Configuring an SNMP user on a GS-23xx series switch (SNMPv3)

Description:

This article describes how to configure an SNMP user on a GS-23xx series switch and monitor the switch with the LANmonitor via SNMPv3. Of course It is also possible to use any other monitoring tool which supports SNMPv3.

Requirements:

• LCOS SX as of version 3.32 RU7 (download latest version)
• LANmonitor as of version 10.50 Rel (download latest version) 
• Any web browser for accessing the webinterface 

Vorgehensweise:

1) Configuring the SNMP user on the switch:

1.1) Connect to the webinterface of the device, go to the menu System → SNMP → System and make sure, that the option Enable is selected for SNMP State.

Image of a technical SNMP system configuration interface showing options such as System Information, SNMP State set to Disable, and Syslog settings.

1.2) Go to the menu System → SNMP → Users and click on Add new user to create an SNMP user.

Screenshot of a System Information SNMP Users Configuration interface showing options for user security, authentication protocols, and privacy settings.

1.3) Modify the following parameters and click Apply:

• User Name: Enter a descriptive user name (in this example SNMP-User).
• Security Level: Make sure, that the option Auth, Priv is selected. This enables authentication via login credentials (Auth) and the data is encrypted (Priv).
• Authentication Protocol: In the dropdown menu select the optiion SHA.
• Authentication Password: Enter a password for authentication. In conjunction with the user name it is used for the login. 
• Privacy Protocol: In the dropdown menu select the option AES.
• Privacy Password: Enter a p assword . It is used for data encryption.

Screenshot of an SNMP user configuration interface showing fields for user name, security level, authentication protocol, authentication password, privacy protocol, and privacy password, with options to delete entries.

1.4) Go to the menu System → SNMP → Groups and click on Add new group to create an SNMP group.

Screenshot of a system configuration interface displaying options for SNMP groups, security models, time settings, account information, and syslog management.

1.5) Modify the following parameters and click Apply:

• Security Model: Make sure, that the option usm is selected. USM (User-based Security Model) is only used for SNMPv3.
• Security Name: Make sure, that the SNMP user created in step 1.3) is selected.
• Group Name: Enter a descriptive name for the SNMP group (in this example SNMP-Group).

Screenshot of an SNMP groups configuration menu showing options to delete and add security models with specified security names and group names.

1.6) Go to the menu System → SNMP → Views and click on Add new view to create an SNMP view. 

Screenshot of a System Information SNMP Views Configuration interface displaying options such as Time, Delete, View Name, View Type, OID Subtree, Communities, Users, Groups, and Access settings.

1.7) Modify the following parameters and click Apply:

• View Name: Enter a descriptive name for the SNMP view (in this example SNMP-View).
• View Type: Make sure, that the option included is selected.
• OID Subtree: Enter the string .1.3. The OID path of LANCOM devices begins with this string. 

Screenshot of an SNMP Views Configuration interface showing options to delete and add SNMP views with fields for View Name, View Type, and OID Subtree.

1.8) Go to the menu System → SNMP → Access and click on Add new access to create the SNMP access.

Screenshot of a system configuration interface showing SNMP access settings, including security models, security levels, and access views for groups and users.

1.9) Modify the following parameters and click Apply:

• Group Name: Make sure, that the SNMP group created in step 1.5) is selected. 
• Security Model: In the dropdown menu select the option usm.
• Security Level: In the dropdown menu select the option Auth, Priv.
• Read View Name: Make sure, that the SNMP view created in step 1.7) is selected. 
• Write View Name: Make sure, that the SNMP view created in step 1.7) is selected. 

Screenshot of a network configuration interface for SNMP, showing options to delete and add SNMP group access with fields for group name, security model, security level, and read/write view names.

1.10) Go to the menu Maintenance → Save/Restore → Save Start and click Save to save the configuration as start configuration .

Image showing a technical configuration menu with options such as Save as Start Configuration, Restart Device, Cold Restart, Firmware, Save/Restore, and Factory Defaults.

2) Monitoring the switch via LANmonitor:

2.1) Connect to the switch via the LANmonitor, make sure, that the protocol  SNMP3  is selected and enter the  login credentials for the SNMP user entered in step 1.3) . 

Error message on a technical device interface displaying missing login credentials for network monitoring with options to enter data or abort the operation.

2.2) The switch can now be monitored via the LANmonitor and various status information can be read out. If write permissions are given, individual ports can be deactivated and reactivated, for example.

Image of a technical user interface displaying various Gigabit Ethernet ports configurations and system information monitoring settings.