MicroNugget: SNMPv3

In this video, Keith Barker covers how to configure SNMPv3. In addition to basic setup, he’ll also discuss how to verify it with a MIB Viewer and even capture packets with Wireshark to validate encryption is happening. Keith will talk about how to set up groups, users, and leverage various authentication features.

Previous versions of SNMP (v1, v2) had a reputation for very poor security protocols, leading to a common catchphrase among system administrators that “friends don’t let friends SNMP.” SNMP v3 addresses many of those security concerns, beginning by eliminating the use of community strings and leveraging authorized users who are neatly distributed into various groups. Version 3 also provides multiple security features, including encryption passwords and passphrases and the ability to ensure data integrity. Keith will demonstrate a basic configuration and then how to verify system function using a MIB Viewer. After exploring the security features, he’ll authenticate that encryption processes are functioning correctly by capturing packets using Wireshark.

Start learning with CBT Nuggets:

[jerrysanchez]

I love how his voice keeps you excited almost to the point of tearing up.

[johnson]

Keith, I learned so much from this video alone! Setting SNMP users, the ManageEngine MIB utility, and that you can type in the password in wireshark to decrypt data. Man, do they've got the right guy doing this job!

[vinzzbe]

This video is linked in the Cisco CCNA Security Course! Thanks for the vid! :-)

[MegaChickenfish]

If the rest of your channel is as good at explaining these things as this video consider me subscribed. The syntax of these commands is mind-bogglingly complicated (they don't label anything!!!) but understanding the pieces should help me at least be able to remember the steps (like creating a group and a user) and enough of the beginning (they all start with snmp-server) to use ? to figure out the rest.

[saralilin]

i like all your videos, you made things easy to understand...thanks

[KarthiVelou]

Awesome. Great explanation. Btw what was the command line tool you were using at the start?

[thedjarte]

it makes me feel like 5 y-o in some sort of  SNMP play school  ... but very well laid out, thank you!

[ra]

It would help, if you can cover the other side of the coin.. meaning sending snmpv3 traps from switch and observe the same on manager "Trap Viewer"..

[DhavalBrahmbhatt]

I am sure it is a good video but half way through I fell asleep and had a nightmare called "snmp v3"