6.5.1

Table Of Contents
2 Congure SNMP Authentication and Privacy Protocols on page 156
SNMPv3 optionally supports authentication and privacy protocols.
3 Congure SNMP Users on page 157
You can congure up to 5 users who can access SNMP v3 information. User names must be no more
than 32 characters long.
4 Congure SNMP v3 Targets on page 158
Congure SNMP v3 targets to allow the ESXi SNMP agent to send SNMP v3 traps and informs.
Configure the SNMP Engine ID
Every SNMP v3 agent has an engine ID which serves as a unique identier for the agent. The engine ID is
used with a hashing function to generate keys for authentication and encryption of SNMP v3 messages.
If you do not specify an engine ID, when you enable the SNMP agent, an engine ID is automatically
generated.
If you run ESXCLI commands through vCLI, you must supply connection options that specify the target
host and login credentials. If you use ESXCLI commands directly on a host using the ESXi Shell, you can use
the commands as given without specifying connection options. For more information on connection options
see vSphere Command-Line Interface Concepts and Examples.
Prerequisites
Congure the ESXi SNMP agent by using the ESXCLI commands. See Geing Started with vSphere Command-
Line Interfaces for more information on how to use ESXCLI.
Procedure
u
Run the esxcli system snmp set command with the --engineid option to congure the SNMP engine
ID.
For example, run the following command:
esxcli system snmp set --engineid id
Here, id is the engine ID and it must be a hexadecimal string between 5 and 32 characters long.
Configure SNMP Authentication and Privacy Protocols
SNMPv3 optionally supports authentication and privacy protocols.
Authentication is used to ensure the identity of users. Privacy allows for encryption of SNMP v3 messages
to ensure condentiality of data. These protocols provide a higher level of security than is available in
SNMPv1 and SNMPv2c, which use community strings for security.
Both authentication and privacy are optional. However, you must enable authentication to enable privacy.
The SNMPv3 authentication and privacy protocols are licensed vSphere features and might not be available
in some vSphere editions.
If you run ESXCLI commands through vCLI, you must supply connection options that specify the target
host and login credentials. If you use ESXCLI commands directly on a host using the ESXi Shell, you can use
the commands as given without specifying connection options. For more information on connection options
see vSphere Command-Line Interface Concepts and Examples.
Prerequisites
Congure the ESXi SNMP agent by using the ESXCLI commands. See Geing Started with vSphere Command-
Line Interfaces for more information on how to use ESXCLI.
vSphere Monitoring and Performance
156 VMware, Inc.