User manual
C
HAPTER
4
| Configuring the Switch
Configuring Security
– 73 –
CONFIGURING SNMPV3 USERS
Use the SNMPv3 User Configuration page to define a unique name and
remote engine ID for each SNMPv3 user. Users must be configured with a
specific security level, and the types of authentication and privacy
protocols to use.
N
OTE
:
Any user assigned through this page is associated with the group
assigned to the USM Security Model on the SNMPv3 Groups Configuration
page (page 74), and the views assigned to that group in the SNMPv3
Access Configuration page (page 76).
PATH
Advanced Configuration, Security, Switch, SNMP, Users
PARAMETERS
These parameters are displayed:
◆ Engine ID - The engine identifier for the SNMP agent on the remote
device where the user resides. (Range: 10-64 hex digits, excluding a
string of all 0’s or all F’s)
To send inform messages to an SNMPv3 user on a remote device, you
must first specify the engine identifier for the SNMP agent on the
remote device where the user resides. The remote engine ID is used to
compute the security digest for authenticating and encrypting packets
sent to a user on the remote host.
SNMP passwords are localized using the engine ID of the authoritative
agent. For informs, the authoritative SNMP agent is the remote agent.
You therefore need to configure the remote agent's SNMP engine ID
before you can send proxy requests or informs to it. (See "Configuring
SNMP System and Trap Settings" on page 68.)
◆ User Name - The name of user connecting to the SNMP agent.
(Range: 1-32 characters, ASCII characters 33-126 only)
◆ Security Level - The security level assigned to the user:
■
NoAuth, NoPriv - There is no authentication or encryption used in
SNMP communications. (This is the default for SNMPv3.)
■
Auth, NoPriv - SNMP communications use authentication, but the
data is not encrypted.
■
Auth, Priv - SNMP communications use both authentication and
encryption.
◆ Authentication Protocol - The method used for user authentication.
(Options: None, MD5, SHA; Default: MD5)
◆ Authentication Password - A plain text string identifying the
authentication pass phrase. (Range: 1-32 characters for MD5, 8-40
characters for SHA)