Managing Switch User Accounts
Setting Up SNMP Access for a User Account
OmniSwitch 6600 Family Switch Management Guide
April 2006
page 7-13
SNMP Access Without Authentication/Encryption
To give a user SNMP access without SNMP authentication required, enter the
user
command with the
no
auth
option. For example, to give existing user
thomas
SNMP access without SNMP authentication, enter
the following:
-> user thomas password techpubs no auth
For this user, if the SNMP community map mode is enabled (the default), the SNMP community map
must include a mapping for this user to a community string. In this example, the community string is
our_group
:
-> snmp community map our_group user thomas
In addition, the global SNMP security level on the switch must allow non-authenticated SNMP frames
through the switch. By default, the SNMP security level is
privacy all
; this is the highest level of SNMP
security, which allows only SNMPv3 frames through the switch. Use the
snmp security
command to
change the SNMP security level. For more information about configuring SNMP globally on the switch,
see
SNMP Access With Authentication/Encryption
To configure a user with SNMP access and authentication, enter the
user
command with the desired
authentication type (
sha
,
md5
,
sha+des
,
md5+des
).
-> user thomas password techpubs sha+des
When SNMP authentication is specified, an SNMP authentication key is computed from the user pass-
word based on the authentication/encryption setting. In this example, the switch would use the SHA
authentication algorithm and DES encryption on the
techpubs
password to determine the SNMP authenti-
cation key for this user. The key is in hexadecimal form and is used for encryption/de-encryption of the
SNMP PDU.
The authentication key is only displayed in an ASCII configuration file if the
snapshot
command is
entered. The key is indicated in the file by the syntax
authkey
key
. See
Chapter 6, “Working With Config-
for information about using the
snapshot
command. The key is not displayed in the CLI.
Removing SNMP Access From a User
To deny SNMP access, enter the
user
command with the
no snmp
option:
-> user thomas no snmp
This command results in
thomas
no longer having SNMP access to manage the switch.
