NET-SNMP Proxy V3 issues (converting from snmpv1/v2 requests to snmpv3)

ravi cherukuri <[email protected]>
Newsgroups gmane.network.net-snmp.user
Message-ID <[email protected]>
Hi Dave,  As refered by one of our techincal head Krishna 
Mohan([email protected]), I am forwarding my question to you. Please help us.

Synopsys:  I am trying to proxy incoming snmpv1/v2/v3 requests as snmpv3 request 
from Host A to Host B (snmpv1/v2 disabled, can accept only snmpv3 requests). 

It is failing to proxy v3 Requests. 

Problem Description:  Host A   • NET-SNMP(port 161) for proxying V3 requests
• IP Address 13.132.246.152 • For proxying V3 requests snmpd.conf modified as  
proxy -v 3 -l authpriv -u SHADESUSER -a SHA -A snmpv3authpass  -x DES –X 
snmpv3privpass  13.132.247.59 1.3  Host B • Can accept and respond to snmpV3 
requests. • IP address 13.132.247.59  From Host A (command used at command 
prompt) 1.A successful response received for direct request – HostB snmpV3 
request handling tested success. # /usr/sfw/bin/snmpwalk -v3 -l authPriv -u 
SHADESUSER -a SHA -A snmpv3authpass -x DES -X snmpv3privpass 13.132.247.59 1.3  
OutPut: Received expected MIB data Wireshark(ethereal) Observation:    The first 
packet from HostA to HostB is “get-request”    Please find the screenshot 
attached (SuccessfulRequest.jpeg).    Get-Request circled in green.

2.Failed when proxied. # /usr/sfw/bin/snmpwalk -v3 -l authPriv -u SHADESUSER -a 
SHA -A snmpv3authpass -x DES -X snmpv3privpass localhost 1.3  OutPut:    
Timeout: No Response from localhost   Wireshark(ethereal) Observation:    No 
“get-request” is found from HostA-HostB    Please find the screenshot attached 
(FailedRequest.jpeg).   Requesting you to help me in understanding NET-SNMP 
proxy and correct us if we are wrong.

Many Thanks, Ravi

------------------------------------------------------------------------------
10 Tips for Better Web Security
Learn 10 ways to better secure your business today. Topics covered include:
Web security, SSL, hacker attacks & Denial of Service (DoS), private keys,
security Microsoft Exchange, secure Instant Messaging, and much more.
http://www.accelacomm.com/jaw/sfnl/114/51426210/

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
FailedRequest.png (image/png, 136.3 KB) - not displayed
SuccessfulRequest.png (image/png, 139.6 KB) - not displayed
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.