Monitoring with SNMP

NetLab lab Intermediate 3 tasks 20 points

The monitoring server NMS (10.1.1.50) needs to read R1:

An SNMPv2c read-only community BranchRO that only NMS may use: limit it with standard ACL 20.
Location Branch office rack 1.
An SNMPv3 group OPS with the authPriv level, and a user ops1 in it (SHA password Auth!Ops9, AES 128 password Priv!Ops9).

How it works: this is VulnTech NetLab, a network simulator running in your browser. Click a device in the diagram to open its console and type commands, just like on real equipment (? shows help, Tab finishes a word). Click a cable to inspect it. Tasks tick themselves off as you complete them; questions are answered in the box under each task. Your work is kept if you reload; Reset starts the network over.

Solution explanation

The ACL on the community makes R1 ignore SNMP from anyone else (PC2 just times out). The v3 group sets the minimum security level (priv = authPriv), and the user carries the passwords. SNMPv3 users don't show in the running-config, as on real IOS.

Show solution

[R1]
enable
configure terminal
access-list 20 permit host 10.1.1.50
snmp-server community BranchRO RO 20
snmp-server location Branch office rack 1
snmp-server group OPS v3 priv
snmp-server user ops1 OPS v3 auth sha Auth!Ops9 priv aes 128 Priv!Ops9
end
[NMS]
snmpget -v2c -c BranchRO 10.1.1.1 sysName.0 sysLocation.0
snmpget -v3 -u ops1 -l authPriv -a SHA -A Auth!Ops9 -x AES -X Priv!Ops9 10.1.1.1 sysName.0
[PC2]
snmpget -v2c -c BranchRO 10.1.1.1 sysName.0