Page MenuHomeVyOS Platform

SNMP v3 - remove required engineid from user node
Closed, ResolvedPublicFEATURE REQUEST


Currently it is required to configure an engine ID used to hash the auth/privacy key.

This mechanism only works when it is repeatedly hased with the global system engineid, which makes the user engineid redundant.

We should have a confg migration script which deletes the users engineid from the running config.


Difficulty level
Normal (likely a few hours)
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Config syntax change (migratable)
Issue type
Feature/functionality removal

Event Timeline

c-po created this task.
c-po updated the task description. (Show Details)
c-po removed a subscriber: c-po.

@Line2 @begetan I added both of you as you seem to use SNMP (probably with v3). What's your opinion on this?

syncer triaged this task as Normal priority.Sep 1 2018, 2:24 PM

I would remove the user engineid. I can't see any useful benefit.

If engineid in user node only provides hashing for auth key I would remove it too.
Since we usually not assign engine id automatically it is created for every new hardware installation automatically, so hash of auth key became not transferable. In this case we have to keep plain text password for snmpv3 in our config store, because of automation of provisioning. But I would to keep hash instead of plain text credential.

It is important for engineid to be unique.

syncer lowered the priority of this task from Normal to Low.Feb 8 2019, 12:12 AM
syncer added a subscriber: syncer.

@c-po you can proceed with the removal

c-po changed the task status from Open to In progress.Oct 22 2019, 1:21 PM
c-po raised the priority of this task from Low to Normal.
c-po changed Difficulty level from Unknown (require assessment) to Normal (likely a few hours).
c-po changed Version from - to 1.2.3.
c-po set Is it a breaking change? to Unspecified (possibly destroys the router).
c-po changed the task status from In progress to Backport pending.Oct 27 2019, 3:08 AM
c-po moved this task from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved this task from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.4) board.
dmbaturin changed Is it a breaking change? from Unspecified (possibly destroys the router) to Config syntax change (migratable).Sep 3 2021, 12:27 PM
dmbaturin set Issue type to Feature/functionality removal.