Cisco Nexus 5600 Series - Enforcing SNMP Message Encryption; Assigning Snmpv3 Users to Multiple Roles

PurposeCommand or Action
(Optional)
Saves the change persistently through reboots and
restarts by copying the running configuration to the
startup configuration.
copy running-config startup-config
Example:
switch(config)# copy running-config
startup-config
Step 4
The following example shows how to configure an SNMP user:
switch# config t
Enter configuration commands, one per line. End with CNTL/Z.
switch(config)# snmp-server user Admin auth sha abcd1234 priv abcdefgh
Enforcing SNMP Message Encryption
You can configure SNMP to require authentication or encryption for incoming requests. By default, the SNMP
agent accepts SNMPv3 messages without authentication and encryption. When you enforce privacy, Cisco
NX-OS responds with an authorization error for any SNMPv3 PDU request that uses a security level parameter
of either noAuthNoPriv or authNoPriv.
Use the following command in global configuration mode to enforce SNMP message encryption for a specific
user:
PurposeCommand
Enforces SNMP message encryption for this user.
switch(config)# snmp-server user name enforcePriv
Use the following command in global configuration mode to enforce SNMP message encryption for all users:
PurposeCommand
Enforces SNMP message encryption for all users.switch(config)# snmp-server globalEnforcePriv
Assigning SNMPv3 Users to Multiple Roles
After you configure an SNMP user, you can assign multiple roles for the user.
Only users who belong to a network-admin role can assign roles to other users.Note
PurposeCommand
Associates this SNMP user with the configured user
role.
switch(config)# snmp-server user name group
Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x
OL-31641-01 155
Configuring SNMP
Enforcing SNMP Message Encryption