194
case-sensitive string of 1 to 31 characters. If this parameter is not specified, the target host is in the
public network.
cipher: Specifies an authentication key and an encryption key in encrypted form. The keys will be
converted to a digest in encrypted form and stored in the device.
simple: Specifies an authentication key and an encryption key in plaintext from. The keys will be
converted to a digest in encrypted form and stored in the device.
authentication-mode: Specifies an authentication algorithm. If you do not specify this keyword, the
system does not perform authentication. For more information about authentication algorithms, see
IPSec configuration in Security Configuration Guide.
md5: Specifies the HMAC-MD5 authentication algorithm.
sha: Specifies the HMAC-SHA-1 authentication algorithm.
auth-password: Specifies the authentication key. This argument is case sensitive.
The plaintext form of the key in non-FIPS mode is a string of 1 to 64 characters. The plaintext
form of the key in FIPS mode is a string of 15 to 64 characters, which must contain numbers,
uppercase letters, lowercase letters, and special characters.
The encrypted form of the key can be calculated by using the snmp-agent
calculate-password command.
privacy-mode: Specifies an encryption algorithm. If you do not specify this keyword, the system
does not perform encryption.
aes128: Specifies the AES encryption algorithm that uses a 128-bit key.
3des: Specifies the 3DES encryption algorithm that uses a 168-bit key.
des56: Specifies the DES encryption algorithm that uses a 56-bit key.
priv-password: Specifies an encryption key. This argument is case sensitive.
The plaintext form of the key in non-FIPS mode is a string of 1 to 64 characters. The plaintext
form of the key in FIPS mode is a string of 15 to 64 characters, which must contain numbers,
uppercase letters, lowercase letters, and special characters.
The encrypted form of the key can be calculated by using the snmp-agent
calculate-password command.
acl: Specifies a basic IPv4 ACL for the user.
ipv4-acl-number: Specifies a basic IPv4 ACL by its number in the range of 2000 to 2999.
name ipv4-acl-name: Specifies a basic IPv4 ACL by its name, a case-insensitive string of 1 to 63
characters.
acl ipv6: Specifies a basic IPv6 ACL for the user.
ipv6-acl-number: Specifies a basic IPv6 ACL by its number in the range of 2000 to 2999.
name ipv6-acl-name: Specifies a basic IPv6 ACL by its name, a case-insensitive string of 1 to 63
characters.
local: Specifies the local SNMP engine. By default, an SNMPv3 user is associated with the local
SNMP engine.
engineid engineid-string: Specifies an SNMP engine ID. The engineid-string argument is an even
number of hexadecimal characters. All-zero and all-F strings are invalid. The even number is in the
range of 10 to 64. If you change the local engine ID, the existing SNMPv3 users and keys become
invalid. To delete an invalid username, specify the engine ID associated with the username in the
undo snmp-agent usm-user v3 command.
Usage guidelines
Only users with the network-admin or level-15 user role can execute this command. Users with other
user roles cannot execute this command even if these roles are granted access to this command or
commands of the SNMP feature.