Cisco MGX 8800/8900 Series Software Configuration Guide Release 5.5.00

Book Contents

Find Matches in This Book

Available Languages

Download Options

Book Title

Cisco MGX 8800/8900 Series Software Configuration Guide Release 5.5.00

Chapter Title

snmpv3.fm

PDF - Complete Book (7.66 MB) PDF - This Chapter (551.0 KB)
View with Adobe Reader on a variety of devices

Results

Chapter: snmpv3.fm

Quickstart for SNMP Server Configuration
Configuring SNMP Server
- Configuring SNMP-Server Model
- Configuring SNMP-Server Views
- Configuring SNMP-Server Groups
- Configuring SNMP-Server Users
- Configuring SNMP Users and Groups
- Configuring SNMP Trap Managers
  - Adding SNMPv3 Trap Managers
  - Displaying Trap Managers
- Monitoring SNMPv3 Server
Command Reference
addsnmpgroup
addsnmpuser
addsnmpusergroup
addsnmpview
addtrapmgrparams
addv3trapmgr
cnfsnmpgroup
cnfsnmpmode
cnfsnmpuser
delsnmpgroup
delsnmpuser
delsnmpusergroup
delsnmpview
deltrapmgrparams
delv3trapmgr
dspsnmpctx
dspsnmpgroup
dspsnmpgroups
dspsnmpmode
dspsnmpMPDStats
dspsnmpusers
dspsnmpusergroups
dspsnmpUSMStats
dspsnmpview
dspsnmpviews
dsptrapmgrparams
dspv3trapmgr
dspv3trapmgrs

SNMP V3

Simple Network Management Protocol Version 3 (SNMPv3) is an standards-based protocol for network management.

SNMPv3 provides secure access to devices using a combination of authentication and encryption of packets over the network. This assures that data can be collected securely from SNMP devices and configuration messages cannot be viewed or altered.

The security features provided in SNMPv3 are:

•Message integrity—Ensuring that a packet has not been tampered with in-transit.

•Authentication—Determining that the message is from a valid source.

•Encryption—Scrambling the contents of a packet to prevent it from being seen by an unauthorized source.

SNMPv3 provides for security models and security levels. A security model is an authentication strategy that is set up for a user and the group in which the user resides. A security level is the permitted level of security within a security model.

A combination of a security model and a security level determine which security mechanism is employed when handling an SNMP packet. Table 10-1 lists the combinations of security models and levels supported:

Table 10-1 Supported SNMP Security Models and Levels
Model	Level	Authentication	Encryption	What Happens
v1	noAuthNoPriv	Community string	No	Uses a community string match for authentication.
v3	noAuthNoPriv	Username	No	Uses a username match for authentication.
v3	authNoPriv	MD5 or SHA	No	Provides authentication based on the HMAC-MD5 or HMAC-SHA algorithms.
v3	authPriv	MD5 or SHA	DES, 3DES, or AES	Provides authentication based on the HMAC-MD5 or HMAC-SHA algorithms, encrypted with DES (Data Encryption Standard), 3DES, or AES (Advanced Encryption Standard) algorithms.

SNMPv3 users and groups have the following characteristics:

•Each user belongs to a group.

•A group defines the security model and security level for its users.

•A group defines the access policy (view) for its users. An access policy defines the SNMP objects that can be accessed for reading or writing.

•A group determines the list of notifications its users can receive.

Quickstart for SNMP Server Configuration

The quickstart procedure provides an overview and quick reference for those who have already configured SNMPv3 on Cisco MGX switches.


	Command	Purpose
Step 1	cnfsnmpmode <snmpMode>	Configures the SNMP server security model. See the Configuring SNMP-Server Model.
Step 2	addsnmpview <viewName> <subTree> <mask> <type>	Adds SNMP views. See Configuring SNMP-Server Views.
Step 3	addsnmpgroup <groupName> <securityModel> <securityLevel> [-read <readview>] [-write <writeview>] [-notify <notifyview>]	Adds SNMP server groups. See Configuring SNMP-Server Groups.
Step 4	addsnmpuser <userName> <authProtocol> <privProtocol>	Adds SNMP server users. See Configuring SNMP-Server Users.
Step 5	addsnmpusergroup <userName> <securityModel> <groupName>	Adds SNMP user s to groups. See Configuring SNMP Users and Groups.
Step 6	addtrapmgrparams <managerparamsname> <SnmpMessageProcessingModel> <Securityname> <SnmpSecurityLevel> addv3trapmgr <managername> <ipaddress> <portnum> <managerparamsname>	Configures SNMP notifications. See Configuring SNMP Trap Managers.

