S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
31-6
Cisco MDS 9000 Family CLI Configuration Guide
OL-16184-01, Cisco MDS SAN-OS Release 3.x
Chapter 31 Configuring SNMP
Creating and Modifying Users
To create or modify passwords for SNMP users from the CLI, follow these steps:
Caution
Avoid using the
localizedkey
option
when configuring an SNMP user from the CLI. The localized keys
are not portable across devices as they contain device engine ID information. If a configuration file is
copied to the device, the passwords may not be set correctly if the configuration file was generated at a
different device. Explicitly configure the desired passwords after copying the configuration into the
device. Passwords specified with the
localizedkey
option are limited to 130 characters.
Note
The
snmp-server user
command takes the engineID as an additional parameter. The engineID creates
the notification target user (see the
“Configuring the Notification Target User” section on page 31-12
).
If the engineID is not specified, the local user is created.
Enforcing SNMPv3 Message Encryption
By default the SNMP agent allows the securityLevel parameters of authNoPriv and authPriv for the
SNMPv3 messages that use user-configured SNMPv3 message encryption with auth and priv keys.
To enforce the message encryption for a user, follow these steps:
Command
Purpose
Step 1
switch#
config t
switch(config)#
Enters configuration mode.
Step 2
switch(config)#
snmp-server user user1
role1 auth md5 0xab0211gh priv
0x45abf342 localizedkey
Specifies the password to be in localized key format
using the DES option for security encryption.
switch(config)#
snmp-server user user1
role2 auth sha 0xab0211gh priv aes-128
0x45abf342 localizedkey
Specifies the password to be in localized key format
using the 128-bit AES option for security encryption
Command
Purpose
Step 1
switch#
config t
switch(config)#
Enters configuration mode.
Step 2
switch(config)#
snmp-server user
testUser enforcePriv
Enforces the message encryption for SNMPv3 messages
using this user.
Note
You can only use this command for previously
existing users configured with both auth and priv
keys. When the user is configured to enforce privacy,
for any SNMPv3 PDU request using securityLevel
parameter of either noAuthNoPriv or authNoPriv, the
SNMP agent responds with authorizationError.
switch(config)#
no snmp-server
user testUser enforcePriv
Disables SNMPv3 message encryption enforcement.
Содержание 9124 - Cisco MDS Fabric Switch
Страница 76: ...Se n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a ck d o c c i s c o c o m ...
Страница 122: ...Se n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a ck d o c c i s c o c o m ...
Страница 328: ...Se n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a ck d o c c i s c o c o m ...
Страница 482: ...Se n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a ck d o c c i s c o c o m ...
Страница 733: ...Se n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a ck d o c c i s c o c o m P A R T 5 Security ...
Страница 734: ...Se n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a ck d o c c i s c o c o m ...
Страница 957: ...Se n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a ck d o c c i s c o c o m P A R T 6 IP Services ...
Страница 958: ...Se n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a ck d o c c i s c o c o m ...
Страница 1182: ...Se n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a ck d o c c i s c o c o m ...
Страница 1214: ...Se n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a ck d o c c i s c o c o m ...
Страница 1307: ...Se n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a ck d o c c i s c o c o m P A R T 9 Traffic Management ...
Страница 1308: ...Se n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a ck d o c c i s c o c o m ...
Страница 1331: ...Se n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a ck d o c c i s c o c o m P A R T 1 0 Troubleshooting ...
Страница 1332: ...Se n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a ck d o c c i s c o c o m ...