HP MSR2000/3000/4000 Router Series Network Management and Monitoring Command Reference

160
SNMPv1 or SNMPv2c group. To display the SNMPv1 and SNMPv2c communities created in this way,
use the display snmp-agent community command.
To change the access right of the SNMPv1 or SNMPv2c user, use the snmp-agent community command
or the snmp-agent group { v1 | v2c } command. If the snmp-agent community command is used, the
SNMPv1 or SNMPv2c is removed from the SNMP group.
The snmp-agent usm-user { v1 | v2c } command enables managing SNMPv1 and SNMPv2c
communities in the same way as managing SNMPv3 users. It does not affect the way of configuring
SNMPv1 and SNMPv2c communities on the NMS.
Examples
# Add the user userv2c to the SNMPv2c group readCom so an NMS can use the protocol SNMPv2c and
the read-only community name userv2c to access the device.
<Sysname> system-view
[Sysname] snmp-agent sys-info version v2c
[Sysname] snmp-agent group v2c readCom
[Sysname] snmp-agent usm-user v2c userv2c readCom
# Add the user userv2c in the SNMPv2c group readCom so only the NMS at 1.1.1.1 can use the protocol
SNMPv2c and read-only community name userv2c to access the device.
<Sysname> system-view
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 1.1.1.1 0.0.0.0
[Sysname-acl-basic-2001] rule deny source any
[Sysname-acl-basic-2001] quit
[Sysname] snmp-agent sys-info version v2c
[Sysname] snmp-agent group v2c readCom
[Sysname] snmp-agent usm-user v2c userv2c readCom acl 2001
Related commands
• display snmp-agent community
• snmp-agent community
• snmp-agent group
snmp-agent usm-user v3
Use snmp-agent usm-user v3 to add a user to an SNMPv3 group.
Use undo snmp-agent usm-user v3 to delete a user from an SNMPv3 group.
Syntax
In non-FIPS mode:
snmp-agent usm-user v3 user-name group-name [ remote { ip-address | ipv6 ipv6-address }
[ vpn-instance vpn-instance-name ] ] [ { cipher | simple } authentication-mode { md5 | sha }
auth-password [ privacy-mode { aes128 | des56 } priv-password ] ] [ acl acl-number | acl ipv6
ipv6-acl-number ] *
undo snmp-agent usm-user v3 user-name group-name { local | engineid engineid-string | remote
{ ip-address | ipv6 ipv6-address } [ vpn-instance vpn-instance-name ] }
In FIPS mode: