H3C SR6600-X Configuration Manual page 183

# Configure the IP address of the agent, and make sure the agent and the NMS can reach each
other. (Details not shown.)
# Create the user role test, and permit test to have read and write access to the snmp node (OID
1.3.6.1.2.1.11).
<Agent> system-view
[Agent] role name test
[Agent-role-test] rule 1 permit read write oid 1.3.6.1.2.1.11
# Permit the user role test to have read-only access to the system node (OID 1.3.6.1.2.1.1) and
hh3cUIMgt node (OID 1.3.6.1.4.1.25506.2.2).
[Agent-role-test] rule 2 permit read oid 1.3.6.1.4.1.25506.2.2
[Agent-role-test] rule 3 permit read oid 1.3.6.1.2.1.1
[Agent-role-test] quit
# Create the SNMPv3 user managev3user with the user role test, and enable the authentication
with privacy security model for the user. Set the authentication algorithm to sha, authentication key
to 123456TESTauth&!, encryption algorithm to aes128, and privacy key to 123456TESTencr&!.
[Agent] snmp-agent usm-user v3 managev3user user-role test simple authentication-mode
sha 123456TESTauth&! privacy-mode aes128 123456TESTencr&!
# Configure contact and physical location information for the agent.
[Agent] snmp-agent sys-info contact Mr.Wang-Tel:3306
[Agent] snmp-agent sys-info location telephone-closet,3rd-floor
# Enable notifications, specify the NMS at 1.1.1.2 as a notification destination, and set the
username to managev3user for the notifications.
[Agent] snmp-agent trap enable
[Agent] snmp-agent target-host trap address udp-domain 1.1.1.2 params securityname
managev3user v3 privacy
2. Configure the SNMP NMS:
Specify SNMPv3.
Create the SNMPv3 user managev3user.
Enable both authentication and privacy functions.
Use SHA- 1 for authentication and AES for encryption.
Set the authentication key to 123456TESTauth&! and the privacy key to 123456TESTencr&!.
Set the timeout time and maximum number of retries.
For information about configuring the NMS, see the NMS manual.
NOTE:
The SNMP settings on the agent and the NMS must match.
Configuring SNMPv3 in VACM mode
1. Configure the agent:
# Configure the IP address of the agent, and make sure the agent and the NMS can reach each
other. (Details not shown.)
# Assign the NMS (SNMPv3 group managev3group) read and write access to the objects under
the ifTable node (OID 1.3.6.1.2.1.2.2), and deny its access to any other MIB object.
<Agent> system-view
[Agent] undo snmp-agent mib-view ViewDefault
169