Users Guide

● localized — (SNMPv3 only) Generate an SNMPv3 authentication and/or privacy key in localized
key format.
● access acl-name — (Optional) Enter the name of an IPv4 or IPv6 access list to filter SNMP
requests on the switch. A maximum of 16 characters.
● remote ip-address/prefix-length udp-port port-number — (Optional) Enter the IPv4
or IPv6 address of the user's remote device and the UDP port number used to connect to the SNMP
agent on the switch, from 0 to 65535. The default is 162.
Defaults Not configured
Command Mode CONFIGURATION
Usage
Information
Use the snmp-server user command to set up the desired security level for SNMP access. For
SNMPv3 users, configure user authorization and message encryption. Re-enter this command multiple
times to configure SNMP security settings for all users.
The group to which a user is assigned determines the user's SNMP access. To configure a group's SNMP
access to the switch — read, write, and notify, use the snmp-server user command.
No default values exist for SNMPv3 authentication and privacy algorithms and passwords. If you forget
a password, you cannot recover it — you must reconfigure the user. You can specify either a plain-text
password or an encrypted cypher-text password. In either case, the password stores in the configuration
in an encrypted form and displays as encrypted in the show running-config snmp output.
A localized authentication or privacy key is more complex and provides greater privacy protection. To
display the localized authentication and privacy keys in an SNMPv3 user configuration, use the show
running-configuration snmp command.
To limit user access to the SNMP agent on the switch, enter an access acl-name value. In IPv6 ACLs,
SNMP supports only IPv6 and UDP types. TCP, ICMP, and port rules are not supported.
Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.2.0. Also
supported in SmartFabric mode starting in release 10.5.0.1.
The no version of this command removes a user from the SNMP group.
Example
(Encrypted
passwords)
OS10(config)# snmp-server user privuser v3group v3 auth md5
9fc53d9d908118b2804fe80e3ba8763d priv des
d0452401a8c3ce42804fe80e3ba8763d
Example (Plain-
text passwords)
OS10(config)# snmp-server user authuser v3group v3 auth md5 authpasswd
Example (Remote
user)
OS10(config)# snmp-server user n3user ngroup remote 172.31.1.3 udp-port
5009 3
auth md5 authpasswd
Supported
Releases
10.4.2.0 or later
snmp-server view
Configures an SNMPv3 view.
Syntax
snmp-server view view-name oid-tree [included | excluded]
Parameters
● view-name — Enter the name of a read-only, read-write, or notify view. A maximum of 32
characters.
● oid-tree — Enter the SNMP object ID at which the view starts in 12-octet dotted-decimal format.
● included — (Optional) Include the MIB family in the view.
● excluded — (Optional) Exclude the MIB family from the view.
Defaults Not configured
Command Mode CONFIGURATION
134 System management