Enable SNMPv3 on VMware VCSA 6.0 and vSphere 6.0

These are brief notes to get SNMPv3 enabled and configured for VMware’s vCenter Server Appliance and vSphere versions 6.0.

VCSA 6.0:

Command> snmp.set --authentication sha1
Command> snmp.set --privacy aes128
Command> snmp.hash --raw_secret true --auth_hash RAWauth_pass --priv_hash RAWpriv_passw
 Hash:
 Priv_key: aa6c280c4310c04ac5e2d700d40139809687e34e
 Auth_key: aaasdfasdfasdfasdfs5e2d700d4013912312312311
Command> snmp.set --users root/aa6c280c4310c04ac5e2d700d40139809687e34e/aaasdfasdfasdfasdfs5e2d700d4013912312312311/priv
Command> snmp.enable

ESXi / vSphere 6.0:

[root@esxi:~] esxcli system snmp set --authentication SHA1
[root@esxi:~] esxcli system snmp set --privacy AES128
[root@esxi:~] esxcli system snmp hash --raw-secret --auth-hash=RAWauth_pass --priv-hash=RAWpriv_passw
tous
Authhash: 5334a63527709bc888b7d668c74e2c8a969c599c
Privhash: 1231231231231231231212987098709871786865
[root@esxi:~] esxcli system snmp set --users root/5334a63527709bc888b7d668c74e2c8a969c599c/1231231231231231231212987098709871786865/priv
[root@esxi:~] esxcli system snmp set --enable true

I am currently toying around with Observium. and this was something not clearly documented.

This entry was posted in Technology. Bookmark the permalink.

3 Responses to Enable SNMPv3 on VMware VCSA 6.0 and vSphere 6.0

  1. Also, are some useful links such as how to
    download MIB modules for all vmware product or get a consise listing of OID/Names:

    * Downloading MIB modules http://kb.vmware.com/kb/1013445
    * OID list http://kb.vmware.com/kb/2054359
    * Understanding Layer 2 networking as reported by ESXi SNMP http://kb.vmware.com/kb/2118059
    * Restoring and copying vCenter Server alarms http://kb.vmware.com/kb/1032660
    * 5.5 firewall reset issue http://ikb.vmware.com/kb/2128660
    * Debugging with the esxcli system snmp test command (2033528) http://kb.vmware.com/kb/2033528
    * ESXi SNMP agent log entries for informs http://kb.vmware.com/kb/2033466
    * Special characters in the community string for SNMP traps are not retained http://kb.vmware.com/kb/1023998
    * Debugging notification (trap/inform) reception http://kb.vmware.com/kb/2035445

  2. Justin H says:

    Thank you for taking the time to reply to this post. I have corrected my statement. Thank you for the information.

Leave a Reply

Your email address will not be published. Required fields are marked *