C
HAPTER
15
| Security Commands
SNMP Commands
– 340 –
security switch
snmp user add
This command adds an SNMPv3 user entry.
SYNTAX
security switch snmp user add engine-id user-name [md5 | sha]
[auth-password] [des] [priv-password]
engine-id - The engine identifier for the SNMP agent on the remote
device where the user resides. (Range: 10-64 hex digits, excluding
a string of all 0’s or all F’s)
To send inform messages to an SNMPv3 user on a remote device,
you must first specify the engine identifier for the SNMP agent on
the remote device where the user resides. The remote engine ID is
used to compute the security digest for authenticating and
encrypting packets sent to a user on the remote host.
SNMP passwords are localized using the engine ID of the
authoritative agent. For informs, the authoritative SNMP agent is
the remote agent. You therefore need to configure the remote
agent's SNMP engine ID before you can send proxy requests or
informs to it. (See the security switch snmp trap security engine id
command on page 336.)
user-name - The name of user connecting to the SNMP agent.
(Range: 1-32 characters, ASCII characters 33-126 only)
md5 | sha - The method used for user authentication.
auth-password - A plain text string identifying the authentication
pass phrase. (Range: 1-32 characters for MD5, 8-40 characters for
SHA)
des - The encryption algorithm use for data privacy; only 56-bit
DES is currently available.
priv-password - A string identifying the privacy pass phrase.
(Range: 8-40 characters, ASCII characters 33-126 only)
DEFAULT SETTING
Authentication method: MD5
COMMAND USAGE
◆ Each SNMPv3 user is defined by a unique name and remote engine ID.
Users must be configured with a specific security level, and the types of
authentication and privacy protocols to use.
◆ Any user created with this command is associated with the group
assigned to the USM Security Model with the security switch snmp
group add command (page 342), and the views assigned to that group
with the security switch snmp view add command (page 344).
◆ Up to 64 user names can be configured.
To Next Page
