Alcatel-Lucent 7705 SAR, System Management Manual

Page: 176 / 356

Configuring SNMP Components
176 7705 SAR OS System Management Guide
Use the following CLI syntax to configure user group and authentication parameters:
CLI Syntax:
config>system>security# user user-name
access [ftp] [snmp] [console]
snmp
authentication [none] | [[hash]{md5 key | sha
key } privacy {none | des-key key }]
group group-name
The following example displays user security command usage:
Example:
ALU-1>config>system>security# user testuser
config>system>security>user$ access snmp
config>system>security>user# snmp
config>system>security>user>snmp# authentication hash
md5 e14672e71d3e96e7a1e19472527ee969 privacy none
config>system>security>user>snmp# group testgroup
config>system>security>user>snmp# exit
config>system>security>user# exit
The following example displays the user’s SNMP configuration.
ALU-1>config>system>security# info
----------------------------------------------
user "testuser"
access snmp
snmp
authentication hash md5 e14672e71d3e96e7a1e19472527ee969 privacy none
group testgroup
exit
exit
...
----------------------------------------------
ALU-1>config>system>security#
Configuring USM Community Options
User-based security model (USM) community strings associate a community string with an
SNMPv3 access group and its view. The access granted with a community string is restricted
to the scope of the configured group.
By default, the 7705 SAR OS implementation of SNMP uses SNMPv3. To implement
SNMPv1 and SNMPv2c, USM community strings must be explicitly configured.