Configuring SNMP Server

This section provides procedures for configuring the SNMPv3 server.

Configuring SNMP-Server Model

To configure the SNMP security model, use the following procedure.

Step 1 Establish a configuration session using a user name with SUPER_GP privileges or higher.

Step 2 To configure the SNMP security model, enter the cnfsnmpmode command:

mgx8850a.7.PXM.a > cnfsnmpmode <snmpMode>

Table 10-2 describes the parameters for this command.

Table 10-2 Parameter Description for cnfsnmpmode Command on the PXM
Parameter	Descriptions
snmpMode	The SNMP security model: •1—SNMP v1, all operations (read/write) are allowed for both SNMPv1 requests and SNMPv3 requests. •2—SNMPv3, read/write operations are allowed only for SNMPv3 requests. Read-only operations are allowed for SNMPv1 requests. •3—SNMPv3 fully secured, SNMPv3 requests are allowed (authNoPriv and authPriv) and all SNMPv1 requests are blocked. Default: 1

Step 3 Verify the configuration by entering the dspsnmpmode command:

mgx8850a.7.PXM.a > dspsnmpmode

V1 mode - all operations allowed

Configuring SNMP-Server Views

This section describes how to add, delete, and display SNMP views.

Adding Views

To add SNMP views, use the following procedure.

Step 1 Establish a configuration session using a user name with SUPER_GP privileges or higher.

Step 2 To add an SNMP view, enter the addsnmpview command:

mgx8850a.7.PXM.a > addsnmpview <viewName> <subTree> <mask> <type>

Table 10-3 describes the parameters for this command.

Table 10-3 Parameter Description for addsnmpview Command on the PXM
Parameter	Descriptions
viewName	The name of the MIB view. Range: 1 to 32 characters
subTree	The OID subtree of the MIB view. Defines one or more view subtrees, when combined with the mask parameter.
mask	The OID subtree mask. Defines one or more view subtrees, when combined with the subTree parameter.
type	The access type for the view subtree: •included •excluded

Step 3 Verify the configuration by entering the dspsnmpview command:

mgx8850a.7.PXM.a > dspsnmpview <viewName>

Deleting Views

To delete an SNMP view, enter the delsnmpview <viewName> <subTree> command. Table 10-3 describes the parameter for this command.

Displaying Views

To display SNMP views, enter the dspsnmpview <viewName> or dspsnmpviews command. Table 10-3 describes the dspsnmpview parameter.

Configuring SNMP-Server Groups

This section describes how to configure SNMP groups.

Adding Groups

To add SNMP groups, use the following procedure.

Step 1 Establish a configuration session using a user name with SUPER_GP privileges or higher.

Step 2 To add an SNMP group, enter the addsnmpgroup command:

mgx8850a.7.PXM.a > addsnmpgroup <groupName> <securityModel> <securityLevel> [-read <readview>] [-write <writeview>] [-notify <notifyview>]

Table 10-4 describes the parameters for this command.

Table 10-4 Parameter Description for addsnmpgroup Command on the PXM
Parameter	Descriptions
groupName	The name of the group. Range: 1 to 32 characters
securityModel	The SNMP security model for the group: •1—snmpv1 •3—usm (snmpv3)
securityLevel	The SNMP security level for the group: •1—noAuthNoPriv •2—authNoPriv •3—authPriv Note For security model 1, the security level must be 1
-read	The SNMP view for read access. To display all views, enter dspsnmpviews.
-write	The SNMP view for write access. To display all views, enter dspsnmpviews.
-notify	The SNMP view for notification. The notify value should be a string with less than 33 characters.

Step 3 Verify the configuration by entering the dspsnmpgroup command:

mgx8850a.7.PXM.a > dspsnmpgroup <groupName>

Changing Groups

To reconfigure SNMP groups, use the following procedure.

Step 1 Establish a configuration session using a user name with SUPER_GP privileges or higher.

Step 2 To change an SNMP group, enter the cnfsnmpgroup command:

mgx8850a.7.PXM.a > cnfsnmpgroup <groupName> <securityModel> <securityLevel> [-read <readview>] [-write <writeview>]

Table 10-4 describes the parameters for this command.

