During rewrite and reverse-engineering the SNMPv3 stuff (T652) I stumbled upon an easy configuration which actually does not do anything.
user is test
password testest
# show service snmp listen-address 172.16.37.241 { port 666 } v3 { engineid 0xff42 user test { auth { encrypted-key 0xde1a05c0a80b2804f4c8e658713ee73f1f3b69e4 type sha } engineid 0xff42 mode rw } } # commit [ service snmp ] Use of uninitialized value $priv_type in uc at /opt/vyatta/sbin/vyatta-snmp-v3.pl line 266.
The resulting /etc/snmp/snmpd.conf looks like
# autogenerated by vyatta-snmp.pl on Mon May 21 16:47:36 2018 sysDescr VyOS 1.2.0-rolling+201805210337 sysObjectID 1.3.6.1.4.1.44641 sysServices 14 master agentx agentaddress unix:/run/snmpd.socket,udp:172.16.37.241:666 agentXPerms 0755 0755 pass .1.3.6.1.2.1.31.1.1.1.18 /opt/vyatta/sbin/if-mib-alias smuxpeer .1.3.6.1.4.1.3317.1.2.2 smuxpeer .1.3.6.1.4.1.3317.1.2.5 smuxpeer .1.3.6.1.4.1.3317.1.2.3 smuxpeer .1.3.6.1.4.1.3317.1.2.9 smuxpeer .1.3.6.1.2.1.83 smuxpeer .1.3.6.1.4.1.3317.1.2.8 smuxpeer .1.3.6.1.2.1.157 smuxsocket localhost iquerySecName vyatta6ce459e085337fb9 notificationEvent linkUpTrap linkUp ifIndex ifDescr ifType ifAdminStatus ifOperStatus notificationEvent linkDownTrap linkDown ifIndex ifDescr ifType ifAdminStatus ifOperStatus monitor -r 10 -e linkUpTrap "Generate linkUp" ifOperStatus != 2 monitor -r 10 -e linkDownTrap "Generate linkDown" ifOperStatus == 2 # views #access # context sec.model sec.level match read write notif #trap-target #group
and has no SNMPv3 stuff in it ...