Assigning Snmpv3 Users To Multiple Roles; Adding Or Deleting Communities - HP Cisco MDS 9020 - Fabric Switch Configuration Manual

Chapter 31 Configuring SNMP
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Alternatively, you can enforce the SNMPv3 message encryption globally on all the users using the
following commands:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# snmp-server
globalEnforcePriv
switch(config)# no snmp-server
globalEnforcePriv

Assigning SNMPv3 Users to Multiple Roles

The SNMP server user configuration is enhanced to accommodate multiple roles (groups) for SNMPv3
users. After the initial SNMPv3 user creation, you can map additional roles for the user.
Only users belonging to a network-admin role can assign roles to other users.
Note
To configure multiple roles for SNMPv3 users from the CLI, follow these steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# snmp-server user NewUser
role1
switch(config)# snmp-server user NewUser
role2
switch(config)# no snmp-server user
User5 role2

Adding or Deleting Communities

You can configure read-only or read-write access for SNMPv1 and SNMPv2 users. Refer to RFC 2576.
To create an SNMPv1 or SNMPv2c community, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# snmp-server community snmp_Community ro
switch(config)# snmp-server community snmp_Community rw
switch(config)# no snmp-server community snmp_Community
OL-16184-01, Cisco MDS SAN-OS Release 3.x
Purpose
Enters configuration mode.
Enforces the SNMPv3 message encryption for all the users
on the switch.
Disables global SNMPv3 message encryption enforcement.
Purpose
Enters configuration mode.
Creates or modifies the settings for an SNMPv3 user
(NewUser) for the role1 role.
Creates or modifies the settings for an SNMPv3 user
(NewUser) for the role2 role.
Removes role2 for the specified user (User5).
Purpose
Enters configuration mode.
Adds read-only access for the
specified SNMP community.
Adds read-write access for the
specified SNMP community.
Deletes access for the specified
SNMP community (default).
Cisco MDS 9000 Family CLI Configuration Guide
Creating and Modifying Users
31-7