Step 3 Verify the configuration by entering the dspsnmpgroup command:

mgx8850a.7.PXM.a > dspsnmpgroup <groupName>

Deleting Groups

To delete an SNMP view, enter the delsnmpgroup <groupName> <securityModel> <securityLevel> command. Table 10-4 describes the parameter for this command.

Displaying Groups

To display SNMP groups, enter the dspsnmpgroup <groupName> or dspsnmpgroups command. Table 10-4 describes the dspsnmpgroup parameter.

Configuring SNMP-Server Users

This section describes how to configure SNMP users.

Adding Users

To add SNMP users, use the following procedure.

Step 1 Establish a configuration session using a user name with SUPER_GP privileges or higher.

Step 2 To add an SNMP user, enter the addsnmpuser command:

mgx8850a.7.PXM.a > addsnmpuser <userName> <authProtocol> <privProtocol>

Table 10-5 describes the parameters for this command.

Table 10-5 Parameter Description for addsnmpuser Command on the PXM
Parameter	Descriptions
userName	The name of the user. Range: 5 to 12 characters
authProtocol	The authentication protocol: •1—NoAuth •2—MD5 •3—SHA
privProtocol	The privacy protocol: •1—NoPriv •2—DES •3—3DES •4—AES

Step 3 Verify the configuration by entering the dspsnmpusers command:

mgx8850a.7.PXM.a > dspsnmpusers <userName>

Changing Users

To reconfigure SNMP users, use the following procedure.

Step 1 Establish a configuration session using a user name with SUPER_GP privileges or higher.

Step 2 To change an SNMP user, enter the cnfsnmpuser command:

mgx8850a.7.PXM.a > cnfsnmpuser <userName> <authProtocol> <privProtocol>

Table 10-5 describes the parameters for this command.

Step 3 Verify the configuration by entering the dspsnmpusers command:

mgx8850a.7.PXM.a > dspsnmpusers <userName>

Deleting Users

To delete an SNMP user, enter the delsnmpuser <userName> command. Table 10-5 describes the parameter for this command.

Displaying Users

To display SNMP users, enter the dspsnmpusers <userName> or dspsnmpusers command. Table 10-5 describes the dspsnmpusers parameter.

Configuring SNMP Users and Groups

This section describes how to associate SNMP users with groups.

Adding Users to Groups

To add an SNMP user to a group, use the following procedure.

Step 1 Establish a configuration session using a user name with SUPER_GP privileges or higher.

Step 2 To add an SNMP user, enter the addsnmpusergroup command:

mgx8850a.7.PXM.a > addsnmpusergroup <userName> <securityModel> <groupName>

Table 10-6 describes the parameters for this command.

Table 10-6 Parameter Description for addsnmpusergroup Command on the PXM
Parameter	Descriptions
userName	The name of a user. To display all users, enter dspsnmpusers.
securityModel	The SNMP security model for the group: •1—snmpv1 •3—usm (snmpv3)
groupName	The name of a group. To display all groups, enter dspsnmpgroups.

Step 3 Verify the configuration by entering the dspsnmpusergroups command:

mgx8850a.7.PXM.a > dspsnmpusergroups

Deleting Users from Groups

To delete an SNMP user from a group, enter the delsnmpusergroup <userName> <securityModel> command. Table 10-6 describes the parameter for this command.

Displaying Users and Groups

To display SNMP users and their groups, enter the dspsnmpusergroups command.

Configuring SNMP Trap Managers

This section describes how to configure SNMPv3 trap managers.

Adding SNMPv3 Trap Managers

To add an SNMPv3 trap manager, use the following procedure.

Step 1 Establish a configuration session using a user name with SUPER_GP privileges or higher.

Step 2 To define trap manager parameters, enter the addtrapmgrparams command:

mgx8850a.7.PXM.a > addtrapmgrparams <paramsname> <snmpMessageProcessingModel> <securityName> <securityLevel>

Table 10-7 describes the parameters for this command.

Table 10-7 Parameter Description for addtrapmgrparams Command on the PXM
Parameter	Descriptions
paramsname	The name of the trap manager parameter. Range: 1-32 characters.
snmpMessageProcessingModel	The SNMP message processing model: •0—SNMPv1 •1—SNMPv2c •3—SNMPv3
securityName	The SNMP security name. Range: 1-32 characters.
securityLevel	The SNMP security •1—noAuthNoPriv •2—authNoPriv •3—authPriv

Step 3 To add a trap manager, enter the addv3trapmgrcommand:

mgx8850a.7.PXM.a > addv3trapmgr <managername> <ipaddress> <portnum> <paramsname>

Table 10-8 describes the parameters for this command.

