio button for the user and click Delete Selected User.

            The users that display vary depending on the security level that you configured for the notification destination.

            Unified CM clusters only:

            Apply To All Nodes

            To apply the notification destination configuration to all nodes in the cluster, check this check box.

            Delete notification destination for SNMP v3

            To delete a notification destination, perform the following procedure:

            Procedure
              Step 1   Locate the SNMP notification destination, as described in the Find notification destination for SNMP v3.
              Step 2   From the list of matching records, check the check box next to the notification destination that you want to delete.
              Step 3   Click Delete Selected.
              Step 4   A message asks you if you want to delete the notification destination. To continue the deletion, click OK.
              Step 5   A message indicates that changes will not take effect until you restart the SNMP master agent. To continue the configuration without restarting the SNMP master agent, click Cancel. To restart the SNMP master agent service, click OK.
              Tip   

              Cisco recommends that you wait until you finish all the SNMP configuration before you restart the SNMP master agent service. For information on how to restart the service, see Services configuration.

              After the window refreshes, the notification destination that you deleted no longer displays in the search results window.