Motorola EX-3524, Cli Reference Manual

Page: 148 / 617

Chapter 5
| SNMP Commands
SNMPv3 Commands
– 148 –
Command Mode
Global Configuration
Command Usage
◆
Local users (i.e., the command does not specify a remote engine identifier)
must be configured to authorize management access for SNMPv3 clients, or to
identify the source of SNMPv3 trap messages sent from the local switch.
◆
Remote users (i.e., the command specifies a remote engine identifier) must be
configured to identify the source of SNMPv3 inform messages sent from the
local switch.
◆
The SNMP engine ID is used to compute the authentication/privacy digests
from the password. You should therefore configure the engine ID with the
snmp-server engine-id command before using this configuration command.
◆
Before you configure a remote user, use the snmp-server engine-id command
to specify the engine ID for the remote device where the user resides. Then use
the
snmp-server user command to specify the user and the IP address for the
remote device where the user resides. The remote agent’s SNMP engine ID is
used to compute authentication/privacy digests from the user’s password. If the
remote engine ID is not first configured, the
snmp-server user command
specifying a remote user will fail.
◆
SNMP passwords are localized using the engine ID of the authoritative agent.
For informs, the authoritative SNMP agent is the remote agent. You therefore
need to configure the remote agent’s SNMP engine ID before you can send
proxy requests or informs to it.
Example
Console(config)#snmp-server user steve group r&d v3 auth md5 greenpeace priv
des56 einstien
Console(config)#snmp-server user mark group r&d remote 192.168.1.19 v3 auth
md5 greenpeace priv des56 einstien
Console(config)#
snmp-server view
This command adds an SNMP view which controls user access to the MIB. Use the
no form to remove an SNMP view.
Syntax
snmp-server view view-name oid-tree { included | excluded }
no snmp-server view view-name
view-name - Name of an SNMP view. (Range: 1-32 characters)
oid-tree - Object identifier of a branch within the MIB tree. Wild cards can be
used to mask a specific portion of the OID string. (Refer to the examples.)
included - Defines an included view.