Table 10-8 Parameter Description for addv3trapmgr Command on the PXM
Parameter	Descriptions
managername	The name of the trap manager. Range: 1 to 32 characters
ipaddress	The IP address of a management host, using standard IP notation
portnum	The TCP port number of a management host. Range: 0 and 65535
paramsname	The name of the a trap manager parameters to apply.

Step 4 Verify the configuration by entering the dspv3trapmgr command:

mgx8850a.7.PXM.a > dspv3trapmgr <manager_name>

Displaying Trap Managers

To display trap managers, enter the dspv3trapmgr <manager_name> or dspv3trapmgrs command. Table 10-8 describes the parameters for the dspv3trapmgr command.

Monitoring SNMPv3 Server

To display Message Processing and Dispatching (MPD) and User-based Security Model (USM) statistics, enter the dspsnmpMPDStats and dspsnmpUSMStats commands, respectively.

Command Reference

This section describes the following SNMP commands.

•addsnmpuser

•addsnmpview

•cnfsnmpmode

•cnfsnmpuser

•delsnmpuser

•delsnmpview

•dspsnmpctx

•dspsnmpmode

•dspsnmpview

addsnmpgroup

Add SNMP Group—PXM45, PXM1E

The addsnmpgroup command adds an SNMP group.

Note Before adding an SNMP group, you must define SNMP views for read/write/notify access.

Syntax

addsnmpgroup <groupName> <securityModel> <securityLevel> [-read <readview>] [-write <writeview>] [-notify <notifyview>]

Syntax Description


groupName	The name of the group. Range: 1 to 32 characters.
securityModel	The SNMP security model for the group: •1—snmpv1 •3—usm (snmpv3)
securityLevel	The SNMP security level for the group: •1—noAuthNoPriv •2—authNoPriv •3—authPriv Note For security model 1, the security level must be 1
-read	The SNMP view for read access. To display all views, enter dspsnmpviews.
-write	The SNMP view for write access. To display all views, enter dspsnmpviews.
-notify	The SNMP view for notification. The notify value should be a string with less than 33 characters.

Related Commands

cnfsnmpgroup, delsnmpgroup, dspsnmpgroup, dspsnmpgroups

Attributes


Log: no	State: active	Privilege: SUPER_GP

Example

Add an SNMP group named View1 with security model 3 and security level 3.

M8850_SF.7.PXM.a > addsnmpgroup Group1 3 3 -read View1

addsnmpuser

Add SNMP User—PXM45, PXM1E

The addsnmpuser command adds an SNMP user. This command prompts for a password, which must be from 5 to 15 characters. The default user is cisco.

Syntax

addsnmpuser <userName> <authProtocol> <privProtocol>

Syntax Description


userName	The name of the user. Range: 5 to 12 characters.
authProtocol	The authentication protocol: •1—NoAuth •2—MD5 •3—SHA
privProtocol	The privacy protocol: •1—NoPriv •2—DES •3—3DES •4—AES

Related Commands

cnfsnmpuser, delsnmpuser, dspsnmpusers

Attributes


Log: yes	State: active	Privilege: SUPER_GP

Example

Add an SNMP user named User1 with authentication protocol 3 and privacy protocol 4.

M8850_SF.7.PXM.a > addsnmpuser User1 3 4

Enter the Auth password:

Re-enter new password:

Enter the Priv password:

Re-enter new password:

addsnmpusergroup

Add User to Group—PXM45, PXM1E

The addsnmpusergroup command adds an SNMP user to an SNMP group.

Note Before adding an SNMP users to a group, you must define the corresponding SNMP user and SNMP group.

Syntax

addsnmpusergroup <userName> <securityModel> <groupName>

Syntax Description


userName	The name of a user. To display all users, enter dspsnmpusrs.
securityModel	The SNMP security model for the group: •1—snmpv1 •3—usm (snmpv3)
groupName	The name of a group. To display all groups, enter dspsnmpgroups.

Related Commands

delsnmpusergroup, dspsnmpusergroups

Attributes


Log: yes	State: active	Privilege: SUPER_GP

Example

Add the user named User1 to the group named Group1.

M8850_SF.7.PXM.a > addsnmpusergroup User1 3 Group1

addsnmpview

Add SNMP View—PXM45, PXM1E

The addsnmpview command adds an SNMP view.

