Command Reference Guide

N8406-022A 1Gb Intelligent L2 Switch Command Reference Guide (ISCLI) 72
SNMPv3 User Security Model configuration
You can make use of a defined set of user identities using this Security Model. An SNMP engine must have the
knowledge of applicable attributes of a user.
These commands help you create a user security model entry for an authorized user. You need to provide a
security name to create the USM entry.
The following table describes the User Security Model Configuration commands.
Table 70 User Security Model Configuration commands
Command
Description
snmp-server user <1-16>
name <1-32 characters>
Configures a string up to 32 characters long that represents the name of the
user. This is the login name that you need in order to access the switch.
Command mode: Global configuration
snmp-server user <1-16>
authentication-protocol
{md5|sha|none}
[authentication-password
<password>]
Configures the authentication protocol and password.
The authentication protocol can be HMAC-MD5-96 or HMAC-SHA-96, or
none. The default algorithm is none.
When you configure an authentication algorithm, you must provide a
password, otherwise you receive an error message during validation. This
command allows you to create or change your password for authentication.
Command mode: Global configuration
snmp-server user <1-16>
privacy-protocol {des|none}
[privacy-password
<password>]
Configures the type of privacy protocol and the privacy password.
The privacy protocol protects messages from disclosure. The options are
des (CBC-DES Symmetric Encryption Protocol) or none. If you specify
des as the privacy protocol, then make sure that you have selected one of
the authentication protocols (MD5 or HMAC-SHA-96). If you select none as
the authentication protocol, you receive an error message.
You can create or change the privacy password.
Command mode: Global configuration
no snmp-server user <1-16>
Deletes the USM user entries.
Command mode: Global configuration
show snmp-server v3 user
Displays the USM user entries.
Command mode: All
SNMPv3 View configuration
The following table describes the SNMPv3 View Configuration commands.
Table 71 SNMPv3 View Configuration commands
Command
Description
snmp-server view <1-128>
name <1-32 characters>
Defines the name for a family of view subtrees up to a maximum of 32
characters.
Command mode: Global configuration
snmp-server view <1-128>
tree <1-64 characters>
Defines the Object Identifier (OID), a string of maximum 64 characters,
which when combined with the corresponding mask defines a family of
view subtrees.
An example of an OID is 1.3.6.1.2.1.1.1.0
Command mode: Global configuration
snmp-server view <1-128>
mask <1-32 characters>
Defines the bit mask, which in combination with the corresponding tree
defines a family of view subtrees. The mask can have a maximum of 32
characters.
Command mode: Global configuration
snmp-server view <1-128>
type {included|excluded}
Selects whether the corresponding instances of
vacmViewTreeFamilySubtree and
vacmViewTreeFamilyMask define a family of view subtrees, which is
included in or excluded from the MIB view.
Command mode: Global configuration
no snmp-server view <1-128>
Deletes the vacmViewTreeFamily group entry.
Command mode: Global configuration
show snmp-server v3 view
Displays the current vacmViewTreeFamily configuration.
Command mode: All