S5700 SNMP Password Complexity Check

Latest reply: Apr 13, 2018 10:47:24 1612 1 0 0

Issue Description:

  Customer have a global SNMP configuration across in their network which is not getting applied due to password strength check.
Awaiting update regarding the reported issue as customer unable to add the device under monitoring and unaware of the device health and other status.

 

Handling Process:

  Please see my attachment for the snmpv3 configuration guide and By default, the complexity check is enabled for SNMPv3 user passwords. If the password fails in the check, the configuration fails. You can run the snmp-agent usm-user password complexity-check disable command to disable the complexity check for SNMPv3 user passwords. It is recommended that the complexity check for SNMPv3 user passwords is enabled to ensure system security


Root Cause:

  Because after v200r002 version, the configuration of the SNMP protocol community have the request for the complexity of the password, request: password contains at least two characters, including: uppercase and lowercase letters, Numbers, special characters (not including question marks and Spaces).For pure digital or character groups are words suggest setting is not successful.Can use the command closing device password complexity of calibration, command: SNMP agent - community complexity - check the disable, the length of the links, you can set the password when, after v200r002 version also has the limit for password length, minimum 8 .Can set the password min - length number set the minimum length password.

Solution:

1. we can diable the password complexity check .

2.we can set the password min-length .

3. test the snmp-agent usm-user password setting .

END

This post was last edited by Skay at 2018-09-12 00:52.
  • x
  • convention:

wissal
MVE Created Apr 13, 2018 10:47:24 Helpful(0) Helpful(0)

useful document, thanks
  • x
  • convention:

I%20would%20like%20to%20share%20with%20you%20my%20experience%2C%20I'm%20telecommunications%20engineer%2C%20currently%20senior%20project%20manager%20at%20an%20operator%2C%20partner%20of%20Huawei%2C%20in%20the%20radio%20access%20network%20department%2C%20for%2020%20years%20I%20managed%20several%20types%20of%20projects%2C%20for%20the%20different%20nodes%20of%20the%20network.%3Cbr%2F%3EAt%20the%20same%20time%2C%20I%20give%20courses%20in%20universities%20as%20a%20temporary%2C%20to%20bring%20the%20operational%20side%20of%20telecommunication%20technologies%20to%20students%2C%20for%20network%20supervision%20systems%2C%20mobile%20radio%20networks%20and%20access%20networks%20etc.

Comment

Reply
You need to log in to reply to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Login and enjoy all the member benefits

Login and enjoy all the member benefits

Login