Syntax

addsnmpview <viewName> <subTree> <mask> <type>

Syntax Description


viewName	The name of the MIB view. Range: 1 to 32 characters.
subTree	The OID subtree of the MIB view. Defines one or more view subtrees, when combined with the mask parameter. Format: n.n..., where n is a decimal.
mask	The OID subtree mask. Defines one or more view subtrees, when combined with the subTree parameter. Format aa:aa..., where a is a hexadecimal digit.
type	The access type for the view subtree: •1—included •2—excluded

Related Commands

delsnmpview, dspsnmpview, dspsnmpviews

Attributes


Log: yes	State: active	Privilege: SUPER_GP

Example

Add an SNMP view named View1 for subtree 1.3.6.1.2.1 with mask F0 and type 1 (included).

M8850_SF.7.PXM.a > addsnmpview View1 1.3.6.1.2.1 f0 1

addtrapmgrparams

Add SNMP Trap Manager Parameters—PXM45, PXM1E

The addtrapmgrparams command configures SNMP trap manager parameters.

Syntax

addtrapmgrparams <paramsname> <snmpMessageProcessingModel> <securityName> <securityLevel>

Syntax Description


paramsname	The name of the trap manager parameter. Range: 1-32 characters.
snmpMessageProcessingModel	The SNMP message processing model: •0—SNMPv1 •1—SNMPv2c •3—SNMPv3
securityName	The SNMP security name. Range: 1-32 characters.
securityLevel	1—noAuthNoPriv 2—authNoPriv 3—authPriv

Related Commands

addv3trapmgr, deltrapmgrparams, dsptrapmgrparams

Attributes


Log: yes	State: active	Privilege: SUPER_GP

Example

Add trap manager parameter named Params1 for SNMPv3 and security level 3.

M8850_SF.7.PXM.a > addtrapmgrparams Params1 3 trapCommunity 3

addv3trapmgr

Add SNMPv3 Trap Manager—PXM45, PXM1E

The addv3trapmgr command adds an SNMPv3 trap manager.

Note Before adding an SNMPv3 trap manager, you must define SNMP trap manager parameters.

Syntax

addv3trapmgr <managername> <ipaddress> <portnum> <paramsname>

Syntax Description


managername	The name of the trap manager. Range: 1 to 32 characters.
ipaddress	The IP address of a management host, using standard IP notation.
portnum	The TCP port number of a management host. Range: 0 and 65535.
paramsname	The name of the a trap manager parameters to apply.

Related Commands

delv3trapmgr, dspv3trapmgr, dspv3trapmgrs

Attributes


Log: yes	State: active	Privilege: SUPER_GP

Example

Add an SNMPv3 trap manager named V3Trap1 for the host at 10.10.10.150:9910 using Params1.

M8850_SF.7.PXM.a > addv3trapmgr V3Trap1 10.10.10.150 9910 Params1

cnfsnmpgroup

Configure SNMP Group—PXM45, PXM1E

The cnfsnmpgroup command configures an SNMP group.

Syntax

cnfsnmpgroup <groupName> <securityModel> <securityLevel> [-read <readview>] [-write <writeview>]

Syntax Description


groupName	The name of the group to configure. To view all groups, enter dspsnmpgroups.
securityModel	The SNMP security model for the group: •1—snmpv1 •3—usm (snmpv3)
securityLevel	The SNMP security level for the group: •1—noAuthNoPriv •2—authNoPriv •3—authPriv
-read	The SNMP view for which the group has read access. Range: 1 to 32 characters.
-write	The SNMP view for which the group has write access. Range: 1 to 32 characters.

Related Commands

addsnmpgroup, delsnmpgroup, dspsnmpgroup, dspsnmpgroups

Attributes


Log: no	State: active	Privilege: SUPER_GP

Example

Configure the SNMP group named Group1 with security model 3 and security level 3, specifying read access for View1.

M8850_SF.7.PXM.a > cnfsnmpgroup Group1 3 3 -read View1

cnfsnmpmode

Configure SNMP Mode—PXM45, PXM1E

The cnfsnmpmode command configures the SNMP operational mode.

Syntax

cnfsnmpmode <snmpMode>

Syntax Description


snmpMode	The SNMP operational mode: •1—SNMP v1 mode, all operations (read/write) are allowed for both SNMPv1 requests and SNMPv3 requests. •2—SNMPv3 mode, read/write operations are allowed only for SNMPv3 requests. Read-only operations are allowed for SNMPv1 requests. •3—SNMPv3 fully secured mode, SNMPv3 requests are allowed (authNoPriv and authPriv) but all SNMPv1 requests are blocked. Default: 1

Related Commands

dspsnmpmode

Attributes


Log: yes	State: active	Privilege: SUPER_GP

Example

Configure the full-secured SNMPv3 mode.

