WEBVTT

1
00:00.000 --> 00:01.330 align:middle line:84%


2
00:01.330 --> 00:03.820 align:middle line:90%
In the previous video, we
took a look at SNMP version 2C

3
00:03.820 --> 00:06.130 align:middle line:90%
see with its community
string, which not too secure.

4
00:06.130 --> 00:07.630 align:middle line:90%
So we're going to
kick it up a notch

5
00:07.630 --> 00:11.590 align:middle line:90%
in this video with the
configuration of SNMP version

6
00:11.590 --> 00:12.280 align:middle line:84%
3.

7
00:12.280 --> 00:15.070 align:middle line:90%
So let's go to the command
line on a new router

8
00:15.070 --> 00:17.480 align:middle line:90%
and let me show you the
configuration for SNMP version

9
00:17.480 --> 00:17.980 align:middle line:84%
3.

10
00:17.980 --> 00:20.350 align:middle line:90%
And then to verify that
it's working, we'll also

11
00:20.350 --> 00:23.650 align:middle line:90%
take a look at an NMS, a network
management system, that also

12
00:23.650 --> 00:26.560 align:middle line:90%
supports SNMP version 3
that can interact and pull

13
00:26.560 --> 00:29.950 align:middle line:90%
this router to get all
the details that it needs.

14
00:29.950 --> 00:32.110 align:middle line:90%
So to start this discussion
with SNMP version 3,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

14
00:29.950 --> 00:32.110 align:middle line:90%
So to start this discussion
with SNMP version 3,

15
00:32.110 --> 00:35.095 align:middle line:90%
let's imagine that a
router is like a house.

16
00:35.095 --> 00:38.190 align:middle line:84%


17
00:38.190 --> 00:40.680 align:middle line:90%
And in this house, most
houses, many houses

18
00:40.680 --> 00:41.520 align:middle line:84%
have multiple rooms.

19
00:41.520 --> 00:45.630 align:middle line:90%
So we have room one and
room two and room three.

20
00:45.630 --> 00:48.270 align:middle line:90%
And these rooms could represent
living rooms, family rooms,

21
00:48.270 --> 00:50.850 align:middle line:90%
dining rooms,
bathrooms, et cetera.

22
00:50.850 --> 00:53.750 align:middle line:90%
They have lots of things
going on in the house.

23
00:53.750 --> 00:56.730 align:middle line:90%
Now with SNMP, we have
options of giving access

24
00:56.730 --> 00:59.652 align:middle line:90%
to the entire house, meaning
an SNMP manager could

25
00:59.652 --> 01:01.860 align:middle line:90%
go ahead and look at the
router and look at anything,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

25
00:59.652 --> 01:01.860 align:middle line:90%
go ahead and look at the
router and look at anything,

26
01:01.860 --> 01:04.970 align:middle line:90%
assuming we have the right
MIB look at any detail

27
01:04.970 --> 01:07.020 align:middle line:90%
and if we have the
read/write permissions,

28
01:07.020 --> 01:09.660 align:middle line:90%
write to the appropriate
details of anything

29
01:09.660 --> 01:11.158 align:middle line:84%
on that managed device.

30
01:11.158 --> 01:11.700 align:middle line:84%
That's great.

31
01:11.700 --> 01:12.658 align:middle line:84%
That's the whole house.

32
01:12.658 --> 01:14.163 align:middle line:90%
But we also could
partition it off.

33
01:14.163 --> 01:15.330 align:middle line:84%
We could say, you know what?

34
01:15.330 --> 01:17.340 align:middle line:90%
I don't want everybody
to have full access.

35
01:17.340 --> 01:20.280 align:middle line:90%
Let's go ahead and take a
couple parameters like this

36
01:20.280 --> 01:21.850 align:middle line:90%
and let's carve
them into a view.

37
01:21.850 --> 01:24.150 align:middle line:90%
Think of a view
like a subsection

38
01:24.150 --> 01:25.660 align:middle line:84%
of the entire device.

