Dell Networking S4810, Reference Manual

Page: 1576 / 1761

snmp-server user (for AES128-CFB Encryption)
Specify that AES128-CFB encryption algorithm needs to be used for transmission of SNMP information.
The Advanced Encryption Standard (AES) Cipher Feedback (CFB) 128-bit encryption algorithm is in
compliance with RFC 3826. RFCs for SNMPv3 define two authentication hash algorithms, namely, HMAC-
MD5-96 and HMAC-SHA1-96. These are the full forms or editions of the truncated versions, namely,
HMAC-MD5 and HMAC-SHA1 authentication algorithms.
S4810
Syntax
snmp-server user name { group_name remote ip-address udp-port
port-number } [1 | 2c | 3] [encrypted] [auth {md5 | sha} auth-
password ] [priv {des56 | aes128–cfb} priv– password ] [access
access-list-name | ipv6 access-list-name | access-list-name
ipv6 access-list-name ]
To remove a user from the SNMP group, use the
no snmp-server user name
{ group_name remote ip-address udp-port port-number } [1 | 2c |
3] [encrypted] [auth {md5 | sha} auth-password ] [priv {des56 |
aes128–cfb} priv-password ] [access access-list-name | ipv6
access-list-name | access-list-name ipv6 access-list-name ]
command.
Parameters
auth-password (OPTIONAL) Enter a text string (up to 20 characters long)
password that enables the agent to receive packets from the
host and to send packets to the host. Minimum: eight
characters long.
aes128 (OPTIONAL) Enter the keyword
aes128
to initiate the
AES128-CFB encryption algorithm for transmission of SNMP
packets.
priv-password (OPTIONAL) Enter a text string (up to 20 characters long)
password that enables the host to encrypt the contents of
the message it sends to the agent and to decrypt the
contents of the message it receives from the agent.
Minimum: eight characters long.
Defaults If no authentication or privacy option is configured, then the messages are
exchanged (attempted anyway) without any authentication or encryption.
Command
Modes CONFIGURATION
Command
History
Version 9.3(0.0) Added support for the AES128-CFB encryption algorithm on
the S4820T, S4810, S6000 and Z-Series platforms
Usage
Information To enable robust, effective protection and security for SNMP packets transferred
between the server and the client, you can use the
snmp-server user
username group groupname 3 auth authentication-type auth-
password priv aes128 priv-password
to specify that AES128-CFB
encryption algorithm needs to be used.
1576
Simple Network Management Protocol (SNMP) and Syslog