M8850_SF.7.PXM.a > cnfsnmpmode 3

Mode is changed to Secured Mode. Unsecured queries blocked

cnfsnmpuser

Configure SNMP User—PXM45, PXM1E

The cnfsnmpuser command configures an SNMP user.

Syntax

cnfsnmpuser <userName> <authProtocol> <privProtocol>]

Syntax Description


userName	The name of the user. To display all users, enter dspsnmpusers.
authProtocol	The authentication protocol: •1—NoAuth •2—MD5 •3—SHA
privProtocol	The privacy protocol: •1—NoPriv •2—DES •3—3DES •4—AES

Related Commands

addsnmpuser, delsnmpuser, dspsnmpusers

Attributes


Log: yes	State: active	Privilege: SUPER_GP

Example

Configure the SNMP user named User1 with security model 3 and security level 3.

M8850_SF.7.PXM.a > cnfsnmpusers User1 3 3

Enter the Auth password:

Re-enter new password:

Enter the Priv password:

Re-enter new password:

delsnmpgroup

Delete SNMP Group—PXM45, PXM1E

The delsnmpgroup command deletes an SNMP group.

Syntax

delsnmpgroup <groupName> <securityModel> <securityLevel>

Syntax Description


groupName	The name of the group to configure. To view all groups, enter dspsnmpgroups.
securityModel	The SNMP security model for the group: •1—snmpv1 •3—usm (snmpv3)
securityLevel	The SNMP security level for the group: •1—noAuthNoPriv •2—authNoPriv •3—authPriv

Related Commands

addsnmpgroup, cnfsnmpgroup, dspsnmpgroup, dspsnmpgroups

Attributes


Log: yes	State: active	Privilege: SUPER_GP

Example

Delete the SNMP group named Group1 with security model 3 and security level 3.

M8850_SF.7.PXM.a > delsnmpgroup Group1 3 3

delsnmpuser

Delete SNMP User—PXM45, PXM1E

The delsnmpuser command deletes an SNMP user.

Syntax

delsnmpuser <userName>

Syntax Description


userName	The name of the user. To display all users, enter dspsnmpusers.

Related Commands

addsnmpuser, cnfsnmpuser, dspsnmpusers

Attributes


Log: yes	State: active	Privilege: SUPER_GP

Example

Delete the SNMP user named User1.

M8850_SF.7.PXM.a > delsnmpuser User1

delsnmpusergroup

Delete User from Group—PXM45, PXM1E

The delsnmpusergroup command deletes an SNMP user from an SNMP group.

Syntax

delsnmpusergroup <userName> <securityModel>

Syntax Description


userName	The user name. For a list of users and their groups, enter dspsnmpusergroups.
securityModel	The SNMP security model for the group: •1—snmpv1 •3—usm (snmpv3)

Related Commands

addsnmpusergroup, dspsnmpusergroups

Attributes


Log: yes	State: active	Privilege: SUPER_GP

Example

Delete the user User1 from the group named Group1.

M8850_SF.7.PXM.a > delsnmpusergroup User1 3

delsnmpview

Delete an SNMP View—PXM45, PXM1E

The delsnmpview command deletes an SNMP view.

Syntax

delsnmpview <viewName> <subTree>

Syntax Description


viewName	The name of the MIB view. To display all views, enter dspsnmpviews.
subTree	The OID subtree of the MIB view.

Related Commands

addsnmpview, dspsnmpview, dspsnmpviews

Attributes


Log: yes	State: active	Privilege: SUPER_GP

Example

Delete the SNMP view named View1 for subtree 1.3.6.1.1.2.1.

M8850_SF.7.PXM.a > delsnmpview View1 1.3.6.1.2.1

deltrapmgrparams

Delete SNMP Trap Manager—PXM45, PXM1E

The deltrapmgrparams command deletes SNMP trap manager parameters.

Syntax

deltrapmgrparams <paramsname>

Syntax Description


paramsname	The name of the trap manager parameter.

Related Commands

addtrapmgrparams, dsptrapmgrparams

Attributes


Log: yes	State: active	Privilege: SUPER_GP

Example

Delete the SNMP trap manager parameters named Params1.

