Snmp-Agent Usm-User { V1 | V2C - H3C S3100 Series Command Manual

snmp-agent usm-user { v1 | v2c }

Syntax
snmp-agent usm-user { v1 | v2c } user-name group-name [ acl acl-number ]
undo snmp-agent usm-user { v1 | v2c } user-name group-name
View
System view
Parameters
v1: Creates an SNMPv1 user.
v2c: Creates an SNMPv2c user.
v3: Specifies to use SNMPv3 security mode.
user-name: Name of the user to be added, a string of 1 to 32 characters.
group-name: Name of the group corresponding to the user, a string of 1 to 32 characters.
acl-number: ID of a basic ACL, in the range 2000 to 2999. Using basic ACL can restrict the source
addresses of SNMP messages, namely, permitting or refusing the SNMP messages with specific
source addresses, thus restricting access between the NMS and the agent.
Description
Use the snmp-agent usm-user { v1 | v2c } command to add a user to an SNMP group.
Use the undo snmp-agent usm-user { v1 | v2c } command to remove a user from an SNMP group.
This command is applicable to SNMPv1 and SNMPv2c, and is equal to using the snmp-agent
community command to create a community.
As the SNMP protocol defines, in the networking of SNMPv1 and SNMPv2c, community name is used
for authentication between NMS and agent, and in the networking of SNMPv3, username is used for
authentication. If you want to configure a username and use the username for authentication, the
device supports SNMPv1 and SNMPv2c users. Creating an SNMPv1 or SNMPv2c user is equal to
adding a new community name. If you fill the newly created username into the community name field of
the NMS, the NMS can establish a connection with the SNMP.
To make the configured user take effect, you must create a group first.
Related commands: snmp-agent group, snmp-agent community, and snmp-agent local-engineid.
Examples
# Create a group named readCom and an SNMPv2c user userv2c.
<Sysname> system-view
[Sysname] snmp-agent sys-info version v2c
[Sysname] snmp-agent group v2c readCom
[Sysname] snmp-agent usm-user v2c userv2c readCom
Specify the SNMP version of the NMS as SNMPv2c, fill the write community name field with userv2c.
Then the NMS can access the agent.
# Create an SNMPv2c user userv2c in group readCom, permitting only the NMS with an IP address
1.1.1.1 to access the agent, and denying the access of other NMSs.
1-26