H3C SOHO IE4300, Command Reference Manual

Page: 3016 / 3296

48
# Add user remoteUser for the SNMP remote engine at 10.1.1.1 to SNMPv3 group testGroup , and
enable authentication and encryption for the group. Specify authentication algorithm HMAC-SHA1 ,
encryption algorithm AES , plaintext-form authentication key 123456TESTauth&! , and plaintext-form
encryption key 123456TESTencr&! for the user.
<Sysname> system-view
[Sysname] snmp-agent remote 10.1.1.1 engineid 123456789A
[Sysname] snmp-agent group v3 testGroup privacy
[Sysname] snmp-agent usm-user v3 remoteUser testGroup remote 10.1.1.1 simple
authentication-mode sha 123456TESTauth&! privacy-mode aes128 123456TESTencr&!
In RBAC mode:
# Create SNMPv3 user testUser with user role network-operator and enable authentication for the
user. Specify authentication algorithm HMAC-SHA1 and plaintext-form authentication key
123456TESTplat&! for the user.
<Sysname> system-view
[Sysname] snmp-agent usm-user v3 testUser user-role network-operator simple
authentication-mode sha 123456TESTplat&!
For an NMS to have read-only access to all MIB objects, make sure the following configurations on
the NMS are the same as the SNMP agent:
•
SNMPv3 username.
•
SNMP protocol version.
•
Authentication algorithm and key.
Related commands
display snmp-agent usm-user
snmp-agent calculate-password
snmp-agent group
snmp-agent remote
snmp-agent usm-user v3 user-role
snmp-agent usm-user v3 user-role
Use
snmp-agent usm-user v3 user-role
to assign a user role to an SNMPv3 user created in
RBAC mode.
Use
undo snmp-agent usm-user user-role
to remove a user role.
Syntax
snmp-agent usm-user v3 user-name user-role role-name
undo snmp-agent usm-user v3 user-name user-role role-name
Default
An SNMPv3 user has the user role assigned to it at its creation.
Views
System view
Predefined user roles
network-admin
Parameters
user-name
: Specifies an SNMPv3 username, a case-sensitive string of 1 to 32 characters.