218
In FIPS mode (in RBAC mode):
snmp-agent
usm-user
v3
user-name
user-role role-name
[
remote
{
ipv4-address
|
ipv6
ipv6-address
} [
vpn-instance
vpn-instance-name
] ] [ {
cipher
|
simple
}
authentication-mode
sha
auth-password
[
privacy-mode
aes128
priv-password
] ] [
acl
{
ipv4-acl-number
|
name
ipv4-acl-name
} |
acl ipv6
{
ipv6-acl-number
|
name ipv6-acl-name
} ] *
undo
snmp-agent
usm-user
v3
user-name
{
local
|
engineid
engineid-string
|
remote
{
ipv4-address
|
ipv6
ipv6-address
} [
vpn-instance
vpn-instance-name
] }
Default
No SNMPv3 users exist.
Views
System view
Predefined user roles
network-admin
Parameters
user-name
: Specifies an SNMPv3 username, a case-sensitive string of 1 to 32 characters.
group-name
: Specifies an SNMPv3 group name, a case-sensitive string of 1 to 32 characters. The
group can be one that has been created or not. The user takes effect only after you create the group.
user-role
role-name
: Specifies a user role name, a case-sensitive string of 1 to 63 characters.
remote
{
ipv4-address
|
ipv6
ipv6-address
}: Specifies a target host by its IPv4 or IPv6 address,
typically the NMS, to receive the notifications. To send SNMPv3 notifications to a target host, you
need to specify this option and use the
snmp-agent
remote
command to bind the IPv4 or IPv6
address to the remote engine ID.
vpn-instance
vpn-instance-name
: Specifies the VPN for the target host receiving SNMP
notifications. The
vpn-instance-name
argument specifies the name of the MPLS L3VPN, a
case-sensitive string of 1 to 31 characters. If this parameter is not specified, the target host is in the
public network.
cipher
: Specifies an authentication key and a privacy key in encrypted form. The keys can be
calculated to a hexadecimal string by using the
snmp-agent calculate-password
command.
simple
: Specifies an authentication key and a privacy key in plaintext from. For security purposes,
the keys specified in plaintext form will be stored in encrypted form.
authentication-mode
: Specifies an authentication algorithm: MD5 or SHA. MD5 is faster but less
secure than SHA. For more information about these algorithms, see
Security Configuration Guide
.
•
md5
: Specifies the MD5 authentication algorithm.
•
sha
: Specifies the SHA-1 authentication algorithm.
auth-password
: Specifies the authentication key. This argument is case sensitive.
