6.5.1

Configure SNMP Users
You can congure up to ve users who can access SNMP v3 information. User names must be no more than
32 characters long.
While conguring a user, you generate authentication and privacy hash values based on the user's
authentication and privacy passwords and on the SNMP agent's engine ID. After conguring users, if you
change the engine ID, the authentication protocol, or the privacy protocol, the users are no longer valid and
must be recongured.
Prerequisites
n
Verify that you have congured the authentication and privacy protocols before conguring users.
n
Verify that you know the authentication and privacy passwords for each user that you plan to
congure. Passwords must be at least seven characters long. Store these passwords in les on the host
system.
Procedure
1 Access the appliance shell and log in as a user who has the administrator or super administrator role.
The default user with super administrator role is root.
2 If you are using authentication or privacy, get the authentication and privacy hash values for the user by
the running snmp.hash --auth_hash --priv_hash command.
For example, run the following command:
snmp.hash --auth_hash secret1 --priv_hash secret2
Here, secret1 is the path to the le containing the user's authentication password and secret2 is the path
to the le containing the user's privacy password. Alternatively, you can specify the ag --raw-secret
and specify the passwords directly on the command line.
The authentication and privacy hash values are displayed.
3 Congure the user by running snmp.set --users.
For example, run the following command:
snmp.set --users userid/authhash/privhash/security
The parameters in the command are as follows.
Parameter Description
userid Replace with the user name.
authhash Replace with the authentication hash value.
privhash Replace with the privacy hash value.
security
Replace with the level of security enabled for that user, which can be auth, for authentication only,
priv, for authentication and privacy, or none, for no authentication or privacy.
Configure SNMP v3 Targets
Congure SNMP v3 targets to allow the SNMP agent to send SNMP v3 traps.
You can congure a maximum of three SNMP v3 targets, in addition to a maximum of three SNMP v1 or
v2c targets.
To congure a target, you must specify a host name or IP address of the system that receives the traps, a user
name, a security level, and whether to send traps. The security level can be either none, for no security, auth,
for authentication only, or priv, for authentication and privacy.
Chapter 4 Using the Appliance Shell to Configure the vCenter Server Appliance
VMware, Inc. 45