Solved - Re: SNMP v3 trapd

Based on the information from this post https://stackoverflow.com/questions/30586662/snmp-v3-trap-users-cleared-by-manager I decided to give it a try and I changed the order when trapd will start moving it to just after the Asterisk service (that in my case is disabled). Now the trapd daemon will not loose the loaded credentials and will decode properly the SNMP v3 trap.


I guess there must be a bug on the daemon but I am not sure if I should post it on the "bug list". Also, if you need or want to use SHA with AES256, then you will have to upgrade your Java JCE to "unlimited" otherwise it does not work.


Moacir



________________________________
De: Moacir Ferreira <[email protected]>
Enviado: segunda-feira, 20 de novembro de 2017 22:12
Para: [email protected]
Assunto: [opennms-discuss] SNMP v3 trapd


I am trying to setup opennms to receive snmp v3 traps and trigger a "new-suspect-on-trap". Based on the docs and some research on the Internet I have configured opennms as below. Now, when I run the command for testing my setup I get a log: "2017-11-20 22:01:55,801 DEBUG [DefaultUDPTransportMapping_0.0.0.0/162] o.s.s.USM: RFC3414 §3.2.4 Unknown security name: 74:65:73:74:55:73:65:72". However, if I run the command for testing as soon as the trapd service starts, it works. So, in somehow after all opennms services are running the system can not process v3 traps anymore.


My test command is: snmptrap -v 3 -u testUser -a MD5 -A VerySecret -l authPriv -x DES -X VerySecret localhost 42 coldStart.0


My snmp and trapd configurations are:


#cat snmp-config.xml
<snmp-config
  xmlns="http://xmlns.opennms.org/xsd/config/snmp"
  auth-passphrase="VerySecret"
  auth-protocol="MD5"
  privacy-passphrase="VerySecret"
  privacy-protocol="DES"
  security-name="testUser"
  version="v3"
/>

#cat trapd-configuration.xml
<trapd-configuration
  xmlns="http://xmlns.opennms.org/xsd/config/trapd"
  snmp-trap-address="*"
  snmp-trap-port="162"
  new-suspect-on-trap="true"
  include-raw-message="false"
  threads="0"
  queue-size="10000"
  batch-size="1000"
  batch-interval="500">
  <snmpv3-user
        security-name="testUser"
        security-level="3"
        auth-passphrase="VerySecret"
        auth-protocol="MD5"
        privacy-passphrase="VerySecret"
        privacy-protocol="DES"
  />
</trapd-configuration>


What am I missing? Any hint?


Thanks,

Moacir

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
Please read the OpenNMS Mailing List FAQ:
http://www.opennms.org/index.php/Mailing_List_FAQ

opennms-discuss mailing list

To *unsubscribe* or change your subscription options, see the bottom of this page:
https://lists.sourceforge.net/lists/listinfo/opennms-discuss