39
01:25.660 --> 01:28.410 align:middle line:90%
So instead of a
house with six rooms,

40
01:28.410 --> 01:30.930 align:middle line:90%
we can create a view
that only provides access
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

40
01:28.410 --> 01:30.930 align:middle line:90%
we can create a view
that only provides access

41
01:30.930 --> 01:33.390 align:middle line:90%
to two of those rooms,
two specific rooms.

42
01:33.390 --> 01:35.100 align:middle line:90%
So that's the
concept of the view.

43
01:35.100 --> 01:37.650 align:middle line:90%
So to create a view, I'll
put this here in pink,

44
01:37.650 --> 01:39.860 align:middle line:90%
we would go ahead and
simply create a view.

45
01:39.860 --> 01:44.260 align:middle line:90%
And here is examples
of that right here.

46
01:44.260 --> 01:46.300 align:middle line:84%
And let's start with view one.

47
01:46.300 --> 01:48.200 align:middle line:90%
So for view one,
I've got two entries.

48
01:48.200 --> 01:51.290 align:middle line:90%
So SNMP server view,
the name view one,

49
01:51.290 --> 01:54.590 align:middle line:90%
and then this is-- think of
this like a room in the house,

50
01:54.590 --> 01:55.638 align:middle line:84%
like room three.

51
01:55.638 --> 01:57.680 align:middle line:90%
That's going to be included
as part of that view.

52
01:57.680 --> 02:00.450 align:middle line:90%
And then the second line,
for the same view, same name,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

52
01:57.680 --> 02:00.450 align:middle line:90%
And then the second line,
for the same view, same name,

53
02:00.450 --> 02:03.980 align:middle line:90%
I'm also adding the
interface operational status

54
02:03.980 --> 02:05.820 align:middle line:84%
as maybe room four.

55
02:05.820 --> 02:09.410 align:middle line:90%
So anybody who is associate
with that specific view

56
02:09.410 --> 02:12.590 align:middle line:90%
is only going to have access to
rooms three and four, those two

57
02:12.590 --> 02:16.820 align:middle line:90%
specific objects or portions
of the entire MIB regarding

58
02:16.820 --> 02:17.540 align:middle line:84%
that device.

59
02:17.540 --> 02:20.390 align:middle line:90%
Now the other
option here is ISO.

60
02:20.390 --> 02:24.350 align:middle line:90%
So in this view called full,
I'm using the keyword ISO,

61
02:24.350 --> 02:27.230 align:middle line:90%
and that effectively represents
the entire ball of wax,

62
02:27.230 --> 02:29.450 align:middle line:90%
the front door, here's the
keys to the front door,

63
02:29.450 --> 02:31.220 align:middle line:84%
you can access everything.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

63
02:29.450 --> 02:31.220 align:middle line:84%
you can access everything.

64
02:31.220 --> 02:34.460 align:middle line:90%
So on a specific device,
you can go look up the MIBs

65
02:34.460 --> 02:37.440 align:middle line:90%
and look up the key terms
for a specific device,

66
02:37.440 --> 02:39.360 align:middle line:90%
whether it's a server
or router or switch,

67
02:39.360 --> 02:40.980 align:middle line:90%
because all the vendors
have published those.

68
02:40.980 --> 02:42.522 align:middle line:90%
So you can actually
create your views

69
02:42.522 --> 02:44.270 align:middle line:90%
based on what you want
to give access to.

70
02:44.270 --> 02:46.130 align:middle line:90%
So with SNMP, what
we're going to do

71
02:46.130 --> 02:47.590 align:middle line:84%
is we are going to create views.

72
02:47.590 --> 02:49.630 align:middle line:84%
And I'll put those in pink.

73
02:49.630 --> 02:52.700 align:middle line:84%
So views, they specify where.

74
02:52.700 --> 02:58.770 align:middle line:90%
Like where in this device
can we have access to or see?

75
02:58.770 --> 03:03.000 align:middle line:90%
Now just because we have
access to, in this view,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

75
02:58.770 --> 03:03.000 align:middle line:90%
Now just because we have
access to, in this view,

76
03:03.000 --> 03:05.640 align:middle line:90%
to rooms three and
four, in this case

77
03:05.640 --> 03:08.880 align:middle line:90%
it would be sysop time and
interface operation status,

78
03:08.880 --> 03:11.760 align:middle line:90%
does that mean we can
just read all the data

79
03:11.760 --> 03:13.230 align:middle line:84%
or we can change the data?

