Trap receiver is not able to receive snmp v3 tarps for AUTHPRIV security model, sent from AdventNet based trap sender

in SNMP API • 12 years ago

Our application is using AdventNet SNMP API for receiving traps.

When I am sending traps from AdventNet based trap sender, my application is not receiving snmpv3 traps for AUTHPRIV security model.

Although it is receiving snmpv3 traps for NOAUTHNOPRIV.

It will be a great help if you can explain where the problem is and how to solve it?

I believe that the trap receiver application is not getting the correct engine id.

It is using following api to get the engine id.

SNMPAPI api = new SNMPAPI();

api.getSnmpEngineID();

and I think above api is not working correctly and that's why trap receiver application is not receiving snmpv3 traps for AUTHPRIV case,
since engine id plays an important role for creating keys in snmp v3 protocol for AUTHPRIV security model.

-neha

Replies(8)

Guest

Trap receiver is not able to receive snmp v3 tarps for AUTHPRIV security model, sent from AdventNet based trap sender

12 years ago

Dear Neha,

Greetings.

The engineID of the agent should be set in the SnmpEngineEntry and USMUserEntry of Trap Receiver.
But api.getSnmpEngineID() method will give only the manager's engineID.

Please set the agent's engineID in the Trap Receiver's SnmpEngineEntry and USMUserEntry, and see if you are able to receive snmpv3 traps.

Please refer our example application snmpv3trapd.java present in
<product-home>/examples/ low_level_api_examples/snmpapps/
folder for better understanding.

Regards,
Pradheep

pradheep.v Employee

Trap receiver is not able to receive snmp v3 tarps for AUTHPRIV security model, sent from AdventNet based trap sender

12 years ago

Dear Neha,

Before trap receiver starts listening for traps, EngineID of the agent can be obtained by performing Discovery process.

Please take a look into our help documentation link, which contains methods to perform discovery process through our API.

http://www.webnms.com/snmp/help/snmpapi/snmpv3/v3/configureuser.html

Regards,

Pradheep

Guest

Trap receiver is not able to receive snmp v3 tarps for AUTHPRIV security model, sent from AdventNet based trap sender

12 years ago

Hi Pradheep,

Thanks for your reply.

I ran snmpv3tapd.java program (located in, <product-home>/examples/ low_level_api_examples/snmpapps/ ,folder)
with following command line arguments:
-d -p 1162 -c public -e 0x3139322e3136382e38302e3223313631 -u privUser -a MD5 -w authUser -pp DES -s privUser

and its receiving snmpv3traps for authpriv security model.

But in this program we are supplying agent's engine id as a command line argument.

I need an interface (i.e. api) that will provide agent's engine id at manager's end.

I should not ask customers to provide the engine id of the agent.
My trap reveiver application ,itself, should be able to get the engineID of agent and receive traps.

Regards,
Neha

Guest

Trap receiver is not able to receive snmp v3 tarps for AUTHPRIV security model, sent from AdventNet based trap sender

12 years ago

Hi Pradheep,

Thanks for your reply.

I ran snmpv3tapd.java program (located in, <product-home>/examples/ low_level_api_examples/snmpapps/ ,folder)
with following command line arguments:
-d -p 1162 -c public -e 0x3139322e3136382e38302e3223313631 -u privUser -a MD5 -w authUser -pp DES -s privUser

and its receiving snmpv3traps for authpriv security model.

But in this program we are supplying agent's engine id as a command line argument.

I need an interface (i.e. api) that will provide agent's engine id at manager's end.

I should not ask customers to provide the engine id of the agent.
My trap receiver application ,itself, should be able to get the engineID of agent and receive traps.

Regards,
Neha

neha_agra..

Trap receiver is not able to receive snmp v3 tarps for AUTHPRIV security model, sent from AdventNet based trap sender

12 years ago

neha_agra..

Trap receiver is not able to receive snmp v3 tarps for AUTHPRIV security model, sent from AdventNet based trap sender

12 years ago

raj900

Re: Trap receiver is not able to receive snmp v3 tarps for AUTHPRIV security model, sent from AdventNet based trap sender

11 years ago

hey neha me too using webnms snmp api. i have these snmpv3trap and snmpv3trapd.java files in eclipse ide ok. i want to send and receive snmpv3 traps on my own pc (localhost). i don't know what to input in the command line. look at this :

snmpv3trap [-d] [-p port][-e engineID(0x....)]
[-a auth_protocol] [-w auth_password] [-s priv_password]
[-n contextName] [-i contextID][-pp privProtocol(DES/AES-128/AES-192/AES-256/3DES)] -m MIB_files userName
host TimeTicksvalue OIDvalue [OID value] ...

i don't know what is the userName ,its password, etc,.... what is the default values for these?

pradheep.v Employee

Re: Trap receiver is not able to receive snmp v3 tarps for AUTHPRIV security model, sent from AdventNet based trap sender

11 years ago

Dear Rajshekar,

The example applications snmpv3trap.java and snmpv3trapd.java are developed in such a way that only one user can be configured to it.

There is no default user configuration as such.

Using our API, you can develop applications with your own user configuration.

SAMPLE USAGES:

Trap Sender:

java snmpv3trap -p 8003 -e 0x1234567890 -a MD5 -w privUser -s privUser -pp DES privUser localhost 1000 1.5.0 1.3.0 STRING exe

TrapReceiver:

java snmpv3trapd -p 8003 -e 0x1234567890 -u privUser -a MD5 -w privUser -s privUser -pp DES

The incoming SNMPv3-Trap will be processed by the Trap receiver by,

1) Checking if the userEntry(with the same userName) is configured in the Trap receiver.(irrespective of security levels)

2) Checking for authentication with the help of auth credentials,(if the security level is AUTH_PRIV, AUTH_NO_PRIV)

3) Decrpting the PDU using priv credentials.(if the security level is AUTH_PRIV)

Hence whatever user credentials that are set in the snmpv3trapd.java(Trap receiver) has to be used in the snmpv3trap.java application so that correct authenticated SNMPv3Traps are received and decrypted properly as well.

These things forms the base for USM security model which are proposed in rfc3414 and rfc3411.

Understanding these RFC's will be of great help for your research and developments.

Also the below links will be useful as will. Kindly take a look.

http://en.wikipedia.org/wiki/Simple_Network_Management_Protocol

http://www.tcpipguide.com/free/t_TCPIPNetworkManagementFrameworkandProtocolsSNMPand.htm

Regards,

Pradheep

Top Reply

Response title

Attachments

New to this Portal?