Broadcom API Gateway 10 - How to create an SNMPv3 user

Products

• CA API Gateway

Issue/Introduction

Using the documented net-snmp-config command to create an SNMP user gives error "-bash: net-snmp-config: command not found"

 

Environment

Broadcom API Gateway 10 - SNMP Monitor implementation

Cause

In most recent version of Gateway, net-snmp-config command is deprecated due changes in the SNMP RPM. Hence we will use net-snmp-create-v3-user instead.

Resolution

 

Syntax: 

For standard user # net-snmp-create-v3-user [-ro] [-A SHA|MD5] [-a authpass] [username]

For encrypted user (recommended) # net-snmp-create-v3-user [-ro] [-A SHA|MD5] [-a authpass] [-x privpass] [-X DES|AES] [username]  

Before to run above command, we have to completely stop SNMP daemon from running. In the Gateway Appliance usually there are two instances of snmpd up and running:

Stop both of them with the following command:

# service snmpd stop

# /opt/nfast/scripts/init.d/ncsnmpd stop

Then create the user with one of the two methods described above, for example:

# net-snmp-create-v3-user -ro -A SHA -a 'Tzw~^[V}U)qSq!UX' -x 'swXdwPR/|}#&@P&' -X AES128 testuser

If successful, the output should show something like this:

Then restart the snmp daemon accordingly:

# service snmpd start

# /opt/nfast/scripts/init.d/ncsnmpd start