NET-SNMP Proxy V3 issues (converting from snmpv1/v2 requests to snmpv3)
ravi cherukuri <[email protected]>
| Newsgroups | gmane.network.net-snmp.user |
|---|---|
| Message-ID | <[email protected]> |
Hi Dave, As refered by one of our techincal head Krishna Mohan([email protected]), I am forwarding my question to you. Please help us. Synopsys: I am trying to proxy incoming snmpv1/v2/v3 requests as snmpv3 request from Host A to Host B (snmpv1/v2 disabled, can accept only snmpv3 requests). It is failing to proxy v3 Requests. Problem Description: Host A • NET-SNMP(port 161) for proxying V3 requests • IP Address 13.132.246.152 • For proxying V3 requests snmpd.conf modified as proxy -v 3 -l authpriv -u SHADESUSER -a SHA -A snmpv3authpass -x DES –X snmpv3privpass 13.132.247.59 1.3 Host B • Can accept and respond to snmpV3 requests. • IP address 13.132.247.59 From Host A (command used at command prompt) 1.A successful response received for direct request – HostB snmpV3 request handling tested success. # /usr/sfw/bin/snmpwalk -v3 -l authPriv -u SHADESUSER -a SHA -A snmpv3authpass -x DES -X snmpv3privpass 13.132.247.59 1.3 OutPut: Received expected MIB data Wireshark(ethereal) Observation: The first packet from HostA to HostB is “get-request” Please find the screenshot attached (SuccessfulRequest.jpeg). Get-Request circled in green. 2.Failed when proxied. # /usr/sfw/bin/snmpwalk -v3 -l authPriv -u SHADESUSER -a SHA -A snmpv3authpass -x DES -X snmpv3privpass localhost 1.3 OutPut: Timeout: No Response from localhost Wireshark(ethereal) Observation: No “get-request” is found from HostA-HostB Please find the screenshot attached (FailedRequest.jpeg). Requesting you to help me in understanding NET-SNMP proxy and correct us if we are wrong. Many Thanks, Ravi ------------------------------------------------------------------------------ 10 Tips for Better Web Security Learn 10 ways to better secure your business today. Topics covered include: Web security, SSL, hacker attacks & Denial of Service (DoS), private keys, security Microsoft Exchange, secure Instant Messaging, and much more. http://www.accelacomm.com/jaw/sfnl/114/51426210/ _______________________________________________ Net-snmp-users mailing list [email protected] Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
FailedRequest.png
(image/png, 136.3 KB) - not displayed
SuccessfulRequest.png
(image/png, 139.6 KB) - not displayed