Alcatel-Lucent 7705 SAR - Page 119

Security
7705 SAR OS System Management Guide 119
authentication
Syntax authentication {[none] | [[hash] {md5 key-1 | sha key-1} privacy {none | des-key key-2}]
Context config>system>security>user>snmp
Description This command configures the authentication and encryption method the user must use in order to be
validated by the 7705 SAR. SNMP authentication allows the device to validate the managing node that
issued the SNMP message and determine if the message has been tampered with. The authentication
protocol can either be HMAC-MD5-96 or HMAC-SHA-96.
The user password is encrypted first by the MD5/SHA/DES algorithm. The output of the algorithm is
always a fixed-length string (key). Copy the password key and paste the output in the appropriate
authentication command key parameter.
Default authentication none - no authentication is configured and privacy cannot be configured
Parameters none — do not use authentication. If none is specified, then privacy cannot be configured.
hash — when hash is not specified, unencrypted characters can be entered. When hash is
configured, all specified keys are stored in an encrypted format in the configuration file. The
password must be entered in encrypted form when the hash parameter is used.
md5 key-1 — the MD5 authentication key is stored in an encrypted format. The minimum key
length is determined by the config>system>security>password>minimum-length value.
The maximum length is 16 octets (32 printable characters).
The complexity of the key is determined by the complexity command.
sha key-1 — the sha authentication key is stored in an encrypted format. The minimum key length
is determined by the config>system>security>password>minimum-length value. The
maximum length is 20 octets (40 printable characters).
The complexity of the key is determined by the
complexity command.
privacy none — do not perform SNMP packet encryption
privacy des-key key-2 — configure the des-key for SNMP packet encryption. This key is stored
in an encrypted format. The minimum key length is determined by the
config>system>security>password>minimum-length value. The maximum length is
16 octets (32 printable characters). If privacy is configured, then authentication must be
enabled.
To remove a previously configured des-key, enter privacy none.
The complexity of the key is determined by the complexity command.
Default privacy none