User's Manual

SNMP
6-43
6
Passphrase – The password or key associated with the authentication and privacy
settings. A minimum of eight plain text characters is required.
Action – Click the Add button to add a new user to the list. Click the edit button to
change details of an existing user. Click the Del button to remove a user from the list.
Note: Users must be assigned to groups that have the same security levels. For
example, a user who has “Auth Type” and “Priv Type” configured to MD5 and
DES respectively (that it, uses both authentication and data encryption) must be
assigned to the RWPriv group. If this same user were instead assigned to the
read-only (RO) group, the user would not be able to access the database.
CLI Commands for Configuring SNMPv3 Users – Use the snmp-server engine-id
command to define the SNMP v3 engine before assigning users to groups. Use the
snmp-server user command to assign users to one of the three groups and set the
appropriate authentication and encryption types to be used. To view the current
SNMP v3 engine ID, use the show snmp command. To view SNMP users and
group settings, use the show snmp users or show snmp group-assignments
commands.
Enterprise AP(config)#snmp-server engine-id 1a:2b:3c:4d:00:ff 7-45
Enterprise AP(config)#snmp-server user 7-46
User Name<1-32> :chris
Group Name<1-32> :RWPriv
Authtype(md5,<cr>none):md5
Passphrase<8-32>:a good secret
Privacy(des,<cr>none) :des
Passphrase<8-32>:a very good secret
Enterprise AP(config)#exit
Enterprise AP#show snmp users
7-51
=============================================
UserName :chris
GroupName :RWPriv
AuthType :MD5
Passphrase:****************
PrivType :DES
Passphrase:****************
=============================================
Enterprise AP#show snmp group-assignments
7-51
GroupName :RWPriv
UserName :chris
Enterprise AP#