176
mode
: Specifies the same authentication mode and privacy mode as configured in the
snmp-agent
usm-user v3
command. The encryption algorithms AES, 3DES, and DES are in descending order of
security strength. DES is enough to meet general security requirements. The MD5 authentication
algorithm is faster than SHA-1, while SHA-1 provides higher security than MD5.
•
3desmd5
: Converts the plaintext privacy key to an encrypted key for 3DES encryption used in
conjunction with MD5 authentication.
•
3dessha
: Converts the plaintext privacy key to an encrypted key for 3DES encryption used in
conjunction with SHA-1 authentication.
•
md5
: Converts the plaintext authentication key to a ciphertext key for MD5 authentication, or
converts the plaintext privacy key to a ciphertext key for AES or DES encryption used in
conjunction with MD5.
•
sha
: Converts the plaintext authentication key to a ciphertext key for SHA-1 authentication, or
converts the plaintext privacy key to a ciphertext key for AES or DES encryption used in
conjunction with SHA-1 authentication.
local-engineid
: Uses the local engine ID to calculate the ciphertext key. You can configure the local
engine ID by using the
snmp-agent local-engineid
command.
specified-engineid
engineid
: Uses a user-defined engine ID to calculate the ciphertext key. The
engineid
argument specifies an SNMP engine ID as a hexadecimal string. It must contain an even
number of hexadecimal characters, in the range of 10 to 64. All-zero and all-F strings are invalid.
Usage guidelines
Make sure the SNMP agent is enabled before you execute the
snmp-agent calculate-password
command.
For security purposes, use this command to calculate digests for ciphertext authentication and
privacy keys when you create SNMPv3 users by using the
snmp-agent usm-user v3
command.
The converted key is valid only under the engine ID specified for key conversion.
Examples
# Use the local engine and the SHA-1 algorithm to calculate a digest for the ciphertext key converted
from the plaintext key
authkey
.
<Sysname> system-view
[Sysname] snmp-agent calculate-password authkey mode sha local-engineid
The encrypted key is: 09659EC5A9AE91BA189E5845E1DDE0CC
Related commands
snmp-agent
local-engineid
snmp-agent
usm-user
v3
snmp-agent community
Use
snmp-agent
community
to configure an SNMP community.
Use
undo
snmp-agent
community
to delete an SNMP community.
Syntax
In VACM mode:
snmp-agent
community
{
read
|
write
} [
simple
|
cipher
]
community-name
[
mib-view
view-name
] [
acl
acl-number
|
acl
ipv6
ipv6-acl-number
] *
undo
snmp-agent
community
{
read
|
write
} [
cipher
]
community-name
In RBAC mode:
