Re: snmptrapd not processing v3 traps

Jason,

Any chance that the switch was actually sending the notifications with noAuthNoPriv?

  Bill


> On Oct 6, 2014, at 5:46 AM, Jason Pope <[email protected]> wrote:
> 
> Geoff,
>  
> Basically have a switch sending SNMP traps. It does have an engine ID set.
>  
> All I have set in my snmptrapd.conf is :
> createUser myuser SHA foo AES bar
> authUser log,execute,net myuser
>  
> And that just works …. Will try it for more than one switch, but so far no issues.
>  
> Regards,
>  
> Jason Pope
>  
> From: Geoff Kingsmill [mailto:[email protected]] 
> Sent: 06 October 2014 10:34
> To: Jason Pope; 'Bill Fenner'
> Cc: [email protected]; [email protected]
> Subject: RE: snmptrapd not processing v3 traps
>  
> Jason,
>  
> Would you mind expanding on this. Would you mind providing a sample on what you put in for authUser and CreateUser to overcome the need of having to enter an engineID for every system.
>  
> Thanks so much,
> Geoff..
>  
> From: Jason Pope [mailto:[email protected]] 
> Sent: Monday, 6 October 2014 6:47 PM
> To: Jason Pope; Bill Fenner
> Cc: [email protected]; [email protected]
> Subject: RE: snmptrapd not processing v3 traps
>  
> Ok … I have got it to work.
>  
> I forgot to add in the authUser line :-P
>  
> Also set it up without the engine ID and it works just with the username and auth details.
>  
> Regards,
>  
> Jason Pope
>  
> From: Jason Pope [mailto:[email protected]] 
> Sent: 06 October 2014 10:09
> To: Bill Fenner
> Cc: [email protected]; [email protected]
> Subject: RE: snmptrapd not processing v3 traps
>  
> Bill,
>  
> I had a look at the doc and no matter what I have done it still does not seem to work.
>  
> I have tried multiple combinations of engineID with a 0x and not in front. Putting the Id in or not. With our without Auth and Priv …. Still nothing comes though.
>  
> I can see in the debug the info :
> dumph_recv:         msgAuthoritativeEngineID
> dumpx_recv:          04 0A F5 71 7F 00 1C 73 01 65 27 00
>  
> and I have put this in the config :
> createUser -e 040AF5717F001C7301652700 myuser SHA foo AES bar
>  
> as well as putting an 0x in front … and still nothing …
>  
> Regards,
>  
> Jason Pope
>  
> From: Bill Fenner [mailto:[email protected]] 
> Sent: 03 October 2014 21:16
> To: Jason Pope
> Cc: [email protected]; [email protected]
> Subject: Re: snmptrapd not processing v3 traps
>  
> On Fri, Oct 3, 2014 at 11:06 AM, Jason Pope <[email protected]> wrote:
> Hi,
>  
> Has anyone successfully set up snmptrapd to accept v3 traps from a device ?
>  
> I have tried to set it up, but I see nothing in the log when the device sends v3 traps. When configured to send v2 traps you can see them in the logs.
>  
> I have set up the createUser line in the snmptrapd.conf file according to the net-snmp wiki, but still not getting anything.
>  
> You have to have one createUser per device you're receiving traps from, with the device's engineId specified.  (Or switch to informs, in which case you have to create the user on each device you're sending traps from, and let it discover or tell it the engineId of the trap receiver.)
>  
> (A little more background: http://www.net-snmp.org/tutorial/tutorial-5/commands/snmptrap-v3.html)
>  
>   Bill
>   
> We are running version 5.7.2.1
>  
> Thanks
>  
> Regards,
>  
> Jason Pope
>  
> BATS Trading Limited is a Recognised Investment Exchange regulated by the Financial Conduct Authority. BATS Trading Limited is an indirect wholly-owned subsidiary of BATS Global Markets, Inc. and is a company registered in England and Wales with Company Number 6547680 and registered office at 10 Lower Thames Street, London EC3R 6AF. Confidentiality Notice: This email, including attachments, may include non-public, proprietary, confidential or legally privileged information. If you are not an intended recipient or an authorized agent of an intended recipient, you are hereby notified that any dissemination, distribution or copying of the information contained in or transmitted with this e-mail is unauthorized and strictly prohibited. If you have received this email in error, please notify the sender by replying to this message and permanently delete this e-mail, its attachments, and any copies of it immediately – you should not retain, copy or use this e-mail or any attachment for any purpose, nor disclose all or any part of the contents to any other person. Thank you.
> 
> ------------------------------------------------------------------------------
> Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
> Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
> Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
> Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
> http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk
> _______________________________________________
> Net-snmp-users mailing list
> [email protected]
> Please see the following page to unsubscribe or change other options:
> https://lists.sourceforge.net/lists/listinfo/net-snmp-users
> 
>  
> BATS Trading Limited is a Recognised Investment Exchange regulated by the Financial Conduct Authority. BATS Trading Limited is an indirect wholly-owned subsidiary of BATS Global Markets, Inc. and is a company registered in England and Wales with Company Number 6547680 and registered office at 10 Lower Thames Street, London EC3R 6AF. Confidentiality Notice: This email, including attachments, may include non-public, proprietary, confidential or legally privileged information. If you are not an intended recipient or an authorized agent of an intended recipient, you are hereby notified that any dissemination, distribution or copying of the information contained in or transmitted with this e-mail is unauthorized and strictly prohibited. If you have received this email in error, please notify the sender by replying to this message and permanently delete this e-mail, its attachments, and any copies of it immediately – you should not retain, copy or use this e-mail or any attachment for any purpose, nor disclose all or any part of the contents to any other person. Thank you.
> BATS Trading Limited is a Recognised Investment Exchange regulated by the Financial Conduct Authority. BATS Trading Limited is an indirect wholly-owned subsidiary of BATS Global Markets, Inc. and is a company registered in England and Wales with Company Number 6547680 and registered office at 10 Lower Thames Street, London EC3R 6AF. Confidentiality Notice: This email, including attachments, may include non-public, proprietary, confidential or legally privileged information. If you are not an intended recipient or an authorized agent of an intended recipient, you are hereby notified that any dissemination, distribution or copying of the information contained in or transmitted with this e-mail is unauthorized and strictly prohibited. If you have received this email in error, please notify the sender by replying to this message and permanently delete this e-mail, its attachments, and any copies of it immediately – you should not retain, copy or use this e-mail or any attachment for any purpose, nor disclose all or any part of the contents to any other person. Thank you.
> BATS Trading Limited is a Recognised Investment Exchange regulated by the Financial Conduct Authority. BATS Trading Limited is an indirect wholly-owned subsidiary of BATS Global Markets, Inc. and is a company registered in England and Wales with Company Number 6547680 and registered office at 10 Lower Thames Street, London EC3R 6AF. Confidentiality Notice: This email, including attachments, may include non-public, proprietary, confidential or legally privileged information. If you are not an intended recipient or an authorized agent of an intended recipient, you are hereby notified that any dissemination, distribution or copying of the information contained in or transmitted with this e-mail is unauthorized and strictly prohibited. If you have received this email in error, please notify the sender by replying to this message and permanently delete this e-mail, its attachments, and any copies of it immediately – you should not retain, copy or use this e-mail or any attachment for any purpose, nor disclose all or any part of the contents to any other person. Thank you.

------------------------------------------------------------------------------
Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk

_______________________________________________
Net-snmp-coders mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders