Comments on: How to configure SNMP v3 on Nortel Ethernet Routing Switches

By: Jaff

Jaff — Tue, 02 Feb 2010 02:24:05 +0000

Hi Michael,

apologies for late reply , Working for Passport 8006

Thanks

By: Michael McNamara

Michael McNamara — Wed, 27 Jan 2010 04:52:06 +0000

Hi Jaffar,

What switch are you inquiring about? The commands for the ERS 8600 are above;

ERS-8610:5# config snmp-v3 community commname first new-commname readme123
ERS-8610:5# config snmp-v3 community commname second new-commname writeme123

Those commands will set the SNMP read and write community strings for the switch. You can poll the switch using SNMPv1 or SNMPv2c.

Good Luck!

By: Jaff

Jaff — Wed, 27 Jan 2010 04:31:33 +0000

Michael,

Could you please tell me how do I go about changing current snmpv1 or V2 comm string?

Many thanks
Jaffar

By: Michael McNamara

Michael McNamara — Wed, 28 Oct 2009 03:11:56 +0000

Hi Tom,

That’s a great idea… I would just warn folks to be careful in the event that they are still relying on SNMP v1/v2 and don’t realize it. It could be that HP Open View or maybe MRTG are performing SNMP v1/v2 polls. You could also write an access policy to restrict which IP addresses can perform SNMP polling.

Thanks for the comment!

By: Tom

Tom — Wed, 28 Oct 2009 00:36:25 +0000

Once folks have SNMP v3 set up, they may want to consider disabling access to SNMP v1/v2c by issuing the following commands:

TEST_ERS4500(config)#no snmp-server community rw
TEST_ERS4500(config)#no snmp-server community ro

I checked and these work on ES 470 and ERS 4500/5500 switches, along with the ERS 8600 switch