6.7

Table Of Contents
Parameter Description
privhash The privacy hash value.
security The level of security enabled for that user, which can be auth (for authentication only), priv (for authentication and
privacy), or none (for no authentication or privacy).
For example, run the following command to configure user1 for access with authentication and
privacy:
esxcli system snmp set --users user1/08248c6eb8b333e75a29ca0af06b224faa7d22d6/
232ba5cbe8c55b8f979455d3c9ca8b48812adb97/priv
You must run the following command to configure user2 for access with no authentication or privacy:
esxcli system snmp set --users user2/-/-/none
3 (Optional) Test the user configuration by running the following command:
esxcli system snmp test --users username --auth-hash secret1 --priv-hash secret2
If the configuration is correct, this command returns the following message: "User username validated
correctly using engine id and security level: protocols". Here, protocols indicates the security
protocols configured.
Configure SNMP v3 Targets
Configure SNMP v3 targets to allow the ESXi SNMP agent to send SNMP v3 traps and informs.
SNMP v3 allows for sending both traps and informs. An inform message is a type of a message that the
sender resends a maximum of three times. The sender waits for 5 seconds between each attempt, unless
the message is acknowledged by the receiver.
You can configure a maximum of three SNMP v3 targets, in addition to a maximum of three SNMP v1/v2c
targets.
To configure a target, you must specify a hostname or IP address of the system that receives the traps or
informs, a user name, a security level, and whether to send traps or informs. The security level can be
either none (for no security), auth (for authentication only), or priv (for authentication and privacy).
If you run ESXCLI commands through vCLI, you must supply connection options that specify the target
host and login credentials. If you use ESXCLI commands directly on a host using the ESXi Shell, you can
use the commands as given without specifying connection options. For more information on connection
options see vSphere Command-Line Interface Concepts and Examples.
Prerequisites
n
Ensure that the users who access the traps or informs are configured as SNMP users for both the
ESXi SNMP agent and the target management system.
n
If you are configuring informs, you need the engine ID for the SNMP agent on the remote system that
receives the inform message.
vSphere Monitoring and Performance
VMware, Inc. 189