set snmp user
Enterasys C3 Configuration Guide 12-9
Parameters
Defaults
If remote is not specified, the user will be registered for the local SNMP engine.
If encryption is not specified, no encryption will be applied.
If authentication is not specified, no authentication will be applied.
If storage type is not specified, nonvolatile will be applied.
Mode
Switch mode, read-write, when security profile = normal.
Switch mode, super-user, when security profile = C2.
Usage
Although all the parameters except for the user name are optional, if you are entering any of the
optional parameters, it is recommended that you enter them in the order shown in the syntax
statement.
When FIPS mode (security profile = c2) is enabled, the default authentication mechanism for
SNMPv3 is HMAC-SHA-1. The entire SNMPv3 message will be checked for integrity using
HMAC-SHA-1. The authentication option of the "set snmp user" command will not accept MD5 as
an option. Only the FIPS cryptographic module will be used for HMAC-SHA-1 even if this same
algorithm is provided by other functions.
When FIPS mode (security profile = c2) is enabled, the encryption mechanism for SNMPv3 will be
AES-128. The encryption option of the "set snmp user" command will not accept DES as an option
while in FIPS mode. Only the FIPS cryptographic module will be used for AES-128 even if this
same algorithm is provided by other functions.
Refer to Chapter 7, Setting the Security Mode, for more information about FIPS security mode.
Examples
This example shows how to create a new SNMP user named “netops”. By default, this user will be
registered on the local SNMP engine without authentication
and encryption. Entries related to this
user will be stored in permanent (nonvolatile) memory:
C3(su)->set snmp user netops
user Specifies a name for the SNMPv3 user.
remote remoteid (Optional) Registers the user on a specific remote SNMP engine.
encryption des |
aes
(Optional) Specifies the encryption type for this user.
AES refers to the Advanced Encryption Standard using a 128 bit key size.
privacy privpassword (Optional) Specifies an encryption password. Minimum of 8 characters.
Required if encryption is specified.
authentication md5
| sha
(Optional) Specifies the authentication type required for this user as MD5
or SHA.
authpassword (Optional) Specifies a password for this user when authentication is
required. Minimum of 8 characters.
volatile |
nonvolatile
(Optional) Specifies a storage type for this user entry.
To Next Page
Loading...
Need help?
General