R211x-HP Flexfabric 11900 Network Management and Monitoring Command Reference

107
snmp-agent calculate-password
Use snmp-agent calculate-password to convert a plaintext key to a ciphertext key for authentication or
encryption in SNMPv3.
Syntax
In non-FIPS mode:
snmp-agent calculate-password plain-password mode { md5 | sha } { local-engineid |
specified-engineid engineid }
In FIPS mode:
snmp-agent calculate-password plain-password mode sha { local-engineid | specified-engineid
engineid }
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
plain-password: Specifies a plaintext authentication or privacy key.
mode: Specifies the same authentication mode as configured in the snmp-agent usm-user v3 command.
MD5 is faster than SHA-1, while SHA-1 provides higher security than MD5.
• md5: Converts the plaintext authentication key to a ciphertext key for MD5 authentication, or
converts the plaintext privacy key to a ciphertext key for AES or DES encryption used in conjunction
with MD5.
• sha: Converts the plaintext authentication key to a ciphertext key for SHA-1 authentication, or
converts the plaintext privacy key to a ciphertext key for AES or DES encryption used in conjunction
with SHA-1 authentication.
local-engineid: Uses the local engine ID to calculate the ciphertext key. You can configure the local
engine ID by using the snmp-agent local-engineid command.
specified-engineid engineid: Uses a user-defined engine ID to calculate the ciphertext key. The engineid
argument specifies an SNMP engine ID as a hexadecimal string. It must comprise an even number of
hexadecimal characters, in the range of 10 to 64. All-zero and all-F strings are invalid.
Usage guidelines
Make sure the SNMP agent is enabled before you execute the snmp-agent calculate-password
command.
Use this command to calculate ciphertext authentication and privacy keys when you create SNMPv3
users by using the snmp-agent usm-user v3 command.
The converted key is valid only under the engine ID specified for key conversion.
Examples
# Use the local engine and the SHA-1 algorithm to convert the plaintext key authkey to a ciphertext key.
<Sysname> system-view
[Sysname] snmp-agent calculate-password authkey mode sha local-engineid