Install Guide

Usage
Information
Changing the value of the SNMP Engine ID has important side effects. A user’s password (entered on
the command line) is converted to a message digest algorithm (MD5) or secure hash algorithm (SHA)
security digest. This digest is based on both the password and the local Engine ID. The command line
password is then destroyed, as required by RFC 2274. Because of this deletion, if the local value of
the Engine ID changes, the security digests of SNMPv3 users is invalid and the users will have to be
reconfigured.
For the remote Engine ID, the host IP and UDP port are the indexes to the command that are matched to
either overwrite or remove the configuration.
Related
Commands
● show snmp engineID — displays the SNMP engine and all the remote engines that are configured on
the router.
● show running-config snmp — displays the SNMP running configuration.
snmp-server group
Configure a new SNMP group or a table that maps SNMP users to SNMP views.
Syntax
snmp-server group [group_name {1 | 2c | 3 {auth | noauth | priv}}] [read
name] [write name] [notify name] [access access-list-name | ipv6 access-
list-name | access-list-name ipv6 access-list-name]]
To remove a specified group, use the no snmp-server group [group_name {v1 | v2c |
v3 {auth | noauth | priv}}] [read name] [write name] [notify name] [access
access-list-name | ipv6 access-list-name | access-list-name ipv6 access-
list-name]] command.
Parameters
group_name Enter a text string (up to 20 characters long) as the name of the group. The
following groups are created for mapping to read/write community/security-names
(defaults):
● v1v2creadg — maps to a community/security-name with ro permissions.
● 1v2cwriteg — maps to a community/security-name rw permissions.
1 | 2c | 3 (OPTIONAL) Enter the security model version number (1, 2c, or 3):
● 1 is the least secure version.
● 3 is the most secure of the security modes.
● 2c allows transmission of informs and counter 64, which allows for integers
twice the width of what is normally allowed.
The default is 1.
auth (OPTIONAL) Enter the keyword auth to specify authentication of a packet
without encryption.
noauth (OPTIONAL) Enter the keyword noauth to specify no authentication of a packet.
priv (OPTIONAL) Enter the keyword priv to specify both authentication and then
scrambling of the packet.
read name (OPTIONAL) Enter the keyword read then a name (a string of up to 20 characters
long) as the read view name. The default is GlobalView and is assumed to be every
object belonging to the internet (1.3.6.1) OID space.
write name (OPTIONAL) Enter the keyword write then a name (a string of up to 20
characters long) as the write view name.
notify name (OPTIONAL) Enter the keyword notify then a name (a string of up to 20
characters long) as the notify view name.
access access-
list-name
(Optional) Enter the standard IPv4 access list name (a string up to 16 characters
long).
ipv6 access-list-
name
(Optional) Enter the keyword ipv6 then the IPv6 access list name (a string up to
16 characters long).
Simple Network Management Protocol (SNMP) and Syslog 1471