R21xx-HP FlexFabric 11900 Network Management and Monitoring Command Reference

103
cipher: Specifies that auth-password and priv-password are encrypted keys, which can be calculated to
a hexadecimal string by using the snmp-agent calculate-password command.
simple: Specifies that auth-password and priv-password are plaintext keys.
authentication-mode: Specifies an authentication algorithm. MD5 is faster but less secure than SHA. For
more information about these algorithms, see Security Configuration Guide.
• md5: Specifies the MD5 authentication algorithm.
• sha: Specifies the SHA-1 authentication algorithm.
auth-password: Specifies a case-sensitive plaintext or encrypted authentication key. In non-FIPS mode, a
plaintext key is a string of 1 to 64 visible characters. In FIPS mode, a plaintext key is a string of 15 to 64
visible characters, which must contain numbers, upper-case letters, lower-case letters, and special
characters. If the cipher keyword is specified, the encrypted authentication key length requirements differ
by authentication algorithm and key string format, as shown in Table 27.
Table 27 Encrypted authentication key length requirements
Authentication
al
g
orithm
Hexadecimal string Non-hexadecimal string
MD5 32 characters 53 characters
SHA 40 characters 57 characters
privacy-mode: Specifies an encryption algorithm for privacy. AES is slower but more secure than DES.
• aes128: Specifies the AES (Advanced Encryption Standard) algorithm.
• des56: Specifies the DES (Data Encryption Standard) algorithm.
priv-password: Specifies a case-sensitive plaintext or encrypted privacy key. In non-FIPS mode, a
plaintext key is a string of 1 to 64 characters. In FIPS mode, a plaintext key is a string of 15 to 64 visible
characters, which must contain numbers, upper-case letters, lower-case letters, and special characters. If
the cipher keyword is specified, the encrypted privacy key length requirements differ by authentication
algorithm and key string format, as shown in Table 28.
Table 28 Encrypted privacy key length requirements
Authentication
al
g
orithm
Encryption
al
g
orithm
Hexadecimal string Non-hexadecimal string
MD5
AES128 or
DES-56
32 characters 53 characters
SHA
AES128 or
DES-56
40 characters 53 characters
acl acl-number: Specifies a basic IPv4 ACL to filter NMSs by source IPv4 address. The acl-number
argument represents an ACL number in the range of 2000 to 2999. Only NMSs with an IPv4 address
permitted in the ACL can use the specified username to access the SNMP agent. If no ACL is specified,
the specified ACL does not exist, or the specified ACL does not have any rules, any NMS can use the
specified username to access the SNMP agent.
acl ipv6 ipv6-acl-number: Specifies a basic IPv6 ACL to filter NMSs by source IPv6 address. The
ipv6-acl-number argument represents an ACL number in the range of 2000 to 2999. Only NMSs with an
IPv6 address permitted in the IPv6 ACL can use the specified username to access the SNMP agent. If no
ACL is specified, the specified ACL does not exist, or the specified ACL does not have any rules, any NMS
can use the specified username to access the SNMP agent.