Configuration Guide     756
Configuring SNMP & RMON SNMP Configurations
2.2.5  Creating SNMP Users (For SNMPv3)
Configure users of the SNMP group. Users belong to the group, and use the same security 
level and access rights as the group.
Step 1 configure
Enter global configuration mode.
Step 2 snmp-server user 
name
 { local | remote } 
group-name
 [ smode v3 ] [ slev { noAuthNoPriv | 
authNoPriv | authPriv }] [ cmode { none | MD5 | SHA }] [ cpwd 
confirm-pwd
 ] [ emode { none | 
DES }] [ epwd 
encrypt-pwd
 ] 
Configure users of the SNMP group.
name: 
Enter the user name with 1 to 16 characters.
local | remote
:
 Choose a user type. Local indicates that the user is connected to a local 
SNMP engine, while remote means that the user is connected to a remote SNMP engine. 
As the remote engine ID and user password are used to compute the authentication and 
privacy digests, before configuring a remote user, you need to set the remote engine ID 
first.
group-name: 
Enter the name of the group which the user belongs to. The group is 
determined by the group name, security mode and security level.
v3
: 
Configure the security mode for the user. v3 indicates SNMPv3, the most secure model.
noAuthNoPriv | authNoPriv | authPriv
: 
Choose a security level from noAuthNoPriv (no 
authorization and no encryption), authNoPriv (authorization and no encryption), authPriv 
(authorization and encryption). The security level from highest to lowest is: noAuthNoPriv, 
authNoPriv, authPriv, and the default is noAuthNoPriv. The security level of the user should 
not be lower than the group it belongs to.
none | MD5 | SHA:
 
Choose an authentication algorithm. SHA authentication mode has a 
higher security than MD5 mode. By default, the Authentication Mode is none.
confirm-pwd: 
Enter an authentication password with 1 to 16 characters excluding question 
mark and space. This password in the configuration file will be displayed in the symmetric 
encrypted form.
none | DES
: 
Choose a privacy mode. None indicates no privacy method is used, and DES 
indicates DES encryption method is used. By default, the Privacy Mode is none.
encrypt-pwd:
 Enter a privacy password with 1 to 16 characters excluding question mark and 
space. This password in the configuration file will be displayed in the symmetric encrypted 
form.
Step 3 show snmp-server user
Displays the information of SNMP users.
Step 4 end
Return to privileged EXEC mode.
Step 5 copy running-config startup-config
Save the settings in the configuration file.