H3C S5600 SERIES Operation Manual page 818

To do...
Set system information and
specify to enable SNMPv3 on
the switch
Set an SNMP group
Encrypt a plain-text password
to generate a cipher-text one
Add a user to an SNMP group
Set the maximum size of an
SNMP packet for SNMP agent
to receive or send
Set the device engine ID
Create or update the view
information
An S5600 Ethernet switch provides the following functions to prevent attacks through unused UDP
ports.
Executing the snmp-agent command or any of the commands used to configure SNMP agent
enables the SNMP agent, and at the same opens UDP port 161 used by SNMP agents and the
UDP port used by SNMP trap respectively.
Executing the undo snmp-agent command disables the SNMP agent and closes UDP ports used
by SNMP agent and SNMP trap as well.
Use the command...
snmp-agent sys-info
{ contact sys-contact |
location sys-location | version
{ { v1 | v2c | v3 }* | all } }
snmp-agent group v3
group-name [ authentication |
privacy ] [ read-view
read-view ] [ write-view
write-view ] [ notify-view
notify-view ] [ acl acl-number ]
snmp-agent
calculate-password
plain-password mode { md5 |
sha } { local-engineid |
specified-engineid engineid }
snmp-agent usm-user v3
user-name group-name
[ [ cipher ]
authentication-mode { md5 |
sha } auth-password
[ privacy-mode { des56 |
aes128 } priv-password ] ] [ acl
acl-number ]
snmp-agent packet max-size
byte-count
snmp-agent local-engineid
engineid
snmp-agent mib-view
{ included | excluded }
view-name oid-tree [ mask
mask-value ]
1-5
Remarks
Optional
By default, the contact
information for system
maintenance is "Hangzhou
H3C Technologies Co., Ltd.",
the system location is
"Hangzhou China", and the
SNMP version is SNMPv3.
Required
Optional
This command is used if
password in cipher-text is
needed for adding a new user.
Required
Optional
1,500 bytes by default.
Optional
By default, the device engine ID
is "enterprise number + device
information".
Optional
By default, the view name is
ViewDefault and OID is 1.