Create Read Only SNMPv3 user – IOS

snmp-server group viewers v3 auth
snmp-server user snmpView viewers v3 auth md5 uHNKmuLP0lXOp8ODFkmJ
snmp-server group viewers v3 auth read viewConfig
snmp-server view viewConfig system included
snmp-server view viewConfig internet included
snmp-server view viewConfig mib-2 included
snmp-server view viewConfig cisco included
snmp-server view viewConfig ciscoConfig included
snmp-server view viewConfig ciscoImageMIB included
snmp-server view viewConfig snmpMIB included

Create Read Write SNMPv3 user – IOS

snmp-server group writers v3 auth
snmp-server user snmpWrite writers v3 auth md5 jB7HCiNBoGsk5qgfasHQ
snmp-server group writers v3 auth write writeConfig
snmp-server view writeConfig system included
snmp-server view writeConfig internet included
snmp-server view writeConfig mib-2 included
snmp-server view writeConfig cisco included
snmp-server view writeConfig ciscoConfig included
snmp-server view writeConfig ciscoImageMIB included
snmp-server view writeConfig snmpMIB included

Create Read Only SNMPv3 user – ASA

snmp-server group viewers v3 auth
snmp-server user snmpView viewers v3 auth md5 uHNKmuLP0lXOp8ODFkmJ
snmp-server host inside 0.0.0.0 version 3 snmpView

NOTE: Please keep in mind that certain ACLs might require modification in order to allow SNMP protocol access.

If you need to capture configuration of Windows-based DHCP server for documentation or review purposes, this might be handy:

netsh -r lab-dc-01 dhcp server dump > C:\dhcp-lab-dc-01.txt

NOTE: lab-dc-01 in example command is name of the Windows server which has DHCP installed.

Example DHCP server dump from Windows Server 2008 R2 you can see here. It contains one scope for subnet 172.16.90.0/24, option for DNS and default gateway defined.

Usually I tend to create DHCP server on Windows Server. However, sometimes there is no server on site. Only what I have are network devices, workstations and voip phones. In those cases I used to create DHCP server on switches. As environment I operate in contains mainly Cisco devices, each location has at least one or more Cisco Catalyst switches (2960 or 3560) it is possible to provide DHCP service using IOS features. Example contains DHCP configuration for network with different VLANs for data, voice and printers.

Below is short description and set of commands demonstrating how to setup:

• DHCP scopes
• Exclusions
• Define DHCP helper on the interface
• Check status of DHCP assignments

(more…)

Configuration snippet I use to enable SSH on Cisco 2811 ISR and Catalyst 3560, but it will work on all Cisco IOS devices with appropriate IOS image which allows SSH to be enabled (IOS which has k9 in image name contains crypto compnents which allow to enable SSH).

(more…)