218
In FIPS mode (in RBAC mode):
snmp-agent usm-user v3 user-name user-role role-name [ remote { ipv4-address | ipv6
ipv6-address } [ vpn-instance vpn-instance-name ] ] [ { cipher | simple } authentication-mode sha
auth-password [ privacy-mode aes128 priv-password ] ] [ acl { ipv4-acl-number | name
ipv4-acl-name } | acl ipv6 { ipv6-acl-number | name ipv6-acl-name } ] *
undo snmp-agent usm-user v3 user-name { local | engineid engineid-string | remote
{ ipv4-address | ipv6 ipv6-address } [ vpn-instance vpn-instance-name ] }
Default
No SNMPv3 users exist.
Views
System view
Predefined user roles
network-admin
Parameters
user-name: Specifies an SNMPv3 username, a case-sensitive string of 1 to 32 characters.
group-name: Specifies an SNMPv3 group name, a case-sensitive string of 1 to 32 characters. The
group can be one that has been created or not. The user takes effect only after you create the group.
user-role role-name: Specifies a user role name, a case-sensitive string of 1 to 63 characters.
remote { ipv4-address | ipv6 ipv6-address }: Specifies a target host by its IPv4 or IPv6 address,
typically the NMS, to receive the notifications. To send SNMPv3 notifications to a target host, you
need to specify this option and use the snmp-agent remote command to bind the IPv4 or IPv6
address to the remote engine ID.
vpn-instance vpn-instance-name: Specifies the VPN for the target host receiving SNMP
notifications. The vpn-instance-name argument specifies the name of the MPLS L3VPN, a
case-sensitive string of 1 to 31 characters. If this parameter is not specified, the target host is in the
public network.
cipher: Specifies an authentication key and a privacy key in encrypted form. The keys can be
calculated to a hexadecimal string by using the snmp-agent calculate-password command.
simple: Specifies an authentication key and a privacy key in plaintext from. For security purposes,
the keys specified in plaintext form will be stored in encrypted form.
authentication-mode: Specifies an authentication algorithm: MD5 or SHA. MD5 is faster but less
secure than SHA. For more information about these algorithms, see Security Configuration Guide.
• md5: Specifies the MD5 authentication algorithm.
• sha: Specifies the SHA-1 authentication algorithm.
auth-password: Specifies the authentication key. This argument is case sensitive.