Configure SNMPV3 on Cisco Catalyst 2960.

I found that SNMPV3 works only with Cisco ios ver 15.2 and higher.

If your Cisco IOS is not 15.2 or higher you need download it from here.

1. in this configuration, we will create 3 groups.

GroupRW – have read and write permission
GroupR – have only read permission
Full-Access – to give access to all the snmp Tree view

---

Lets START…

Switch(config)#snmp-server view Full-Access iso included

In this command, we give read permission to all iso view Tree

---

Switch(config)#snmp-server enable traps snmp linkdown linkup

This command permits the SNMP service to send traps of link up or down.

---

Switch(config)#snmp-server group GroupRW v3 priv read Full-Access write Full-Access

With this command, we created and give Read and write permission to the groupRW to all the ISO Tree.

---

Switch(config)#snmp-server user TestRW GroupRW v3 aut MD5 Master200 priv des Master300

With this command, We created user TestRW in GroupRW with MD5 Hash password “Master200” and DES Encryption password “Master300”.

---

Switch(config)#snmp-server group GroupRW v3 priv context vlan- match prefix read Full-Access write Full-Access notify Full-Access

We give GroupRW privileges to all VLANs.

---

Switch(config)#snmp-server group GroupR v3 priv read Full-Access

We created the Seconde group “GroupR” With only Read permission to all the ISO Tree)

---

Switch(config)#snmp-server user TestR GroupR v3 aut MD5 Slave200 priv des Slave300

We created user TestR in GroupR with MD5 password “Slave200” and DES password “Slave300”.

---

After defining two types of SNMPV3, one has only read and the other for reading and writing. We need to associate the different types of SNMP V3 with the IP addresses we want.

Switch(config)#snmp-server host X.X.X.X version 3 priv TestRW

We give HOST Ip X.X.X.X permission Read and Write to the switch.

Switch(config)#snmp-server host X.X.X.X version 3 priv TestR

We give HOST Ip X.X.X.X permission only to read to the switch

This is the full config just Copy&Paste.

Switch(config)#snmp-server view Full-Access iso included
Switch(config)#snmp-server enable traps snmp linkdown linkup

Switch(config)#snmp-server group GroupRW v3 priv read Full-Access write Full-Access

Switch(config)#snmp-server user TestRW GroupRW v3 aut MD5 Master200 priv des Master300

Switch(config)#snmp-server group GroupRW v3 priv context vlan- match prefix read Full-Access write Full-Access notify Full-Access

Switch(config)#snmp-server group GroupR v3 priv read Full-Access

Switch(config)#snmp-server user TestR GroupR v3 aut MD5 Slave200 priv des Slave300

Switch(config)#snmp-server host X.X.X.X version 3 priv TestRW
Switch(config)#snmp-server host X.X.X.X version 3 priv TestR