Fips Compliance; Security Strength; Configuring Snmp Basic Parameters; Configuring Snmpv1 Or Snmpv2C Basic Parameters - H3C SR6600-X Configuration Manual

If you create the same SNMP community or user with both modes multiple times, the most recent
configuration takes effect. For more information about user roles and the rule command, see
Fundamentals Command Reference.
For an NMS to access an agent:
The RBAC mode requires the user role bound to a community name or username to have the same
•
access right to MIB objects as the NMS.
• The VACM mode requires only the access right from the NMS to MIB objects.
H3C recommends the RBAC mode because it is more secure.

FIPS compliance

The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,
commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information about
FIPS mode, see Security Configuration Guide.

Security strength

By default, the device provides low encryption. To obtain high encryption, you must install the Strong
Cryptography feature license. This feature provides stronger cryptography, additional IPsec tunnels, and
higher encryption performance. For more information about obtaining the Strong Cryptography feature
license, see the release notes or contact HP Support.
Support for features, commands, and parameters varies by the cryptography capability.

Configuring SNMP basic parameters

SNMPv3 differs from SNMPv1 and SNMPv2c in many ways. Their configuration procedures are
described in separate sections.

Configuring SNMPv1 or SNMPv2c basic parameters

SNMPv1 and SNMPv2c settings are supported only for high encryption in non-FIPS mode.
To configure SNMPv1 or SNMPv2c basic parameters:
Step
1. Enter system view.
2. (Optional.) Enable the
SNMP agent.
3. (Optional.) Configure
the system contact.
Command
system-view
snmp-agent
snmp-agent sys-info contact sys-contact
157
Remarks
N/A
By default, the SNMP agent is
disabled.
The SNMP agent is enabled when
you use any command that begins
with snmp-agent except for the
snmp-agent calculate-password
command.
The default system contact is
Hangzhou H3C Tech. Co., Ltd..