Page 74
SNMP
User Security Model
The User Security Model page provides the capability to configure the SNMP V3 user accounts.
To access the User Security Model page, click
System > Advanced Configuration > SNMP > User
Security Model
in the navigation menu.
Figure 47. SNMP User Security Model Page
Table 32. SNMP User Security Model Fields
Field
Description
User Name
Specifies the name of the SNMP user being added for the User-based Security Model (USM).
Each user name must be unique within the SNMP agent user list. A user name cannot contain
any leading or embedded blanks
Group Name
A SNMP group is a group to which hosts running the SNMP service belong. A group name
parameter is simply the name of that group by which SNMP communities are identified. The
use of a group name provides some security and context for agents receiving requests and
initiating traps and does the same for management systems and their tasks. An SNMP agent
won't respond to a request from a management system outside its configured group, but an
agent can be a member of multiple groups at the same time. This allows for communications
with SNMP managers from different groups.
Engine ID Type
This field is available on the Add New SNMP User page. Specify whether the engine ID for
the SNMP v3 agent is local or remote. If the agent is local, the engine ID is automatically
generated. If the agent is remote, you must specify the engine ID.
Engine ID
Each SNMPv3 agent has an engine ID that uniquely identifies the agent in the device. If given
this entry will be used only for packets whose engine id is this. This field takes an hexadecimal
string in the form 0102030405.
Authentication Method
The authentication protocol to be used on authenticated messages on behalf of the user.
None - No authentication will be used for this user.
MD5 - MD5 protocol will be used. This option requires a password of 1-32 hexadecimal
characters.
SHA - SHA protocol will be used. This option requires a password of 1-32 hexadecimal
characters.
MD5-Key - MD5 protocol will be used. This option requires a pregenerated MD5 authen-
tication key of 32 hexadecimal characters.
SHA-Key - SHA protocol will be used. This option requires a pregenerated SHA authen-
tication key of 48 hexadecimal characters.
Password
This field is available on the Add New SNMP User page. If the Authentication Method is MD5
or SHA, use this field to specify the password used to generate the key to be used in
authenticating messages on behalf of this user. If the Authentication Method is MD5-Key or
SHA-Key, use this field to specify the pregenerated MD5 or SHA authentication key.
