Command Manual – SNMP and RMON 
Quidway S3900 Series Ethernet Switches-Release 1510  Chapter 1  SNMP Configuration Commands
 
Huawei Technologies Proprietary  
1-22 
Group-name: Group name corresponding to that user, a character string of 1 to 32 
characters. 
authentication-mode: Specifies the safety level as authentication required. Absence 
of this parameter indicates that neither authentication nor encryption is required. 
md5: Specifies the authentication protocol as HMAC MD5 algorithm. 
sha: Specifies the authentication protocol as HMAC SHA algorithm. 
auth-password: Authentication password, a character string of 1 to 64 characters. 
privacy: Specifies the security level as encrypted. 
des56: Specifies the authentication protocol as DES. 
Priv-password: Encryption password, a character string of 1 to 64 characters. 
acl-number: The basic ACL number, ranging from 2,000 to 2,999. 
local: Represents a local entity user. 
engineid-string: Engine ID related to the user, ranging from 10 to 64 hexadecimal 
numerals. 
Description 
Use the snmp-agent usm-user command to add a new user to an SNMP group. 
Use the undo snmp-agent usm-user command to cancel a user from the SNMP 
group. 
While using SNMPv3, SNMP engineID (for authentication) is required when you 
configure a remote user for an agent. If you change engineID after configuring a user, 
the user corresponding to the original engineID is not effective. 
For V1 and V2C, this command will add a new community name. For SNMPv3, it will 
add a new user for an SNMP group. 
Related command: snmp-agent group, snmp-agent community and snmp-agent 
local-engineid. 
Example 
# Add a user John to SNMPv3 group Johngroup. Configure to authenticate using 
HMAC-MD5 algorithm, require authentication and set authentication password as 
hello. 
<Quidway> system-view 
System View: return to User View with Ctrl+Z. 
[Quidway] snmp-agent group v3 Johngroup 
[Quidway] snmp-agent usm-user v3 John Johngroup authentication-mode md5 hello