202
•
Plaintext authentication and privacy keys.
# Add the user
remoteUser
for the SNMP remote engine at
10.1.1.1 to the SNMPv3 group
testGroup
, and enable the authentication and privacy security model for the group. Specify the
authentication algorithm SHA-1, the privacy algorithm AES, the plaintext authentication key
123456TESTauth&!
, and
the plaintext privacy key
123456TESTencr&!
for the user.
<Sysname> system-view
[Sysname] snmp-agent remote 10.1.1.1 engineid 123456789A
[Sysname] snmp-agent group v3 testGroup privacy
[Sysname] snmp-agent usm-user v3 remoteUser testGroup remote 10.1.1.1 simple
authentication-mode sha 123456TESTauth&! privacy-mode aes128 123456TESTencr&!
In RBAC mode:
# Create the SNMPv3 user
testUser
with the user role
network-operator
and enable the
authentication without privacy security model for the user. Specify the authentication algorithm
SHA-1 and the authentication key
123456TESTplat&!
in plain text for the user.
<Sysname> system-view
[Sysname] snmp-agent usm-user v3 testUser user-role network-operator simple
authentication-mode sha 123456TESTplat&!
# For an NMS to have read-only access to all MIB objects, make sure the following configurations on
the NMS are the same as the SNMP agent:
•
SNMPv3 username.
•
SNMP protocol version.
•
Authentication algorithm and key.
Related commands
display
snmp-agent
usm-user
snmp-agent calculate-password
snmp-agent
group
snmp-agent
remote
snmp-agent
usm-user
v3
user-role
snmp-agent usm-user v3 user-role
Use
snmp-agent
usm-user
v3 user-role
to assign a user role to an SNMPv3 user created in RBAC
mode.
Use
undo
snmp-agent
usm-user
user-role
to remove a user role.
Syntax
snmp-agent
usm-user
v3
user-name
user-role
role-name
undo
snmp-agent
usm-user
v3
user-name
user-role
role-name
Default
No SNMPv3 users have been configured in RBAC mode.
Views
System view
Predefined user roles
network-admin
mdc-admin