H3C H3C S3600 Series, Руководство по управлению

Страница: 919 / 1277

1-27
adding a new community name. If you fill the newly created username into the community name field of
the NMS, the NMS can establish a connection with the SNMP.
To make the configured user take effect, you must create a group first.
Related commands: snmp-agent group , snmp-agent community , and snmp-agent local-engineid .
Examples
# Create a group named readCom and an SNMPv2c user userv2c .
<Sysname> system-view
[Sysname] snmp-agent sys-info version v2c
[Sysname] snmp-agent group v2c readCom
[Sysname] snmp-agent usm-user v2c userv2c readCom
Specify the SNMP version of the NMS as SNMPv2c , fill the write community name field with userv2c .
Then the NMS can access the agent.
# Create an SNMPv2c user userv2c in group readCom , permitting only the NMS with an IP address
1.1.1.1 to access the agent, and denying the access of other NMSs.
<Sysname> system-view
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 1.1.1.1 0.0.0.0
[Sysname-acl-basic-2001] rule deny source any
[Sysname-acl-basic-2001] quit
[Sysname] snmp-agent sys-info version v2c
[Sysname] snmp-agent group v2c readCom
[Sysname] snmp-agent usm-user v2c userv2c readCom acl 2001
Specify the SNMP version of the NMS with an IP address 1.1.1.1 as SNMPv2c , fill the write community
name field with userv2c . Then the NMS can access the agent.
snmp-agent usm-user v3
Syntax
snmp - agent usm - user v3 user-name group-name [ [ cipher ] authentication - mode { md5 | sha }
auth-password [ privacy - mode { des56 | aes128 } priv-password ] ] [ acl acl-number ]
undo snmp - agent usm - user v3 user-name group-name { local | engineid engineid-string }
View
System view
Parameters
user-name : Username, a string of 1 to 32 characters.
group-name : Name of the group corresponding to the user, a string of 1 to 32 characters.
cipher : Specifies the authentication password ( auth-password ) or encryption password ( priv-password )
to be in cipher text. The cipher text password can be calculated using the snmp-agent
calculate-password command.
authentication-mode : Specifies the security mode as authentication required. If you do not specify this
keyword, neither authentication nor encryption is performed.
md5 : Uses HMAC MD5 algorithm for authentication.