Cisco Nexus 5000 Series - Configuring Snmp Users; Enforcing Snmp Message Encryption

Send feedback to nx5000-docfeedback@cisco.com
1-6
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01
Chapter 1 Configuring SNMP
Configuring SNMP
Configuring SNMP Users
To configure a user for SNMP, perform this task:
Enforcing SNMP Message Encryption
You can configure SNMP to require authentication or encryption for incoming requests. By default the
SNMP agent accepts SNMPv3 messages without authentication and encryption. When you enforce
privacy, Cisco Nexus 5000 Series responds with an authorization Error for any SNMPv3 PDU request
using securityLevel parameter of either noAuthNoPriv or authNoPriv.
To enforce SNMP message encryption for a user in the global configuration mode, perform this task:
To enforce SNMP message encryption for all users in the global configuration mode, perform this task:
Command Purpose
Step 1
switch# configuration terminal
Enters configuration mode.
Step 2
switch(config)# snmp-server user name
[auth {md5 | sha} passphrase [auto]
[priv [aes-128] passphrase] [engineID
id][localizedkey]]
Configures an SNMP user with authentication and
privacy parameters.
Step 3
switch(config-callhome)# show snmp user
(Optional) Displays information about one or more
SNMP users.
Step 4
switch(config)# copy running-config
startup-config
(Optional) Saves this configuration change.
Command Purpose
switch(config)# snmp-server user name
enforcePriv
Enforces SNMP message encryption for this user.
Command Purpose
switch(config)# snmp-server
globalEnforcePriv
Enforces SNMP message encryption for all users.