{"id":210,"date":"2024-08-01T15:24:16","date_gmt":"2024-08-01T07:24:16","guid":{"rendered":"https:\/\/www.lerwee.cn\/?p=210"},"modified":"2025-10-15T16:41:56","modified_gmt":"2025-10-15T08:41:56","slug":"%e7%9b%b4%e8%a7%82%e5%9c%b0%e5%88%a4%e6%96%ad%e6%95%85%e9%9a%9c%e5%bd%b1%e5%93%8d%e8%8c%83%e5%9b%b4%ef%bc%8c%e8%bf%99%ef%bc%8c%e5%b0%b1%e6%98%af%e4%b9%90%e7%bb%b4ibs","status":"publish","type":"post","link":"https:\/\/www.lerwee.com\/en\/2024\/08\/01\/%e7%9b%b4%e8%a7%82%e5%9c%b0%e5%88%a4%e6%96%ad%e6%95%85%e9%9a%9c%e5%bd%b1%e5%93%8d%e8%8c%83%e5%9b%b4%ef%bc%8c%e8%bf%99%ef%bc%8c%e5%b0%b1%e6%98%af%e4%b9%90%e7%bb%b4ibs\/","title":{"rendered":"Network Device SNPv3 Configuration Tutorial"},"content":{"rendered":"

1\u3001 Snmpv3 Overview<\/h2>\n\n\n\n

1\u3001 Snmpv3 Overview\nSNPv3 is an abbreviation for Simple Network Management Protocol version 3. It is a network management protocol<\/p>\n\n\n\n

Compared to previous versions, SNMPv3 has stronger security and scalability. It provides mechanisms such as authentication, encryption, and access control to ensure the confidentiality, integrity, and availability of management information. SNPv3 uses username and password based authentication to prevent unauthorized access and tampering. It also supports packet encryption to protect transmitted information from eavesdropping and modification. In addition, SNPv3 introduces an Access Control List, which allows administrators to control access to management information as needed. It also supports more complex management models, such as role-based access control (RBAC) and view based access control (VACM), making network management more flexible and refined.The main features include:<\/strong><\/p>\n\n\n\n

<\/h4>\n\n\n\n

1. Encrypt transmission<\/h4>\n\n\n\n

SNPv3 supports packet encryption and can choose AES and DES encryption algorithms to ensure the security of data transmission.<\/p>\n\n\n\n

2. Strong authentication mechanism<\/h4>\n\n\n\n

SNPv3 provides two security mechanisms: authentication and privacy.<\/p>\n\n\n\n

    1) Authentication type<\/strong><\/p>\n\n\n\n

Authentication is used to verify the identity of SNMP requesters and prevent identity forgery. SNPv3 supports the following two types of authentication:<\/p>\n\n\n\n

MD5- Use MD5 hash algorithm for authentication<\/p>\n\n\n\n

SHA - Use SHA hash algorithm for more secure authentication<\/p>\n\n\n\n

    2) Privacy type<\/strong><\/p>\n\n\n\n

The privacy type determines whether and how SNMP messages are encrypted to prevent eavesdropping. Supports the following privacy types:<\/p>\n\n\n\n

DES - Encrypt SNMP messages using DES algorithm<\/p>\n\n\n\n

AES - Encrypt SNMP messages more securely using AES algorithm<\/p>\n\n\n\n

None - Do not encrypt<\/p>\n\n\n\n

By configuring SNPv3 users to use different levels of authentication and privacy type combinations, different levels of security protection can be obtained.<\/p>\n\n\n\n

It is generally recommended to use a combination of SHA authentication and AES privacy type for higher security.<\/p>\n\n\n\n

Identity verification prevents deception, and privacy types provide confidentiality. The joint use of the two can establish a secure and reliable SNPv3 management.<\/p>\n\n\n\n

3. Access control<\/h4>\n\n\n\n

Access control models with different security levels can be set up to achieve access permission control.<\/p>\n\n\n\n

4. Ensure data integrity<\/h4>\n\n\n\n

Verify through authentication mechanism that the message has not been tampered with.<\/p>\n\n\n\n

5. Replay attack protection<\/h4>\n\n\n\n

Each SNMPv3 packet has a unique ID, which can prevent replay attacks.<\/p>\n\n\n\n

6. Automatic negotiation mechanism<\/h4>\n\n\n\n

The management station and agent can negotiate to use the highest security level.<\/p>\n\n\n\n

7. Scalability<\/h4>\n\n\n\n

Expansion can easily introduce new security models and encryption protocols.<\/p>\n\n\n\n

2\u3001 The basic structure of the SNPv3 system<\/h2>\n\n\n\n

The SNMPv3 system adopts a client\/server mode:<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

3\u3001 Specific configuration process<\/h2>\n\n\n\n

1. Network device configuration:<\/h4>\n\n\n\n

Login to the switch web page to configure SNMPv3, configuration is required<\/p>\n\n\n\n

Username: Fill in the following image as' Administrator<\/p>\n\n\n\n

Authentication type: Fill in MD5 as shown in the following figure<\/p>\n\n\n\n

Trap host address: Server IP of Zabbix server, fill in the corresponding address<\/p>\n\n\n\n

Privacy type: The following image shows no need for privacy<\/p>\n\n\n\n

Password: public Ta<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

2. Corresponding Zabbix host configuration<\/h4>\n\n\n\n

Security name: Fill in the switch configuration two-point user name<\/p>\n\n\n\n

Security level: There are three types: noAuthNopriv (no authentication, no privacy), authNopriv (authentication required, no privacy), and authPriv (authentication required, no privacy). The switch is configured to require authentication without privacy, so authNopriv is selected<\/p>\n\n\n\n

Verification Protocol: Corresponding switch configuration MD5<\/p>\n\n\n\n

Verification password: Fill in the password public Ta for the switch configuration<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

If encryption needs to be configured and privacy is required, select the security level as authPriv, and match the privacy protocol and key with the switch configuration.<\/p>\n\n\n\n

The above is the complete content of configuring network device SNPv3 with Zabbix.<\/p>","protected":false},"excerpt":{"rendered":"

\u4e00\u3001Snmpv3\u7b80\u8ff0 SNMPv3\u662fSimple Network Management Protocol ve […]<\/p>","protected":false},"author":1,"featured_media":231,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[50,51],"class_list":["post-210","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technical-articles","tag-network-management","tag-snmpv3"],"_links":{"self":[{"href":"https:\/\/www.lerwee.com\/en\/wp-json\/wp\/v2\/posts\/210","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lerwee.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.lerwee.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.lerwee.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lerwee.com\/en\/wp-json\/wp\/v2\/comments?post=210"}],"version-history":[{"count":2,"href":"https:\/\/www.lerwee.com\/en\/wp-json\/wp\/v2\/posts\/210\/revisions"}],"predecessor-version":[{"id":230,"href":"https:\/\/www.lerwee.com\/en\/wp-json\/wp\/v2\/posts\/210\/revisions\/230"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.lerwee.com\/en\/wp-json\/wp\/v2\/media\/231"}],"wp:attachment":[{"href":"https:\/\/www.lerwee.com\/en\/wp-json\/wp\/v2\/media?parent=210"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.lerwee.com\/en\/wp-json\/wp\/v2\/categories?post=210"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.lerwee.com\/en\/wp-json\/wp\/v2\/tags?post=210"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}