Using SNMPv3 in AirWave Template
The SNMPv3
engine-id
in the AirWave template must be a variable whose value is retrieved from the target switch at runtime. The sameengine-id
variable must be configured as a localengine-id
in the template. The localengine-id
makes a target switch to have constantengine-id
always. The template must not have hardcodedengine-id
. The SNMPv3engine-id
must be unique for each device in the network managed by AirWave.snmp-server engine-id local "%snmpv3_engineid%"
snmpv3 engine-id "%snmpv3_engineid%"
There must be at least one SNMPv3 user configuration in the template. The user configuration must have plaintext key values for auth and priv. The plaintext keys will be encrypted when template is pushed to switch. Each SNMPv3 user should be assigned to a suitable SNMPv3 group with security model as version 3 in the template.
snmpv3 enable snmpv3 group managerauth user "snmpv3user" sec-model ver3 snmpv3 user "snmpv3user" auth md5 "snmpv3user" priv des "snmpv3user"
- The following is the sample template:
%template_header% hostname "%hostname%" %module_command% include-credentials snmp-server community "public" unrestricted snmp-server engine-id local "%snmpv3_engineid%" snmpv3 engineid "%snmpv3_engineid%" snmpv3 enable snmpv3 group managerauth user "snmpv3user" sec-model ver3 snmpv3 user "snmpv3user" auth md5 "snmpv3user" priv des "snmpv3user" vlan 1 name "DEFAULT_VLAN" untagged %vlan_1_untag_command% %if use_dhcp=1% ip address dhcp-bootp %endif% %if use_dhcp=0% ip address %ip_address% %netmask% %endif% ipv6 enable %if use_ipv6_dhcp=1% ipv6 address dhcp full %endif% %if use_ipv6_dhcp=0% ipv6 address %ipv6_address%/%ipv6_prefix_length% %endif% exit amp-server ip 192.168.240.242 group "group" folder "folder" secret "secret"