Cisco ACE-4710-K9 Administration Manual page 338

Configuring SNMP Users
•
•
•
•
•
•
•
Note
Cisco 4700 Series Application Control Engine Appliance Administration Guide
8-28
Only network monitoring operations are supported through the ACE
Note
implementation of SNMP. In this case, all SNMP users are
automatically assigned the system-defined default group of
Network-Monitor. For details on creating users, see the Cisco 4700
Series Application Control Engine Appliance Virtualization
Configuration Guide.
auth—(Optional) Sets authentication parameters for the user. Authentication
determines that the message is from a valid source.
md5—Specifies the HMAC Message Digest 5 (MD5) encryption algorithm
for user authentication.
sha—Specifies the HMAC Secure Hash Algorithm (SHA) encryption
algorithm for user authentication.
password1—User authentication password. Enter an unquoted text string
with no space and a maximum of 130 alphanumeric characters. The ACE
automatically synchronizes the SNMP authentication password as the
password for the CLI user. The ACE supports the following special characters
in a password:
, . / = + - ^ @ ! % ~ # $ * ( )
Note that the ACE encrypts clear text passwords in the running-config.
localizedkey—(Optional) Specifies that the password is in a localized key
format for security encryption.
priv—(Optional) Specifies encryption parameters for the user. The priv
option and the aes-128 option indicate that this privacy password is for
generating a 128-bit AES key.
aes-128—Specifies the 128-byte Advanced Encryption Standard (AES)
algorithm for privacy. AES is a symmetric cipher algorithm and is one of the
privacy protocols for SNMP message encryption. It conforms with
RFC 3826.
For an SNMPv3 operation using the external AAA server, user
configurations on this server require AES for SNMP PDU encryption.
Chapter 8 Configuring SNMP
OL-11157-01