Users Guide

NOTE: Create a remote engine ID with the snmp-server engineID command before you configure a remote user with
the snmp-server user command. If you change the configured engine ID for a remote device, you must reconfigure the
authentication and privacy passwords for all remote users associated with the remote engine ID.
snmp-server engineID [local engineID] [remote ip-address {[udp-port port-number] remote-
engineID}]
To display the localized authentication and privacy keys in an SNMPv3 user configuration, use the show snmp engineID
local command.
Configure SNMP engineID
OS10(config)# snmp-server engineID local 80:00:02:b8:04:61:62:63
Display SNMP engineID
OS10# show snmp engineID local
Local default SNMP engineID: 0x800002a2036c2b59fbd8a0
Configure SNMP views
Configure a read-only, read-write, or notify view of the MIB tree structure in the SNMP agent on the switch.
The oid-tree value specifies the OID in the MIB tree hierarchy at which a view starts. Enter included or excluded to
include or exclude the rest of the sub-tree MIB contents in the view. If necessary, re-enter the command to exclude tree entries
in the included content.
snmp-server view view-name oid-tree [included | excluded]
Configure read-only view
OS10(config)# snmp-server view readonly 1.3.6.1.2.1.31.1.1.1.6 included
Configure read-write view
OS10(config)# snmp-server view rwView 1.3.6.1.2.1.31.1.1.1.6 included
OS10(config)# snmp-server view rwView 1.3.6.1.2.1.31.0.0.0.0 excluded
Display SNMP views
OS10# show snmp view
view name : readview
OID : 1.3.6.5
excluded : True
Configure SNMP groups
Configure an SNMP group with the views allowed for the members of the group. Specify the read-only, read-write, and/or
notification access to the SNMP agent.
The security model corresponds to the SNMP version that users use to send and receive SNMP messages. The security level
configures SNMPv3 user authentication and privacy settings:
● auth — Authenticate users in SNMP messages.
● noauth — Do not authenticate users or encrypt SNMP messages; send messages in plain text.
● priv — Authenticate users and encrypt/decrypt SNMP messages.
Enter an ACL to limit user access so that only messages from and to ACL-allowed users are received and sent from the SNMP
agent on the switch.
snmp-server group group-name {v1 | v2c | v3 security-level} [access acl-name]
[read view-name] [write view-name] [notify view-name]
154
System management