M8850_SF.7.PXM.a > deltrapmgrparams Params1

delv3trapmgr

Delete SNMPv3 Trap Manager—PXM45, PXM1E

The delv3trapmgr command deletes an SNMPv3 trap manager.

Syntax

delv3trapmgr <managername>]

Syntax Description


managername	The name of the trap manager. To display all trap managers, enter dspv3trapmgrs.

Related Commands

addv3trapmgr, dspv3trapmgr, dspv3trapmgrs

Attributes


Log: yes	State: active	Privilege: SUPER_GP

Example

Delete the SNMPv3 trap manager named Trap1.

M8850_SF.7.PXM.a > delv3trapmgr Trap1

dspsnmpctx

Display SNMP Context—PXM45, PXM1E

The dspsnmpxtx command displays the SNMP context.

Syntax

dspsnmpctx

Related Commands

dspsnmpMPDStats

Attributes


Log: no	State: active	Privilege: ANYUSER

Example

Display the SNMP context.

M8850_SF.7.PXM.a > dspsnmpctx

          vacmContextName

    --------------------------------

    public

dspsnmpgroup

Display SNMP Group—PXM45, PXM1E

The dspsnmpgroup command displays an SNMP group.

Syntax

dspsnmpgroup <groupName>

Syntax Description


groupName	The name of the group to display. To view all groups, enter dspsnmpgroups.

Related Commands

addsnmpgroup, cnfsnmpgroup, delsnmpgroup, dspsnmpgroups

Attributes


Log: no	State: active	Privilege: ANYUSER

Example

Display the SNMP group named Group1.

M8850_SF.7.PXM.a > dspsnmpgroup Group1

Group Name : Group1

Context Name :

Security Model : SNMPV3 (USM)

Security Level : AuthPriv

Read View Name : View1

Write View Name :

dspsnmpgroups

Display all SNMP Groups—PXM45, PXM1E

The dspsnmpgroups command displays all SNMP groups.

Syntax

dspsnmpgroups

Related Commands

addsnmpgroup, cnfsnmpgroup, delsnmpgroup, dspsnmpgroup

Attributes


Log: no	State: active	Privilege: ANYUSER

Example

Display all SNMP groups.

M8850_SF.7.PXM.a > dspsnmpgroups

            GroupName               SecurityModel     SecurityLevel

 -------------------------------- ----------------- -----------------

 Group1                             SNMPV3              AuthPriv

 public                             SNMPV1              NoAuthNoPriv

 private                            SNMPV1              NoAuthNoPriv

 cisco_group                        SNMPV3              AuthPriv

dspsnmpmode

Display SNMP Mode—PXM45, PXM1E

The dspsnmpmode command displays the SNMP security mode.

Syntax

dspsnmpmode

Related Commands

cnfsnmpmode

Attributes


Log: no	State: active	Privilege: ANYUSER

Example

Display the SNMP security mode.

M8850_SF.7.PXM.a > dspsnmpmode

Fully Secured Mode - Unsecured operations blocked

dspsnmpMPDStats

Display SNMP MPD Stats—PXM45, PXM1E

The dspsnmpMPDStats command displays the SNMP Message Processing and Dispatching (MPD) statistics.

Syntax

dspsnmpMPDStats

Related Commands

dspsnmpUSMStats

Attributes


Log: no	State: active	Privilege: ANYUSER

Example

Display the SNMP MPD statistics.

M8850_SF.7.PXM.a > dspsnmpMPDStats

     snmpUnknownSecurityModels      :  0

     snmpInvalidMsgs                :  0

     snmpUnknownPDUHandlers         :  0

dspsnmpusers

Display all SNMP Users—PXM45, PXM1E

The dspsnmpusers command displays all SNMP users.

Syntax

dspsnmpusers

Related Commands

addsnmpuser, cnfsnmpuser, delsnmpuser

Attributes


Log: no	State: active	Privilege: ANYUSER

Example

Display all SNMP users.

M8850_SF.7.PXM.a > dspsnmpusers

           UserName              AuthProto  PrivProto

------------------------------- ----------- ----------

User1                             SHA           3DES

cisco                             MD5           DES

dspsnmpusergroups

Display all SNMP Groups—PXM45, PXM1E

The dspsnmpusergroups command displays all SNMP users and their group.

Syntax

dspsnmpusergroups

Related Commands

addsnmpusergroup, delsnmpusergroup

Attributes


Log: no	State: active	Privilege: ANYUSER

Example

Display all SNMP users and their groups.

