终于成功了,自己来回答下:
步骤1:pwtokey -p HMAC-MD5 -u auth tivolisnmp 143.1.2.33
返回两个串 串A 串B
步骤2:在/etc/snmpdv3.conf
USM_USER tivoli - HMAC-MD5 串B - - L -
VACM_GROUP group1 USM tivoli -
VACM_VIEW group1View interfaces - included -
VACM_VIEW group1View tcp - included -
VACM_VIEW group1View icmp - included -
VACM_VIEW group1View system - included -
VACM_VIEW group1View sysObjectID - excluded -
VACM_ACCESS group1 - - AuthNoPriv USM group1View - group1View -
步骤3:在/etc/clsnmp.conf
user1 143.1.2.33 SNMPv3 tivoli tivolisnmp - AuthNoPriv HMAC-MD5 串A - -
注意:红皮书上在第3步这样描述的:
# winSnmpName targetAgent admin secName password context secLevel authProto authKey privProto privKey
#
user1 9.3.230.119 SNMPv3 u1 - - AuthNoPriv HMAC-MD5 63960c12520dc8829d27f7fbaf5a0470 - -
但这么写,发现任何oid返回都是NULL,要把password :tivolisnmp 填上才行