F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices System Management and Maintenance Command Reference-6PW100

169
Views
System view
Default command level
3: Manage level
Usage guidelines
The snmp-agent command is optional for an SNMP configuration task. The SNMP agent is automatically
enabled when you execute any command that begins with snmp-agent except for the snmp-agent
calculate-password command.
Examples
# Enable the SNMP agent.
<Sysname> system-view
[Sysname] snmp-agent
snmp-agent calculate-password
Use snmp-agent calculate-password to convert a plaintext key to an encrypted key for authentication or
encryption in SNMPv3.
Syntax
In non-FIPS mode:
snmp-agent calculate-password plain-password mode { 3desmd5 | 3dessha | md5 | sha }
{ local-engineid | specified-engineid engineid }
In FIPS mode:
snmp-agent calculate-password plain-password mode sha { local-engineid | specified-engineid
engineid }
Views
System view
Default command level
3: Manage level
Parameters
plain-password: Specifies a plaintext authentication or privacy key.
mode: Specifies authentication and privacy algorithms. Select a mode option, depending on the
authentication and privacy algorithm you are configuring with the snmp-agent usm-user v3 command.
The three privacy algorithms Advanced Encryption Standard (AES), Triple Data Encryption Standard
(3DES), and Data Encryption Standard (DES) are in descending order of security strength. Higher
security means more complex implementation mechanism and lower speed. DES is enough to meet
general requirements. The Message-Digest Algorithm 5 (MD5) and Secure Hash Algorithm (SHA-1) are
the two authentication algorithms. MD5 is faster but less secure than SHA-1. For more information about
these algorithms, see VPN Configuration Guide.
• 3desmd5: Converts the plaintext privacy key to an encrypted key for 3DES encryption used together
with MD5 authentication.
• 3dessha: Converts the plaintext privacy key to an encrypted key for 3DES encryption used together
with SHA-1 authentication.