API Guide

snmp-server engineID
Configures the local and remote SNMP engine IDs.
Syntax
snmp-server engineID [local engineID] [remote ip-address {[udp-port port-
number] remote-engineID}]
Parameters
local engineID Enter the engine ID that identifies the local SNMP agent on the switch as an
octet colon-separated number. A maximum of 27 characters.
remote ip-address Enter the IPv4 or IPv6 address of a remote SNMP device that accesses
the local SNMP agent.
udp-port port-number Enter the UDP port number on the remote device, from 0 to 65535.
remote-engineID Enter the engine ID that identifies the SNMP agent on a remote device, 0x
then by a hexadecimal string).
Defaults The local engine ID is generates using the MAC address of the management Ethernet interface.
Command Mode CONFIGURATION
Usage
Information
The local engine ID generates the localized keys for the authentication and privilege passwords. These
passwords authenticate SNMP users and encrypt SNMP messages. If you reconfigure the local Engine ID,
the localized keys also change. The existing values are no longer valid, and a warning message displays. As
a result, you must reconfigure SNMP users with new localized password keys.
In addition, if you change the configured engine ID for a remote device, you must reconfigure the
authentication and privacy passwords for the remote user.
To display the current local engine ID, use the show snmp engineID local command.
Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.2.0. Also
supported in SmartFabric mode starting in release 10.5.0.1.
The no version of this command resets the default engine ID values.
Example
OS10(config)# snmp-server engineID local 80:00:02:b8:04:61:62:63
OS10(config)# snmp-server engineID local 80:00:02:b8:04:61:62:63
% Warning: Localized passwords need to be regenerated for local user.
OS10(config)# snmp-server engineID remote 1.1.1.1 0xaaffcc
OS10(config)# snmp-server engineID remote 1.1.1.2 udp-port 432 0xabeecc
Supported
Releases
10.4.2.0 or later
snmp-server group
Configures the views allowed for the users in an SNMP group.
Syntax
snmp-server group group-name {v1 | v2c | v3 security-level} [access acl-
name] [read view-name] [write view-name] [notify view-name]
Parameters
group-name Enter the name of the group. A maximum of 32 alphanumeric characters.
v1 SNMPv1 provides no user authentication or privacy protection. SNMP messages are sent in
plain text.
v2c SNMPv2c provides no user authentication or privacy protection. SNMP messages are sent in
plain text.
v3 security-level SNMPv3 provides optional user authentication and encryption for SNMP
messages, configured with the snmp-server user command.
security-level (SNMPv3 only) Configure the security level for SNMPv3 users:
auth Authenticate users in SNMP messages.
noauth Do not authenticate users or encrypt SNMP messages; send messages in plain text.
System management 169