Administrator Guide

compliance with RFC 3826. RFCs for SNMPv3 define two authentication hash algorithms, namely, HMAC-
MD5-96 and HMAC-SHA1-96. These are the full forms or editions of the truncated versions, namely,
HMAC-MD5 and HMAC-SHA1 authentication algorithms.
Z9000
Syntax
snmp-server user name {group_name remote ip-address udp-port
port-number} [1 | 2c | 3] [encrypted] [auth {md5 | sha} auth-
password] [priv {des56 | aes128–cfb} priv– password] [access
access-list-name | ipv6 access-list-name | access-list-name
ipv6 access-list-name]
To remove a user from the SNMP group, use the no snmp-server user name
{group_name remote ip-address udp-port port-number} [1 | 2c |
3] [encrypted] [auth {md5 | sha} auth-password] [priv {des56 |
aes128–cfb} priv-password] [access access-list-name | ipv6
access-list-name | access-list-name ipv6 access-list-name]
command.
Parameters
auth-password (OPTIONAL) Enter a text string (up to 20 characters long)
password that enables the agent to receive packets from the
host and to send packets to the host. Minimum: eight
characters long.
aes128 (OPTIONAL) Enter the keyword aes128 to initiate the
AES128-CFB encryption algorithm for transmission of SNMP
packets.
priv-password (OPTIONAL) Enter a text string (up to 20 characters long)
password that enables the host to encrypt the contents of
the message it sends to the agent and to decrypt the
contents of the message it receives from the agent.
Minimum: eight characters long.
Defaults If no authentication or privacy option is configured, then the messages are
exchanged (attempted anyway) without any authentication or encryption.
Command
Modes
CONFIGURATION
Command
History
Version Description
9.7(0.0) Introduced on the S6000-ON.
9.3(0.0) Added support for the AES128-CFB encryption algorithm on
the S4820T, S4810, S6000 and Z-Series platforms
Usage
Information
To enable robust, effective protection and security for SNMP packets transferred
between the server and the client, you can use the snmp-server user
username group groupname 3 auth authentication-type auth-
password
priv aes128 priv-password to specify that AES128-CFB
encryption algorithm needs to be used.
You cannot modify the FIPS mode if SNMPv3 users are already configured and
present in the system. An error message is displayed if you attempt to change the
Simple Network Management Protocol (SNMP) and Syslog
1565