Users Guide

– aes — Encrypt messages using AES 128-bit algorithm.
– des — Encrypt messages using DES 56-bit algorithm.
– priv-password — Enter a text string used to generate the privacy key used in encrypted messages. A
maximum of 32 alphanumeric characters. For an encrypted password, enter the encrypted string instead of
plain text.
• localized — (SNMPv3 only) Generate an SNMPv3 authentication and/or privacy key in localized key
format.
• access acl-name — (Optional) Enter the name of an IPv4 or IPv6 access list to lter SNMP requests on
the switch. A maximum of 16 characters.
• remote ip-address/prefix-length udp-port port-number — (Optional) Enter the IPv4 or
IPv6 address of the user's remote device and the UDP port number used to connect to the SNMP agent on
the switch, from 0 to 65535. The default is 162.
Defaults Not congured
Command Mode
• CONFIGURATION
Usage Information Use the snmp-server user command to set up the desired security level for SNMP access. For SNMPv3
users, congure user authorization and message encryption. Re-enter this command multiple times to congure
SNMP security settings for all users.
The group to which a user is assigned determines the user's SNMP access. To congure a group's SNMP access
to the switch — read, write, and notify, use the snmp-server user command.
No default values exist for SNMPv3 authentication and privacy algorithms and passwords. If you forget a
password, you cannot recover it — you must recongure the user. You can specify either a plain-text password or
an encrypted cypher-text password. In either case, the password stores in the conguration in an encrypted form
and displays as encrypted in the show running-config snmp output.
A localized authentication or privacy key is more complex and provides greater privacy protection. To display the
localized authentication and privacy keys in an SNMPv3 user conguration, use the show running-
configuration snmp
command.
To limit user access to the SNMP agent on the switch, enter an access acl-name value. In IPv6 ACLs, SNMP
supports only IPv6 and UDP types. TCP, ICMP, and port rules are not supported.
The no version of this command removes a user from the SNMP group.
Example (Encrypted
passwords)
OS10(config)# snmp-server user privuser v3group v3 auth md5
9fc53d9d908118b2804fe80e3ba8763d priv des d0452401a8c3ce42804fe80e3ba8763d
Example (Plain-text
passwords)
OS10(config)# snmp-server user authuser v3group v3 auth md5 authpasswd
Example (Remote
user)
OS10(config)# snmp-server user n3user ngroup remote 172.31.1.3 udp-port 5009 3
auth md5 authpasswd
Supported Releases 10.4.2.0 or later
snmp-server view
Congures an SNMPv3 view.
Syntax
snmp-server view view-name oid-tree [included | excluded]
System management 129