HP FlexFabric 12500 Series Network Management And Monitoring Command Reference page 163

visible characters, which must contain numbers, uppercase letters, lowercase letters, and special
characters. If the cipher keyword is specified, the encrypted authentication key length requirements differ
by authentication algorithm and key string format, as shown in
Table 31 Encrypted authentication key length requirements
Authentication
algorithm
MD5
SHA
privacy-mode: Specifies an encryption algorithm for privacy. AES is slower but more secure than DES.
aes128: Specifies the AES (Advanced Encryption Standard) algorithm.
•
des56: Specifies the DES (Data Encryption Standard) algorithm.
•
priv-password: Specifies a case-sensitive plaintext or encrypted privacy key. In non-FIPS mode, a
plaintext key is a string of 1 to 64 characters. In FIPS mode, a plaintext key is a string of 15 to 64 visible
characters, which must contain numbers, uppercase letters, lowercase letters, and special characters. If
the cipher keyword is specified, the encrypted privacy key length requirements differ by authentication
algorithm and key string format, as shown in
Table 32 Encrypted privacy key length requirements
Authentication
algorithm
MD5
SHA
acl acl-number: Specifies a basic IPv4 ACL to filter NMSs by source IPv4 address. The acl-number
argument represents an ACL number in the range of 2000 to 2999. Only NMSs with an IPv4 address
permitted in the ACL can use the specified username to access the SNMP agent. If no ACL is specified,
the specified ACL does not exist, or the specified ACL does not have any rules, any NMS can use the
specified username to access the SNMP agent.
acl ipv6 ipv6-acl-number: Specifies a basic IPv6 ACL to filter NMSs by source IPv6 address. The
ipv6-acl-number argument represents an ACL number in the range of 2000 to 2999. Only NMSs with an
IPv6 address permitted in the IPv6 ACL can use the specified username to access the SNMP agent. If no
ACL is specified, the specified ACL does not exist, or the specified ACL does not have any rules, any NMS
can use the specified username to access the SNMP agent.
local: Specifies the local SNMP engine.
engineid engineid-string: Specifies an SNMP engine. The engineid-string argument represents the
engine ID and must comprise an even number of hexadecimal characters, in the range of 10 to 64.
All-zero and all-F strings are invalid.
Usage guidelines
You must create an SNMPv3 group before you assign an SNMPv3 user to the group. Otherwise, the user
cannot take effect after it is created. An SNMP group contains one or multiple users and specifies the MIB
views and security model for the group of users. The authentication and encryption algorithms for each
user are specified when they are created.
Hexadecimal string
32 characters
40 characters
Encryption
Hexadecimal string
algorithm
AES128 or
32 characters
DES-56
AES128 or
40 characters
DES-56
Table
Non-hexadecimal string
53 characters
57 characters
Table 32.
155
31.
Non-hexadecimal string
53 characters
53 characters