User-Based Security Model - Cisco Nexus 9000 Series Configuration Manual

SNMPv3
• authPriv—Security level that provides both authentication and encryption.
Three security models are available: SNMPv1, SNMPv2c, and SNMPv3. The security model combined with
the security level determine the security mechanism applied when the SNMP message is processed. The
following table identifies what the combinations of security models and levels mean.
Table 9: SNMP Security Models and Levels
Model
v1
v2c
v3
v3

User-Based Security Model

The SNMPv3 User-Based Security Model (USM) refers to SNMP message-level security and offers the
following services:
Cisco Nexus 9000 Series NX-OS System Management Configuration Guide, Release 6.x
112
Level Authentication
noAuthNoPriv Community string
noAuthNoPriv Community string
authNoPriv HMAC-MD5 or
HMAC-SHA
authPriv HMAC-MD5 or
HMAC-SHA
Configuring SNMP
Encryption What Happens
No Uses a community
string match for
authentication.
No Uses a community
string match for
authentication.
No Provides
authentication based
on the Hash-Based
Message
Authentication Code
(HMAC) Message
Digest 5 (MD5)
algorithm or the
HMAC Secure Hash
Algorithm (SHA).
DES Provides
authentication based
on the HMAC-MD5
or HMAC-SHA
algorithms. Provides
Data Encryption
Standard (DES)
56-bit encryption in
addition to
authentication based
on the Cipher Block
Chaining (CBC)
DES (DES-56)
standard.