6.5.1

Table Of Contents
Procedure
1
(Optional) Run the esxcli system snmp set command with the --authentication option to congure
authentication.
For example, run the following command:
esxcli system snmp set --authentication protocol
Here, protocol must be either none (for no authentication), SHA1, or MD5.
2
(Optional) Run the esxcli system snmp set command with the --privacy option to congure privacy.
For example, run the following command:
esxcli system snmp set --privacy protocol
Here, protocol must be either none (for no privacy) or AES128.
Configure SNMP Users
You can congure up to 5 users who can access SNMP v3 information. User names must be no more than 32
characters long.
While conguring a user, you generate authentication and privacy hash values based on the user's
authentication and privacy passwords and the SNMP agent's engine ID. If you change the engine ID, the
authentication protocol, or the privacy protocol after conguring users, the users are no longer valid and
must be recongured.
If you run ESXCLI commands through vCLI, you must supply connection options that specify the target
host and login credentials. If you use ESXCLI commands directly on a host using the ESXi Shell, you can use
the commands as given without specifying connection options. For more information on connection options
see vSphere Command-Line Interface Concepts and Examples.
Prerequisites
n
Verify that you have congured the authentication and privacy protocols before conguring users.
n
Verify that you know the authentication and privacy passwords for each user you plan to congure.
Passwords must be at least 7 characters long. Store these passwords in les on the host system.
n
Congure the ESXi SNMP agent by using the ESXCLI commands. See Geing Started with vSphere
Command-Line Interfaces for more information on how to use ESXCLI.
Procedure
1 If you are using authentication or privacy, get the authentication and privacy hash values for the user by
running the esxcli system snmp hash command with the --auth-hash and --priv-hash ags.
For example, run the following command:
esxcli system snmp hash --auth-hash secret1 --priv-hash secret2
Here, secret1 is the path to the le containing the user's authentication password and secret2 is the path
to the le containing the user's privacy password.
Alternatively, you can pass the --raw-secret ag and specify the passwords directly on the command
line.
For example, you can run the following command:
esxcli system snmp hash --auth-hash authsecret --priv-hash privsecret --raw-secret
Chapter 9 Monitoring Networked Devices with SNMP and vSphere
VMware, Inc. 157