SNMPv3 Parameters

Question 1

When setting up SNMPv3 what 3 general configuration steps are required?

Answer 1

• Create an SNMPv3 Group
• Create an SNMPv3 User
• Enable an snmp-server with authentication

Question 2

What 5 parameters are used when configuring SNMPv3 Group?

Answer 2

• snmp-server group GROUPNAME
• v3
• noauth, auth, priv (no other parameters needed here on GROUP config)
• write v1default (if configuring for read-write using the v1default view)
• access ACL_NAME

snmp-server group MyGroup v3 auth write v1default access MyACL

Question 3

If ‘auth’ is configured what parameters are necessary?

Answer 3

• auth md5 PASSWORD
• auth sha PASSWORD

Question 4

If ‘priv’ is configured what parameters are necessary?

Answer 4

• priv des KEY_VALUE
• priv 3des KEY_VALUE
• priv aes KEY_LENGTH KEY_VALUE

Question 5

Name 2 authentication hashes.

Answer 5

• sha
• md5

Question 6

Name 3 encryption protocols.

Answer 6

• des
• 3des
• aes

Question 7

What are the 5 parameters used when creating a USERNAME?

Answer 7

• snmp-server user USERNAME
• GROUPNAME
• v3
• auth MY_PASSWORD
• priv 3des KEY_VALUE

Question 8

In order for a User to be able to access a router what parameters in the GROUP must match the parameters in the USER?

Answer 8

• GROUPNAME
• v3
• noauth | auth | priv

Question 9

If a Group is created using the following statement what must be configured on the User statement:

snmp-server GROUP v3 noauth

Answer 9

• snmp-server user Joe GROUP v3

Question 10

If a Group is created using the following statement what must be configured on the User statement:

snmp-server GROUP v3 auth

Answer 10

• snmp-server user Joe GROUP v3 auth { md5 | sha } MyPassword

Question 11

If a Group is created using the following statement what must be configured on the User statement:

snmp-server GROUP v3 priv

Answer 11

• snmp-server user Joe GROUP v3 auth { md5 | sha } MyPassword priv { des | 3des | aes } KEY_NUMBER KEY_VALUE