F3215-HP Load Balancing Module System Maintenance Command Reference-6PW101

81
cipher: Specifies that auth-password and priv-password are encrypted keys, which can be calculated to
a hexadecimal string by using the snmp-agent calculate-password command. If this keyword is not
specified, auth-password and priv-password are plaintext keys.
authentication-mode: Specifies an authentication algorithm. MD5 is faster but less secure than SHA.
• md5: Specifies the MD5 authentication algorithm.
• sha: Specifies the SHA-1 authentication algorithm.
auth-password: Specifies a case-sensitive plaintext or encrypted authentication key. A plaintext key is a
string of 1 to 64 visible characters. If the cipher and md5 keywords are specified, auth-password
represents a hexadecimal string of 32 characters or a non-hexadecimal string of 53 characters. If the
cipher and sha keywords are specified, auth-password is a hexadecimal string of 40 characters or a
non-hexadecimal string of 57 characters.
privacy-mode: Specifies an encryption algorithm for privacy. The three encryption algorithms AES, 3DES,
and DES are in descending order of security. Higher security means more complex implementation
mechanism and lower speed. DES is enough to meet general requirements.
• 3des: Specifies the 3DES algorithm.
• des56: Specifies the DES algorithm.
• aes128: Specifies the AES algorithm.
priv-password: Specifies a case-sensitive plaintext or encrypted privacy key. A plaintext key is a string of
1 to 64 characters. If the cipher keyword is specified, the encrypted privacy key length requirements
differ by authentication algorithm and key string format, as shown in Table 19.
Table 19 Encrypted privacy key length requirements
Authentication
al
g
orithm
Encryption
al
g
orithm
Hexadecimal string Non-hexadecimal string
MD5 3DES 64 characters 73 characters
MD5
AES128 or
DES-56
32 characters 53 characters
SHA 3DES 80 characters 73 characters
SHA
AES128 or
DES-56
40 characters 53 characters
acl acl-number: Specifies a basic ACL to filter NMSs by source IPv4 address. The acl-number argument
represents a basic ACL number in the range of 2000 to 2999. Only the NMSs with the IPv4 addresses
permitted in the ACL can use the specified username to access the SNMP agent.
acl ipv6 ipv6-acl-number: Specifies a basic ACL to filter NMSs by source IPv6 address. The
ipv6-acl-number argument represents a basic ACL number in the range of 2000 to 2999. Only the NMSs
with the IPv6 addresses permitted in the ACL can use the specified username to access the SNMP agent.
local: Represents a local SNMP entity user.
engineid engineid-string: Specifies an SNMP engine ID as a hexadecimal string. The engineid-string
argument must comprise an even number of hexadecimal characters, in the range of 10 to 64. All-zero
and all-F strings are invalid.
Usage guidelines
You must create an SNMPv3 user for the agent and the NMS to use SNMPv3.