80
03:13.230 --> 03:15.330 align:middle line:90%
Do we have read only
and rewrite access?

81
03:15.330 --> 03:17.283 align:middle line:90%
The answer is with
SNMP version 3,

82
03:17.283 --> 03:19.950 align:middle line:90%
we would control that, and let e
use a slightly different color,

83
03:19.950 --> 03:23.575 align:middle line:90%
let me use blue, we
control that with groups.

84
03:23.575 --> 03:25.700 align:middle line:90%
So what we could do is--
let me erase some of this.

85
03:25.700 --> 03:29.980 align:middle line:84%


86
03:29.980 --> 03:33.350 align:middle line:90%
So with groups, we can
specify the permissions
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

86
03:29.980 --> 03:33.350 align:middle line:90%
So with groups, we can
specify the permissions

87
03:33.350 --> 03:34.100 align:middle line:84%
based on a view.

88
03:34.100 --> 03:37.220 align:middle line:90%
So if we want to give a group
specific permissions to do

89
03:37.220 --> 03:39.950 align:middle line:90%
read only regarding
that view, right.

90
03:39.950 --> 03:42.978 align:middle line:90%
If we want to give a group
read/write access to that view,

91
03:42.978 --> 03:43.520 align:middle line:84%
that's great.

92
03:43.520 --> 03:45.060 align:middle line:90%
We can control that
with the groups.

93
03:45.060 --> 03:47.945 align:middle line:90%
Think of the groups
like what, meaning

94
03:47.945 --> 03:49.070 align:middle line:84%
what are you allowed to do?

95
03:49.070 --> 03:54.070 align:middle line:90%
And I'll put read only and/or
read/write right there as

96
03:54.070 --> 03:54.820 align:middle line:84%
far as the groups.

97
03:54.820 --> 03:55.840 align:middle line:84%
So here's some examples.

98
03:55.840 --> 03:57.007 align:middle line:84%
I'll put them in blue right.

99
03:57.007 --> 04:01.900 align:middle line:90%
Here here's three groups that
we are creating for SNMP.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

99
03:57.007 --> 04:01.900 align:middle line:90%
Here here's three groups that
we are creating for SNMP.

100
04:01.900 --> 04:04.820 align:middle line:90%
So group A using
version 3, we're

101
04:04.820 --> 04:08.690 align:middle line:90%
giving the access of read
privileges to view number one.

102
04:08.690 --> 04:12.290 align:middle line:90%
So basically, this
group has read access

103
04:12.290 --> 04:15.650 align:middle line:90%
to rooms three and four, which
is in this view one, these two

104
04:15.650 --> 04:17.300 align:middle line:84%
parameters, two sections.

105
04:17.300 --> 04:19.820 align:middle line:90%
And then group B,
also using version 3,

106
04:19.820 --> 04:23.340 align:middle line:90%
is given read access to
full, the view called full,

107
04:23.340 --> 04:26.730 align:middle line:90%
and it's also given write
access to that same view.

108
04:26.730 --> 04:29.030 align:middle line:90%
So if you happen to be
assigned as a member, a user,

109
04:29.030 --> 04:31.640 align:middle line:90%
as a member of group
B, wholly snikers,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

109
04:29.030 --> 04:31.640 align:middle line:90%
as a member of group
B, wholly snikers,

110
04:31.640 --> 04:34.340 align:middle line:90%
you've got read
access to full, which

111
04:34.340 --> 04:38.360 align:middle line:90%
is the entire house, the entire
MIB on that managed device,

112
04:38.360 --> 04:41.300 align:middle line:90%
and you've got write access
to the entire device.

113
04:41.300 --> 04:45.140 align:middle line:90%
So groups identify what
you can do with the view

114
04:45.140 --> 04:47.680 align:middle line:90%
or with the entire box
you've been given access to.

