N8406-023 1Gb Intelligent L3 Switch Command Reference Guide (ISCLI) 92
SNMPv3 User Security Model configuration
You can make use of a defined set of user identities using this Security Model. An SNMP engine must have the
knowledge of applicable attributes of a user.
These commands help you create a user security model entry for an authorized user. You need to provide a
security name to create the USM entry.
The following table describes the User Security Model Configuration commands.
Table 85 User Security Model Configuration commands
Command
Description
snmp-server user
<
1-16
>
name
<
1-32 characters
>
Configures a string up to 32 characters long that represents the name of
the user. This is the login name that you need in order to access the
switch.
Command mode
: Global configuration
snmp-server user
<
1-16
>
authentication-protocol
{md5|sha|none}
[authentication-password
<
password
>
]
Configures the authentication protocol and password.
The authentication protocol can be HMAC-MD5-96 or HMAC-SHA-96,
or none. The default algorithm except usmUser 1-2 is
none
.
When you configure an authentication algorithm, you must provide a
password, otherwise you receive an error message during validation.
This command allows you to create or change your password for
authentication.
Command mode
: Global configuration
snmp-server user
<
1-16
>
privacy-protocol {des|none}
[privacy-password
<
password
>
]
Configures the type of privacy protocol and the privacy password.
The privacy protocol protects messages from disclosure. The options
are
des
(CBC-DES Symmetric Encryption Protocol) or
none
. If you
specify
des
as the privacy protocol, then make sure that you have
selected one of the authentication protocols (MD5 or HMAC-SHA-96). If
you select
none
as the authentication protocol, you receive an error
message.
You can create or change the privacy password.
Command mode
: Global configuration
no snmp-server user
<
1-16
>
Deletes the USM user entries.
Command mode
: Global configuration
show snmp-server v3 user
Displays the USM user entries.
Command mode
: All
SNMPv3 View configuration
The following table describes the SNMPv3 View Configuration commands.
Table 86 SNMPv3 View Configuration commands
Command
Description
snmp-server view
<
1-128
>
name
<
1-32 characters
>
Defines the name for a family of view subtrees up to a maximum of 32
characters.
Command mode
: Global configuration
snmp-server view
<
1-128
>
tree
<
1-64 characters
>
Defines the Object Identifier (OID), a string of maximum 64 characters,
which when combined with the corresponding mask defines a family of
view subtrees.
An example of an OID is
1.3.6.1.2.1.1.1.0
Command mode
: Global configuration
snmp-server view
<
1-128
>
mask
<
1-32 characters
>
Defines the bit mask, which in combination with the corresponding tree
defines a family of view subtrees. The mask can have a maximum of 32
characters.
Command mode
: Global configuration
snmp-server view
<
1-128
>
type
{included|excluded}
Selects whether the corresponding instances of
vacmViewTreeFamilySubtree
and
vacmViewTreeFamilyMask
define a family of view subtrees, which
is included in or excluded from the MIB view.
Command mode
: Global configuration
no snmp-server view
<
1-128
>
Deletes the
vacmViewTreeFamily
group entry.
Command mode
: Global configuration
show snmp-server v3 view
Displays the current
vacmViewTreeFamily
configuration.
Command mode
: All
