H3C SR6600-X Configuration Manual page 176

Step
11. Create an SNMPv3
user.
Command
•
High encryption in non-FIPS mode (in
VACM mode):
snmp-agent usm-user v3 user-name
group-name [ remote { ip-address | ipv6
ipv6-address } [ vpn-instance
vpn-instance-name ] ] [ { cipher | simple }
authentication-mode { md5 | sha }
auth-password [ privacy-mode { aes128 |
3des | des56 } priv-password ] ] [ acl
acl-number | acl ipv6 ipv6-acl-number ] *
•
High encryption in non-FIPS mode (in RBAC
mode):
snmp-agent usm-user v3 user-name
user-role role-name [ remote { ip-address |
ipv6 ipv6-address } [ vpn-instance
vpn-instance-name ] ] [ { cipher | simple }
authentication-mode { md5 | sha }
auth-password [ privacy-mode { aes128 |
3des | des56 } priv-password ] ] [ acl
acl-number | acl ipv6 ipv6-acl-number ] *
•
High encryption in FIPS mode (in VACM
mode):
snmp-agent usm-user v3 user-name
group-name [ remote { ip-address | ipv6
ipv6-address } [ vpn-instance
vpn-instance-name ] ] { cipher | simple }
authentication-mode sha auth-password
[ privacy-mode aes128 priv-password ] [ acl
acl-number | acl ipv6 ipv6-acl-number ] *
•
High encryption in FIPS mode (in RBAC
mode):
snmp-agent usm-user v3 user-name
user-role role-name [ remote { ip-address |
ipv6 ipv6-address } [ vpn-instance
vpn-instance-name ] ] { cipher | simple }
authentication-mode sha auth-password
[ privacy-mode aes128 priv-password ] [ acl
acl-number | acl ipv6 ipv6-acl-number ] *
•
Low encryption in VACM mode:
snmp-agent usm-user v3 user-name
group-name [ remote { ip-address | ipv6
ipv6-address } [ vpn-instance
vpn-instance-name ] ] [ { cipher | simple }
authentication-mode { md5 | sha }
auth-password [ privacy-mode des56
priv-password ] ] [ acl acl-number | acl ipv6
ipv6-acl-number ] *
•
Low encryption in RBAC mode:
snmp-agent usm-user v3 user-name
user-role role-name [ remote { ip-address |
ipv6 ipv6-address } [ vpn-instance
vpn-instance-name ] ] [ { cipher | simple }
authentication-mode { md5 | sha }
auth-password [ privacy-mode des56
priv-password ] ] [ acl acl-number | acl ipv6
ipv6-acl-number ]
162
Remarks
If the cipher keyword is
specified, the arguments
auth-password and
priv-password are used as
encrypted keys.
To send informs to an SNMPv3
NMS, you must configure the
remote ip-address option to
specify the IP address of the
NMS.