115
04:47.680 --> 04:50.190 align:middle line:90%
So the last piece
of this puzzle is,

116
04:50.190 --> 04:51.860 align:middle line:90%
how do we authenticate
a user who

117
04:51.860 --> 04:54.560 align:middle line:90%
is going to be a member of a
group, who is going to then

118
04:54.560 --> 04:56.630 align:middle line:90%
have access to whatever
permissions that group

119
04:56.630 --> 04:57.420 align:middle line:84%
has to the view?

120
04:57.420 --> 04:59.420 align:middle line:90%
And the answer is, we are
going to create users.

121
04:59.420 --> 05:03.020 align:middle line:90%
Now these are not
your normal iOS users.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

121
04:59.420 --> 05:03.020 align:middle line:90%
Now these are not
your normal iOS users.

122
05:03.020 --> 05:05.060 align:middle line:84%
These are SNMP server users.

123
05:05.060 --> 05:05.990 align:middle line:84%
And check it out.

124
05:05.990 --> 05:08.600 align:middle line:84%
I did a show run include SNMP.

125
05:08.600 --> 05:11.030 align:middle line:90%
They do not show up
in the running config.

126
05:11.030 --> 05:11.870 align:middle line:84%
We configured it.

127
05:11.870 --> 05:12.453 align:middle line:84%
They're there.

128
05:12.453 --> 05:13.580 align:middle line:84%
They are persistent.

129
05:13.580 --> 05:15.550 align:middle line:90%
But they are not showing
up in the config.

130
05:15.550 --> 05:18.340 align:middle line:90%
So I'll walk you through that
syntax in just a few seconds.

131
05:18.340 --> 05:21.180 align:middle line:90%
So a user is going to be
associated with a group.

132
05:21.180 --> 05:23.840 align:middle line:90%
And then based on that
group, with what access

133
05:23.840 --> 05:25.820 align:middle line:90%
they have to a
view, are then going

134
05:25.820 --> 05:27.770 align:middle line:90%
to have the equivalent
permissions regarding

135
05:27.770 --> 05:28.558 align:middle line:84%
that view.

136
05:28.558 --> 05:29.600 align:middle line:84%
And that's how you do it.

137
05:29.600 --> 05:31.975 align:middle line:90%
So with the user, we're going
to have to do a few things.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

137
05:29.600 --> 05:31.975 align:middle line:90%
So with the user, we're going
to have to do a few things.

138
05:31.975 --> 05:36.360 align:middle line:90%
With a user, we're going to
have to give them a name.

139
05:36.360 --> 05:39.575 align:middle line:90%
We're going to say what groups
they are associated with.

140
05:39.575 --> 05:41.200 align:middle line:90%
We're also going
specify whether or not

141
05:41.200 --> 05:45.520 align:middle line:90%
we want to take advantage of
the version 3 security measures.

142
05:45.520 --> 05:48.803 align:middle line:90%
So the security measures
include authentication.

143
05:48.803 --> 05:49.970 align:middle line:84%
Do we want to use it or not?

144
05:49.970 --> 05:52.370 align:middle line:84%
We don't have to, but we should.

145
05:52.370 --> 05:54.860 align:middle line:90%
And the other option is
for encryption, which

146
05:54.860 --> 05:56.970 align:middle line:84%
is referred to as privacy.

147
05:56.970 --> 05:59.570 align:middle line:90%
So we need to specify, yeah,
we want to use authentication.

148
05:59.570 --> 06:01.730 align:middle line:84%
We want to use privacy.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

148
05:59.570 --> 06:01.730 align:middle line:84%
We want to use privacy.

149
06:01.730 --> 06:06.013 align:middle line:90%
And we're going to need keys,
passwords for each of those,

150
06:06.013 --> 06:08.180 align:middle line:90%
and we're also going to
have to specify the methods.

151
06:08.180 --> 06:11.360 align:middle line:90%
For authentication, are
we going to use MD5?

152
06:11.360 --> 06:13.460 align:middle line:84%
Or are we going to use Sha?

153
06:13.460 --> 06:15.790 align:middle line:90%
And for the privacy,
for the encryption,

154
06:15.790 --> 06:16.790 align:middle line:84%
are we going to use DEZ?

155
06:16.790 --> 06:18.140 align:middle line:84%
No.

