Dell OS10: Configure SNMPv3 on PowerSwitch Switches

SNMPv3 is the only SNMP version that provides real security — message integrity, authentication, and encryption — which makes it the right choice for monitoring production Dell PowerSwitch infrastructure. Dell's official knowledge base documents a complete SNMPv3 configuration for SmartFabric OS10 that combines a restricted view, an authenticated user with SHA/AES, and host notifications. This article walks through the full configuration and shows how to verify it end to end with the snmpwalk tool on a Linux host, so you can be sure monitoring works before you rely on it.

Sample SNMPv3 Configuration on OS10

The following configuration is a working sample for an OS10 switch running firmware 10.5.2.6. It creates a group with privacy (encryption), a view restricted to a single OID subtree, a user with SHA authentication and AES privacy, and an SNMP host for informs:

snmp-server group mysnmpgroup 3 priv read snmpview
snmp-server host 100.127.X.X informs version 3 priv user1
snmp-server location SNMP-TEAM-PA
snmp-server user user1 mysnmpgroup 3 auth sha myshaP@ssw0rd priv aes Myencryptedkey
snmp-server view snmpview 1.3.6.1 included

Note how the view snmpview limits the group to OID 1.3.6.1 — a read-only, scoped view is a security best practice for any monitoring account.

Installing the SNMP Tools on Ubuntu

To test the configuration you need the SNMP command-line tools. On Ubuntu (the example uses 18.04) install them with:

sudo apt update
sudo apt install snmpd snmp libsnmp-dev

Verifying SNMPv3 with snmpwalk

snmpwalk issues SNMP GETNEXT requests to walk a subtree. Assuming the switch IP is 192.168.0.10 and the OID to query is 1.3.6.1.2.1.1 (system group), run:

snmpwalk -v3 -l authPriv -u user1 -a sha -A myshaP@ssw0rd -x aes -X Myencryptedkey 192.168.0.10 1.3.6.1.2.1.1

A successful response looks like:

iso.3.6.1.2.1.1.1.0 = STRING: "Dell EMC Networking OS10 Enterprise.
Copyright (c) 1999-2021 by Dell Inc. All Rights Reserved.
System Description: OS10 Enterprise.
OS Version: 10.5.2.6."

If all variables in the subtree are displayed, the switch is correctly configured for SNMPv3 monitoring. If the query fails, check that the username, auth passphrase, and privacy passphrase exactly match the snmp-server user line, and that the management network allows UDP 161 between the NMS and the switch.

Related Reading

SNMP monitoring works hand in hand with a proper monitoring platform — see our Zabbix SNMP monitoring setup guide for the NMS side of the story. For more Dell and multi-vendor CLI context, browse the multi-vendor network CLI cheat sheet and the HPE 3PAR configuration principles article for the storage side of Dell/HPE estates.

原文链接：https://www.dell.com/support/kbdoc/en-us/000204282/configure-snmp-v3-on-os10-switches