M8850_SF.7.PXM.a > dspsnmpusergroups

           UserName              SNMP MODEL              GroupName

------------------------------- -----------  -------------------------------

User1                            SNMPV3(USM)    Group1

dspsnmpUSMStats

Display SNMP USM Stats—PXM45, PXM1E

The dspsnmpUSMStats command displays the SNMP User-based Security Model (USM) statistics.

Syntax

dspsnmpUSMStats

Related Commands

dspsnmpMPDStats

Attributes


Log: no	State: active	Privilege: ANYUSER

Example

Display the SNMP MPD statistics.

M8850_SF.7.PXM.a > dspsnmpUSMStats

     usmStatsUnsupportedSecLevels   :  0

     usmStatsNotInTimeWindow        :  0

     usmStatsUnknownUserNames       :  0

     usmStatsUnknownEngineIds       :  1

     usmStatsWrongDigests           :  0

     usmStatsDecryptErrors          :  0

dspsnmpview

Display an SNMP View—PXM45, PXM1E

The dspsnmpview command displays an SNMP view.

Syntax

dspsnmpview <viewName>

Syntax Description


viewName	The name of the MIB view. To display all views, enter dspsnmpviews.

Related Commands

addsnmpview, delsnmpview, dspsnmpviews

Attributes


Log: no	State: active	Privilege: ANYUSER

Example

Display the SNMP view named View1.

M8850_SF.7.PXM.a > dspsnmpview View1

    View Name         : View1

    OID               : mib_2

    SubtreeMask       : f0

    ViewType          : included

dspsnmpviews

Display all SNMP Views—PXM45, PXM1E

The dspsnmpviews command displays all SNMP views.

Syntax

dspsnmpviews

Related Commands

addsnmpview, delsnmpview, dspsnmpview

Attributes


Log: no	State: active	Privilege: ANYUSER

Example

Display all SNMP views.

M8850_SF.7.PXM.a > dspsnmpviews

    View Name         : ALL

    OID               : iso

    SubtreeMask       :

    ViewType          : included

    View Name         : View1

    OID               : mib_2

    SubtreeMask       : f0

    ViewType          : included

...

dsptrapmgrparams

Display SNMP Trap Manager Parameters—PXM45, PXM1E

The dsptrapmgrparams command displays all SNMPv3 trap manager parameters.

Syntax

dsptrapmgrparams

Related Commands

addtrapmgrparams, deltrapmgrparams

Attributes


Log: no	State: active	Privilege: ANYUSER

Example

Display all SNMPv3 trap manager parameters.

M8850_SF.7.PXM.a > dsptrapmgrparams

    ParamsName        : Params1

    MPModel           : SNMPv3

    SecurityModel     : SNMPv3(USM)

    SecurityName      : trapCommunity

    SecurityLevel     : authPriv

    ParamsName        : public

    MPModel           : SNMPv1

    SecurityModel     : SNMPv1

    SecurityName      : trapCommunity

dspv3trapmgr

Display SNMPv3 Trap Manager—PXM45, PXM1E

The dspv3trapmgr command displays an SNMPv3 trap manager.

Syntax

dspv3trapmgr <manager_name>

Syntax Description


managername	The name of the trap manager. To display all trap managers, enter dspv3trapmgrs.

Related Commands

addv3trapmgr, delv3trapmgr, dspv3trapmgrs

Attributes


Log: no	State: active	Privilege: ANYUSER

Example

Display the SNMPv3 trap manager named V3Trap1.

M8850_SF.7.PXM.a > dspv3trapmgr V3Trap1

  Manager Name        :  V3Trap1

  IPAddress           :  10.10.10.150

  Port Number         :  9910

  Parameter           :  Params1

  ReadingTrapsFlag    :  OFF

  NextTrapSeqNum      :  0

dspv3trapmgrs

Display SNMP Group—PXM45, PXM1E

The dspv3trapmgrs command displays all SNMPv3 trap managers.

Syntax

dspv3trapmgrs

Related Commands

addv3trapmgr, delv3trapmgr, dspv3trapmgr

Attributes


Log: no	State: active	Privilege: ANYUSER

Example

Display all SNMPv3 trap managers.

M8850_SF.7.PXM.a > dspv3trapmgrs

           ManagerName                    ipAddress:Port  ManagerParams

 --------------------------------  ---------------------  --------------------

 V3Trap1                              10.10.10.150:9910   Params1

NumOfValidEntries     1

Was this Document Helpful?

Feedback

Contact Cisco

Open a Support Case
(Requires a Cisco Service Contract)