6.5.1

Table Of Contents
The produced output might be the following:
Authhash: 08248c6eb8b333e75a29ca0af06b224faa7d22d6
Privhash: 232ba5cbe8c55b8f979455d3c9ca8b48812adb97
The authentication and privacy hash values are displayed.
2
Congure the user by running the esxcli system snmp set command with the --users ag.
For example, you can run the following command:
esxcli system snmp set --users userid/authhash/privhash/security
The command accepts the following parameters:
Parameter Description
userid The user name.
authhash The authentication hash value.
privhash The privacy hash value.
security The level of security enabled for that user, which can be auth (for authentication only), priv (for
authentication and privacy), or none (for no authentication or privacy).
For example, run the following command to congure user1 for access with authentication and privacy:
esxcli system snmp set --users user1/08248c6eb8b333e75a29ca0af06b224faa7d22d6/
232ba5cbe8c55b8f979455d3c9ca8b48812adb97/priv
You must run the following command to congure user2 for access with no authentication or privacy:
esxcli system snmp set --users user2/-/-/none
3 (Optional) Test the user conguration by running the following command:
esxcli system snmp test --users username --auth-hash secret1 --priv-hash secret2
If the conguration is correct, this command returns the following message: "User username validated
correctly using engine id and security level: protocols". Here, protocols indicates the security protocols
congured.
Configure SNMP v3 Targets
Congure SNMP v3 targets to allow the ESXi SNMP agent to send SNMP v3 traps and informs.
SNMP v3 allows for sending both traps and informs. An inform message is a type of a message that the
sender resends a maximum of three times. The sender waits for 5 seconds between each aempt, unless the
message is acknowledged by the receiver.
You can congure a maximum of three SNMP v3 targets, in addition to a maximum of three SNMP v1/v2c
targets.
To congure a target, you must specify a hostname or IP address of the system that receives the traps or
informs, a user name, a security level, and whether to send traps or informs. The security level can be either
none (for no security), auth (for authentication only), or priv (for authentication and privacy).
If you run ESXCLI commands through vCLI, you must supply connection options that specify the target
host and login credentials. If you use ESXCLI commands directly on a host using the ESXi Shell, you can use
the commands as given without specifying connection options. For more information on connection options
see vSphere Command-Line Interface Concepts and Examples.
Prerequisites
n
Ensure that the users who access the traps or informs are congured as SNMP users for both the ESXi
SNMP agent and the target management system.
vSphere Monitoring and Performance
158 VMware, Inc.