How can i implement SNMPv3 support for comunicate agents with server?
Hi,
I read that Sun Management Center agents not can communicate with server layer by SNMPv3, how can i implement this communication?
Do you think that If possible use Solaris Management Agent like a proxy SNMP to translate SNMPv2/v1 communications of sun Mc server to SNMPv3 comunications with managed agent?
How can i monitoring a SNMPv3 devices?, not is possible with sun mc 3.6.1?
thanks
[422 byte] By [
kerulea] at [2007-11-26 12:25:37]
# 1
Hi Kerule,
> I read that Sun Management Center agents not can
> communicate with server layer by SNMPv3, how can i
> implement this communication?
You're correct: only the Agent speaks SNMPv3 now.. i.e. to talk to other products:
http://docs.sun.com/app/docs/doc/819-5417/6n7gj82bu?a=view
There are several versions of SNMPv2 (i.e. "plain" v2, v2c, and v2u(sec). SunMC Agent-to-Server uses v2usec, meaning communication is authenticated for every user. SNMP encryption is also used (if available) and comes out-of-the-box on Solaris 10, and requires the Solaris Encryption Kit (SUNWcry package) on 9 and lower.
> Do you think that If possible use Solaris Management
> Agent like a proxy SNMP to translate SNMPv2/v1
> communications of sun Mc server to SNMPv3
> comunications with managed agent?
>
> How can i monitoring a SNMPv3 devices?, not is
> possible with sun mc 3.6.1?
I don't know if you'll be able to proxy SNMP to change versions: I doubt it. But if SunMC 3.6.1 supports the most important features of v3 over v1 (per-user authentication, and encryption)... what's the feature you need that SunMC lacks? Or are you just looking for a bigger version number? :)
Regards,
Mike.Kirk@HalcyonInc.com
http://www.HalcyonInc.com
# 2
Hi Anorek,
> You're correct: only the Agent speaks SNMPv3 now..
> i.e. to talk to other products:
>
> http://docs.sun.com/app/docs/doc/819-5417/6n7gj82bu?a=
> view
From that document:
Sun Management Center 3.6.1 software supports SNMPv3. SNMPv3 enables Sun Management Center agents to communicate with third-party management applications securely.
I understand that SunMc Agents can communicate with other management applications, like tivoli, patrol, hp open view ... but not with a device that speak by SNMPv3 only. If that is correct, i dont manage a device that speak in SNMPv3, is this correct?
> I don't know if you'll be able to proxy SNMP to
> change versions: I doubt it. But if SunMC 3.6.1
> supports the most important features of v3 over v1
> (per-user authentication, and encryption)... what's
> the feature you need that SunMC lacks? Or are you
> just looking for a bigger version number? :)
i磎 looking a SunMC agent/module that speak with a switch only in SNMPv3, and the results was monitoring in a SunMC console layer, if this possible?
Very thanks
# 3
Hi Kerule,
> I understand that SunMc Agents can communicate with
> other management applications, like tivoli, patrol,
> hp open view ... but not with a device that speak by
> SNMPv3 only. If that is correct, i dont manage a
> device that speak in SNMPv3, is this correct?
<snip>
> i磎 looking a SunMC agent/module that speak with a
> switch only in SNMPv3, and the results was monitoring
> in a SunMC console layer, if this possible?
The modules that ship with SunMC Agents today don't monitor SNMPv3 devices (just v1 or v2). The 3.6.1 SDK only shows support for SNMPv1, SNMPv2c or SNMPv2u... so unless it's undocumented that also means you can't build your own module with SNMPv3 support.
So, if your device can also talk v1 or v2 (and I have yet to see one that wasn't backwards compatible), try switching it to v2. If not, then you can try placing another v3 Agent inbetween your device and SunMC and see if you can proxy SunMC's v2 requests into v3 requests. I've never tried it.
Regards,
Mike.Kirk@HalcyonInc.com
http://www.HalcyonInc.com
# 4
Thanks for all anorek !!!,I maybe will try to use the Solaris System Managemen Agent like a proxy SNMP that chages one form (SNMPv3 for my device) to another (SNMPv2 for my SunMC proxy module).I will comment the results .... (in few months :))Thank again anorek