156
06:18.140 --> 06:19.460 align:middle line:84%
We're not going to use DEZ.

157
06:19.460 --> 06:20.810 align:middle line:84%
We'll use AES.

158
06:20.810 --> 06:22.410 align:middle line:90%
It also asks us
for a key length.

159
06:22.410 --> 06:25.700 align:middle line:90%
So if you want to use AES
256, assuming your network

160
06:25.700 --> 06:27.560 align:middle line:90%
management system
supports it, great.

161
06:27.560 --> 06:30.002 align:middle line:90%
And then also the
key for that as well.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

161
06:27.560 --> 06:30.002 align:middle line:90%
And then also the
key for that as well.

162
06:30.002 --> 06:32.210 align:middle line:90%
So there's a little bit more
work in setting that up,

163
06:32.210 --> 06:33.840 align:middle line:84%
but they don't show up here.

164
06:33.840 --> 06:37.340 align:middle line:90%
So let me show you the syntax
for creating a brand new user.

165
06:37.340 --> 06:39.630 align:middle line:90%
All right, so let's
create an SNMP user.

166
06:39.630 --> 06:43.580 align:middle line:90%
So we're going to configuration
mode SNMP dash server, is

167
06:43.580 --> 06:45.192 align:middle line:84%
the syntax of how it starts.

168
06:45.192 --> 06:47.150 align:middle line:90%
And then we'll use some
context sensitive help.

169
06:47.150 --> 06:48.630 align:middle line:84%
We'll create a user.

170
06:48.630 --> 06:51.660 align:middle line:84%
And let's call the user Jim.

171
06:51.660 --> 06:52.160 align:middle line:84%
All right.

172
06:52.160 --> 06:53.510 align:middle line:84%
So Jim, you're in.

173
06:53.510 --> 06:56.360 align:middle line:90%
And for Jim, which group
does Jim belong to?

174
06:56.360 --> 06:58.400 align:middle line:90%
I'm going to scroll
up just a little bit

175
06:58.400 --> 07:00.420 align:middle line:90%
and take a look
at my output here.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

175
06:58.400 --> 07:00.420 align:middle line:90%
and take a look
at my output here.

176
07:00.420 --> 07:04.970 align:middle line:90%
So let's put-- we have group
A, group B, or the admin group.

177
07:04.970 --> 07:06.770 align:middle line:90%
And let's put him
in the admin group.

178
07:06.770 --> 07:08.360 align:middle line:84%
Just going to paste that down.

179
07:08.360 --> 07:11.510 align:middle line:90%
So Jim is now a member
of the admin group,

180
07:11.510 --> 07:13.640 align:middle line:90%
or will be once we
finish this command.

181
07:13.640 --> 07:15.740 align:middle line:84%
And then, what version of SNMP?

182
07:15.740 --> 07:18.150 align:middle line:90%
V3, because that's what
we're focused on here.

183
07:18.150 --> 07:20.660 align:middle line:90%
Then we're going to specify
AUTH for authentication

184
07:20.660 --> 07:21.550 align:middle line:84%
and a question mark.

185
07:21.550 --> 07:22.390 align:middle line:84%
Let's use Sha.

186
07:22.390 --> 07:24.890 align:middle line:90%
And this should be planned out
probably beforehand so you're

187
07:24.890 --> 07:26.160 align:middle line:84%
not making it up on the fly.

188
07:26.160 --> 07:28.400 align:middle line:84%
But we'll use Sha.

189
07:28.400 --> 07:30.690 align:middle line:90%
And then the word for
the authentication,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

189
07:28.400 --> 07:30.690 align:middle line:90%
And then the word for
the authentication,

190
07:30.690 --> 07:33.200 align:middle line:90%
I'm going to use Cisco
exclamation mark 2 3.

191
07:33.200 --> 07:35.180 align:middle line:90%
Not a great one in
production, but I'll

192
07:35.180 --> 07:38.120 align:middle line:90%
remember what it is here when
we get to the management side.

193
07:38.120 --> 07:40.730 align:middle line:90%
And then a question
mark and PRIV.

