Specifications

set snmp usm
Chapter 8
IP Services Commands
150
Defaults No SNMPv3 users are configured by default. When you configure an
SNMPv3 user, the default access is read-only, and the default authentication and
encryption types are both none.
Access Enabled.
Examples The following command creates USM user snmpmgr1, associated with
the local SNMP engine ID. This user can send traps to notification receivers.
PROMPT# set snmp usm snmpmgr1 snmp-engine-id local
success: change accepted.
The following command creates USM user securesnmpmgr1, which uses SHA
authentication and 3DES encryption with passphrases. This user can send informs
to the notification receiver that has engine ID 192.168.40.2.
PROMPT# set snmp usm securesnmpmgr1 snmp-engine-id ip 192.168.40.2 auth-type sha
auth-pass-phrase myauthpword encrypt-type 3des encrypt-pass-phrase
mycryptpword
encrypt-type {none | des | 3des | aes}
{encrypt-pass-phrase string |
encrypt-key hex-string}
Specifies the encryption type used
for SNMP traffic. You can specify
one of the following:
• none—No encryption is used.
This is the default.
• des—Data Encryption Standard
(DES) encryption is used.
• 3des—Triple DES encryption is
used.
• aes—Advanced Encryption
Standard (AES) encryption is
used.
If the encryption type is des, 3des, or
aes, you can specify a passphrase or
a hexadecimal key.
• To specify a passphrase, use the
encrypt-pass-phrase string
option. The string can be from 8
to 32 alphanumeric characters
long, with no spaces.
• To specify a key, use the
encrypt-key hex-string option.