[ietf79-tech] Juniper configuration for SNMPv3

[Bill Fenner]

It turns out that the passwords did not transfer the way I thought
they would.  Can you please set the snmp v3 usm local-engine user
netdisco authentication-sha authentication-key to "Disco stu does not
advertise."?  I'll let chelliot tell you what the plain text values of
his passwords should be.

Thanks,
  Bill

On Thu, Nov 4, 2010 at 12:40 PM, Bill Fenner <fenner at gmail.com> wrote:
> Hi James,
>
> Would you mind adding this configuration to the Juniper routers?  Feel
> free to specify a different SNMP location string.
>
> Thanks,
>  Bill
>
>
> snmp {
>   location "IT Room";
>   v3 {
>       usm {
>           local-engine {
>               user chelliot {
>                   authentication-sha {
>                       authentication-key
> "$9$mTQntuOEhrCApBREyr8X7-24oJGkqfUDmTQz6/uO1hev8LNVb27NwgaZkqP5QzCtO1ReM8EhK8xNY2aZUimf3nC1EcAtvWLXbwoJGDi.Fn/pO1GD/Cu0IRYg4aDifTzF695TRhSrvMikqf5F6/tpO13n/tpu1INdVwYoGDi.mTHk.5zF/9vW8L-V";
> ## SECRET-DATA
>                   }
>                   privacy-none;
>               }
>               user chelliot-rw {
>                   authentication-sha {
>                       authentication-key
> "$9$HmPQ/CtB1hn69pOBEhKM8XbsYgoDjqaJHmPfzFCtu1SrKvL7Nb8L-w24Djk.Pfn/tuOSlKB1yKWLVb24aGHqTQnuBI6/revMN-YgoJGi5QF9tuoJFnCA0OVws2JGqmf5z3.mO1RhrlGDjq.5zF/9tuTQF/9Cu0Lx7-VYoJGiHmUDi.f5F3reKvX7";
> ## SECRET-DATA
>                   }
>                   privacy-none;
>               }
>               user netdisco {
>                   authentication-sha {
>                       authentication-key
> "$9$leaMWxbs2JZjdVwgaJDjP5QFApuO1SyKIRlMW87Ns24ZHqPfzn6AQz/t0BSyevW8db24aH.PJZkPTzCA0BIhlKXxd4JGVbqmf56/uO1RhrLxNw241RNdsYoaCtp0RhKM8L7-vMaZUjq.hSyKvL7Nbw24XxNbws4oz3n/Cu1RhrlMcSrv8LN-qmPfFn";
> ## SECRET-DATA
>                   }
>                   privacy-none;
>               }
>           }
>       }
>       vacm {
>           security-to-group {
>               security-model usm {
>                   security-name netdisco {
>                       group ietf-rw;
>                   }
>                   security-name chelliot {
>                       group ietf;
>                   }
>                   security-name chelliot-rw {
>                       group ietf-rw;
>                   }
>               }
>           }
>           access {
>               group ietf {
>                   default-context-prefix {
>                       security-model usm {
>                           security-level authentication {
>                               read-view default;
>                               write-view default;
>                               notify-view default;
>                           }
>                       }
>                   }
>               }
>               group ietf-rw {
>                   default-context-prefix {
>                       security-model usm {
>                           security-level authentication {
>                               read-view default;
>                               write-view default;
>                               notify-view default;
>                           }
>                       }
>                   }
>               }
>           }
>       }
>   }
>   engine-id {
>       use-mac-address;
>   }
>   view default {
>       oid 1 include;
>   }
>   community ietf79 {
>       authorization read-only;
>       clients {
>           130.129.0.0/16;
>           2001:df8::/32;
>       }
>   }
> }
>