194
07:40.730 --> 07:43.910 align:middle line:90%
So the off portion is regarding
the hashing and the integrity

195
07:43.910 --> 07:46.520 align:middle line:90%
for the authentication
piece, and this PRIV part

196
07:46.520 --> 07:48.830 align:middle line:90%
is now talking about
the encryption piece.

197
07:48.830 --> 07:51.570 align:middle line:90%
The authentication and
encryption of the traffic

198
07:51.570 --> 07:54.620 align:middle line:90%
are the two major benefits
of SNMP version 3.

199
07:54.620 --> 07:58.303 align:middle line:90%
So regarding PRIV, regarding
the privacy, we'll use AES.

200
07:58.303 --> 07:59.720 align:middle line:90%
And if we're using
AES, it's going

201
07:59.720 --> 08:01.340 align:middle line:84%
to ask about some key lengths.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

201
07:59.720 --> 08:01.340 align:middle line:84%
to ask about some key lengths.

202
08:01.340 --> 08:04.280 align:middle line:84%
Let's go for 256 and a space.

203
08:04.280 --> 08:06.170 align:middle line:90%
And now it's asking
for a password

204
08:06.170 --> 08:07.767 align:middle line:84%
for effectively the encryption.

205
08:07.767 --> 08:09.350 align:middle line:90%
So I'm going to use
the same password.

206
08:09.350 --> 08:12.500 align:middle line:90%
Also not the best idea
to use the same password

207
08:12.500 --> 08:14.630 align:middle line:90%
for authentication and
for the encryption.

208
08:14.630 --> 08:16.220 align:middle line:84%
However, it'll work.

209
08:16.220 --> 08:19.190 align:middle line:90%
And then here, we can tag
on an access control list.

210
08:19.190 --> 08:21.320 align:middle line:84%
It says, OK, x access list 10.

211
08:21.320 --> 08:22.820 align:middle line:90%
And we can specify
a source address,

212
08:22.820 --> 08:26.060 align:middle line:90%
which if the packets or the SNMP
management traffic coming in

213
08:26.060 --> 08:27.630 align:middle line:90%
isn't from those
source addresses,

214
08:27.630 --> 08:29.870 align:middle line:90%
it's going to go
ahead and be dropped.

215
08:29.870 --> 08:31.850 align:middle line:90%
In this case, I'm
going to leave it off.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

215
08:29.870 --> 08:31.850 align:middle line:90%
In this case, I'm
going to leave it off.

216
08:31.850 --> 08:33.590 align:middle line:84%
And check this out.

217
08:33.590 --> 08:37.789 align:middle line:84%
Show, run, include SNMP.

218
08:37.789 --> 08:39.020 align:middle line:84%
Not there.

219
08:39.020 --> 08:41.360 align:middle line:90%
So one of the aspects
that's important to know

220
08:41.360 --> 08:43.220 align:middle line:90%
is that you're
going to have some

221
08:43.220 --> 08:45.230 align:middle line:90%
of the configuration
for SNMP version

222
08:45.230 --> 08:48.440 align:middle line:90%
3, the groups and the
views, but you're not

223
08:48.440 --> 08:50.870 align:middle line:90%
going to have the
actual user information.

224
08:50.870 --> 08:54.170 align:middle line:90%
So you need to do a command
like this, show SNMP user

225
08:54.170 --> 08:55.190 align:middle line:84%
and press enter.

226
08:55.190 --> 08:56.990 align:middle line:84%
So here's our user of Jim.

227
08:56.990 --> 08:59.690 align:middle line:90%
And the authentication protocol
is Sha, because we said it was.

228
08:59.690 --> 09:02.450 align:middle line:90%
And the privacy
protocol is AES 256.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

228
08:59.690 --> 09:02.450 align:middle line:90%
And the privacy
protocol is AES 256.

229
09:02.450 --> 09:04.490 align:middle line:90%
And Jim is a member
of admin group.

230
09:04.490 --> 09:05.980 align:middle line:84%
And here we have Bob.

231
09:05.980 --> 09:08.360 align:middle line:90%
And there's an access
list associate with Bob.

232
09:08.360 --> 09:09.380 align:middle line:84%
Here's Lois.

