Snmp-Agent Usm-User V3 - H3C s3600 series Command Manual

adding a new community name. If you fill the newly created username into the community name field of
the NMS, the NMS can establish a connection with the SNMP.
To make the configured user take effect, you must create a group first.
Related commands: snmp-agent group, snmp-agent community, and snmp-agent local-engineid.
Examples
# Create a group named readCom and an SNMPv2c user userv2c.
<Sysname> system-view
[Sysname] snmp-agent sys-info version v2c
[Sysname] snmp-agent group v2c readCom
[Sysname] snmp-agent usm-user v2c userv2c readCom
Specify the SNMP version of the NMS as SNMPv2c, fill the write community name field with userv2c.
Then the NMS can access the agent.
# Create an SNMPv2c user userv2c in group readCom, permitting only the NMS with an IP address
1.1.1.1 to access the agent, and denying the access of other NMSs.
<Sysname> system-view
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 1.1.1.1 0.0.0.0
[Sysname-acl-basic-2001] rule deny source any
[Sysname-acl-basic-2001] quit
[Sysname] snmp-agent sys-info version v2c
[Sysname] snmp-agent group v2c readCom
[Sysname] snmp-agent usm-user v2c userv2c readCom acl 2001
Specify the SNMP version of the NMS with an IP address 1.1.1.1 as SNMPv2c, fill the write community
name field with userv2c. Then the NMS can access the agent.

snmp-agent usm-user v3

Syntax
snmp-agent usm-user v3 user-name group-name [ [ cipher ] authentication-mode { md5 | sha }
auth-password [ privacy-mode { des56 | aes128 } priv-password ] ] [ acl acl-number ]
undo snmp-agent usm-user v3 user-name group-name { local | engineid engineid-string }
View
System view
Parameters
user-name: Username, a string of 1 to 32 characters.
group-name: Name of the group corresponding to the user, a string of 1 to 32 characters.
cipher: Specifies the authentication password (auth-password) or encryption password (priv-password)
to be in cipher text. The cipher text password can be calculated using the snmp-agent
calculate-password command.
authentication-mode: Specifies the security mode as authentication required. If you do not specify this
keyword, neither authentication nor encryption is performed.
md5: Uses HMAC MD5 algorithm for authentication.
1-27