Virtualisation/VMWARE/SNMPv3

Accueil	SysAdmin	Hobbies

VMWare - Configuration SNMPv3

sur un ESX

esxcli system snmp set -r -e 1 -l debug

engineid=$(esxcli system snmp get   |grep Engineid |awk '{print $2}')
esxcli system snmp get

SNMP_USER=s_monitoring
SECRETS_PATH=/vmfs/volumes/localDS-${HOSTNAME}/.secrets
mkdir ${SECRETS_PATH}

mv secret*  ${SECRETS_PATH}

esxcli system snmp set --authentication SHA1
esxcli system snmp set --privacy AES128

hash=$(esxcli system snmp hash --auth-hash ${SECRETS_PATH}/secret1 --priv-hash  ${SECRETS_PATH}/secret2)
echo $hash
authhash=$(echo $hash | awk '{print $2}')
privhash=$(echo $hash | awk '{print $4}')

esxcli system snmp hash --auth-hash ${SECRETS_PATH}/secret1 --priv-hash  ${SECRETS_PATH}/secret2
esxcli system snmp set --users ${SNMP_USER}/${authhash}/${privhash}/priv
esxcli system snmp test --user  ${SNMP_USER}  --auth-hash ${SECRETS_PATH}/secret1  --priv-hash  ${SECRETS_PATH}/secret2

esxcli system snmp set --remote-users ${SNMP_USER}/SHA1/${authhash}/AES128/${privhash}/${engineid}

Sur une appliance VCSA 7

shell
mkdir .secrets
vi .secrets/secret1
vi .secrets/secret2

exit

snmp.set --authentication SHA1
snmp.set --privacy AES128
snmp.hash  --auth_hash /root/.secrets/secret1 --priv_hash /root/.secrets/secret2

snmp.set --user monitoring_user@vsphere.local/c84c59c......1/787....d23/priv
snmp.get