233
09:09.380 --> 09:11.990 align:middle line:90%
So that's a great way of
seeing who your users that

234
09:11.990 --> 09:13.170 align:middle line:84%
are configured for SNMP.

235
09:13.170 --> 09:16.070 align:middle line:90%
Because in troubleshooting, if
you just did a show run, like,

236
09:16.070 --> 09:16.870 align:middle line:84%
there's no users.

237
09:16.870 --> 09:18.830 align:middle line:90%
It's can be tough to
troubleshoot that.

238
09:18.830 --> 09:22.640 align:middle line:90%
So also when in doubt,
you can make a new user

239
09:22.640 --> 09:25.460 align:middle line:90%
and then use that new
user on the SNMP manager

240
09:25.460 --> 09:27.890 align:middle line:90%
just to rule out that
you don't have a typo

241
09:27.890 --> 09:29.790 align:middle line:90%
or you forgot the
password or whatever,

242
09:29.790 --> 09:31.670 align:middle line:90%
if you create them
brand new on both sides.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

242
09:29.790 --> 09:31.670 align:middle line:90%
if you create them
brand new on both sides.

243
09:31.670 --> 09:32.030 align:middle line:84%
OK.

244
09:32.030 --> 09:33.155 align:middle line:84%
So that's one show command.

245
09:33.155 --> 09:35.780 align:middle line:90%
Let's do a show SNMP
and a question mark.

246
09:35.780 --> 09:38.900 align:middle line:90%
And let's go ahead and do
a show SNMP view, right?

247
09:38.900 --> 09:40.365 align:middle line:84%
What views do we have?

248
09:40.365 --> 09:41.740 align:middle line:90%
If we scroll up
to the top, we're

249
09:41.740 --> 09:43.448 align:middle line:90%
going to have those
custom views as well.

250
09:43.448 --> 09:46.210 align:middle line:90%
Here's view one, which
includes system uptime, which

251
09:46.210 --> 09:47.690 align:middle line:84%
also includes IF operations.

252
09:47.690 --> 09:49.940 align:middle line:90%
So here's full, which
is including ISO.

253
09:49.940 --> 09:53.460 align:middle line:90%
So basically, it gives full-
that view as full access.

254
09:53.460 --> 09:56.720 align:middle line:90%
So we have show SNMP
view, show SNMP users,

255
09:56.720 --> 10:00.625 align:middle line:84%
and let's do a show SNMP group.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

255
09:56.720 --> 10:00.625 align:middle line:84%
and let's do a show SNMP group.

256
10:00.625 --> 10:02.000 align:middle line:90%
So that way, with
those commands,

257
10:02.000 --> 10:04.940 align:middle line:90%
we can identify the users, what
groups they're a member of,

258
10:04.940 --> 10:06.500 align:middle line:90%
what groups have
access to as far as

259
10:06.500 --> 10:09.350 align:middle line:90%
permissions, and then the actual
views that those groups are

260
10:09.350 --> 10:10.380 align:middle line:84%
associated with.

261
10:10.380 --> 10:10.880 align:middle line:84%
All right.

262
10:10.880 --> 10:12.380 align:middle line:90%
So that's the
basic configuration

263
10:12.380 --> 10:16.130 align:middle line:90%
of SNMP version 3 on a
managed device on the agent.

264
10:16.130 --> 10:19.130 align:middle line:90%
Now in order to make
these not too lengthy,

265
10:19.130 --> 10:22.190 align:middle line:90%
I'm going to go ahead and put
the management piece, the SNMP

266
10:22.190 --> 10:24.980 align:middle line:90%
manager using version 3,
in the very next video.

267
10:24.980 --> 10:26.000 align:middle line:84%
So it's coming right up.

268
10:26.000 --> 10:27.680 align:middle line:90%
So I'll see you there
in just a moment.

269
10:27.680 --> 10:30.170 align:middle line:90%
Meanwhile, I hope this has
been informative for you.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

269
10:27.680 --> 10:30.170 align:middle line:90%
Meanwhile, I hope this has
been informative for you.

270
10:30.170 --> 10:33.460 align:middle line:90%
And I'd like to thank
you for viewing.