Quick Reference Guide

SNMP Commands 353
DELL CONFIDENTIAL – PRELIMINARY 5/15/12 – FOR PROOF ONLY
Default Configuration
No group entry exists.
Command Mode
Global Configuration mode.
User Guidelines
The index of the group name table is comprised of Group Name, Security Model, and Security
Level. Different views for the same group can be defined with different security levels. For
example, after having created the appropriate views, a group can be created for which "no
authentication" is required, while allowing only notification view for "interfaces". A group of the
same name can be created for which "priv" authentication is required. Read views can, for
example, be configured for this group for mib2, and write views for interfaces. In this case, users
in this group who send "priv" packets can modify all "interfaces" MIBs and view all mib2.
Examples
The following example attaches a group called user-group to SNMPv3 and assigns to the group the
privacy security level and read access rights to a view called user-view.
snmp-server user
The snmp-server user Global Configuration mode command configures a new SNMP Version 3
user. Use the no form of this command to remove a user.
Syntax
• snmp-server user username groupname [remote engineid-string ] [ auth-md5 password | auth-
sha
password | auth-md5-key md5-des-keys | auth-sha-key sha-des-keys ]
• no snmp-server user username [remote engineid-string ]
• username — Specifies the name of the user on the host that connects to the agent. (Range: 1
- 30 characters)
•
groupname — Specifies the name of the group to which the user belongs. (Range: 1 - 30
characters)
•
engineid-string — Specifies the engine ID of the remote SNMP entity to which the user
belongs. The engine ID is a concatenated hexadecimal string. Each byte in the hexadecimal
character string is two hexadecimal digits. Each byte can be separated by a period or colon.
(Range: 5 - 32 characters)
Console(config)# snmp-server group user-group v3 priv read
user-view