Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision | |||
| tech-notes:snmp [2021/01/08 13:26] – [Cisco Config] gerardorourke | tech-notes:snmp [2021/01/08 13:30] (current) – [SNMP Trace] gerardorourke | ||
|---|---|---|---|
| Line 44: | Line 44: | ||
| - | Packet 1: It asks the router for via SNMP for its engine ID (Unqiue for every router) – I believe the reason is you need this to encrypted the password. | + | Packet 1: It asks the router for via SNMP for its engine ID (Unqiue for every router) – needed |
| Packet 2: Router replies with EngineID | Packet 2: Router replies with EngineID | ||
| - | Packet 3: we send an encrypted PDU | + | Packet 3: we send an encrypted PDU (note username and engineID are in header and are not encrypted) |
| Packet 4: we get a report back in clear text of “The total number of packets received by the SNMP engine which were dropped because they appeared outside of the authoritative SNMP engine' | Packet 4: we get a report back in clear text of “The total number of packets received by the SNMP engine which were dropped because they appeared outside of the authoritative SNMP engine' | ||
| - | |||
| This is because have not set the EngineTime in our requests (as we don’t know what it should be set to!) | This is because have not set the EngineTime in our requests (as we don’t know what it should be set to!) | ||
| + | The response also include the EngineTime, i.e. contains: | ||
| + | *msgAutoritativeEngineID | ||
| + | *msgAutoritativeEngineBoots | ||
| + | *msgAutoritativeEngineTime | ||
| + | |||
| - | Packet 5: we sent the request again (encrypted) but now also with the correct EngineBoot and Time values. | + | Packet 5: we sent the request again (encrypted) but now also with the correct EngineBoot and EngineTime |
| - | Packet 6: We get our response (encrypted) | + | Packet 6: We get a successful |