R3721-F3210-F3171-HP High-End Firewalls System Management and Maintenance Command Reference-6PW101

172
Description
Use snmp-agent group to configure an SNMP group and specify its access right.
Use undo snmp-agent group to delete an SNMP group.
By default, SNMP groups configured by the snmp-agent group v3 command use a
no-authentication-no-privacy security model.
An SNMP group defines security model, access right, and so on. A user in this SNMP group has all these
public properties.
In FIPS mode, only SNMPv3 settings can be configured.
Related commands: snmp-agent mib-view and snmp-agent usm-user.
Examples
# Create an SNMP group group1 on an SNMPv3 enabled device, no authentication, no privacy.
<Sysname> system-view
[Sysname] snmp-agent group v3 group1
snmp-agent local-engineid
Syntax
snmp-agent local-engineid engineid
undo snmp-agent local-engineid
View
System view
Default level
3: Manage level
Parameters
engineid: Specifies an SNMP engine ID as a hexadecimal string. It must comprise an even number of
hexadecimal characters, which ranges from 10 to 64. All-zero and all-F strings are invalid.
Description
Use snmp-agent local-engineid to configure a local engine ID for an SNMP entity.
Use undo snmp-agent local-engineid to restore the default local engine ID.
By default, the local engine ID is the combination of the company ID and the device ID. Device ID varies
by product and might be an IP address, a MAC address, or a user-defined hexadecimal string.
An SNMP engine ID uniquely identifies an SNMP entity in an SNMP managed network. Make sure the
local SNMP engine ID is unique within your SNMP managed network to avoid communication
problems.
If you have configured SNMPv3 users, change the local SNMP engine ID only when necessary. The
change can void the SNMPv3 usernames and encrypted keys you have configured.
Typically, the device uses its default engine ID. For ease of remembrance, you can set engine IDs for the
devices according to the network planning. For example, if both device 1 and device 2 are on the first
floor of building A, you can set the engine ID of device 1 to 000Af0010001, and that of device 2 to
000Af0010002.
Related commands: snmp-agent usm-user.