System Management Guide Security
Edition: 01 3HE 11018 AAAC TQZZA 133
authentication
Syntax authentication {[none] | [[hash] {md5 key-1 | sha key-1} privacy {none | des-key key-2 |
aes-128-cfb-key key-2}]}
Context config>system>security>user>snmp
Description This command configures the authentication and encryption method the user must use in
order to be validated by the 7705 SAR. SNMP authentication allows the device to validate the
managing node that issued the SNMP message and determine if the message has been
tampered with. The authentication protocol can either be HMAC-MD5-96 or HMAC-SHA-96.
Default authentication none - no authentication is configured and privacy cannot be configured
Parameters none — do not use authentication. If none is specified, then privacy cannot be
configured.
hash — when hash is not specified, unencrypted characters can be entered. When
hash is configured, all specified keys are stored in an encrypted format in the
configuration file. The password must be entered in encrypted form when the hash
parameter is used.
md5 key-1 — the MD5 authentication key is stored in an encrypted format. The
maximum length is 16 octets (32 printable characters).
sha key-1 — the sha authentication key is stored in an encrypted format. The maximum
length is 20 octets (40 printable characters).
privacy none — do not perform SNMP packet encryption
privacy des-key key-2 — configure the des-key for SNMP packet encryption. This key
is stored in an encrypted format. The maximum length is 16 octets (32 printable
characters). If privacy is configured, then authentication must be enabled.
To remove a previously configured des-key, enter privacy none.
The des-key keyword is not available if the 7705 SAR node is running in
FIPS-140-2 mode.
Default privacy none
privacy aes-128-cfb-key key-2 — enables 128-bit CFB mode AES for SNMPv3 payload
encryption and configures the key. The maximum length is 16 octets (32 printable
characters) and is stored in an encrypted format.
To remove a previously configured aes-128-cfb-key, enter privacy none.
Default privacy none
To Next Page
Loading...
