Configuring Snmp Users; Enforcing Snmp Message Encryption - Cisco nexus 5000 series Cli Configuration Manual

Configuring SNMP
S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m

Configuring SNMP Users

To configure a user for SNMP, perform this task:
Command
Step 1
switch# configuration terminal
Step 2
switch(config)# snmp-server user name
[auth {md5 | sha} passphrase [auto]
[priv [aes-128] passphrase] [engineID
id][localizedkey]]
Step 3
switch(config-callhome)# show snmp user
Step 4
switch(config)# copy running-config
startup-config

Enforcing SNMP Message Encryption

You can configure SNMP to require authentication or encryption for incoming requests. By default the
SNMP agent accepts SNMPv3 messages without authentication and encryption. When you enforce
privacy, Cisco Nexus 5000 Series responds with an authorization Error for any SNMPv3 PDU request
using securityLevel parameter of either noAuthNoPriv or authNoPriv.
To enforce SNMP message encryption for a user in the global configuration mode, perform this task:
Command
switch(config)# snmp-server user name
enforcePriv
To enforce SNMP message encryption for all users in the global configuration mode, perform this task:
Command
switch(config)# snmp-server
globalEnforcePriv
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
1-6
Purpose
Enters configuration mode.
Configures an SNMP user with authentication and
privacy parameters.
(Optional) Displays information about one or more
SNMP users.
(Optional) Saves this configuration change.
Purpose
Enforces SNMP message encryption for this user.
Purpose
Enforces SNMP message encryption for all users.
Chapter 1 Configuring SNMP
OL-16597-01