Configuring Snmp; Configuring Snmp Users; Enforcing Snmp Message Encryption - Cisco Nexus 9000 Series Configuration Manual

Configuring SNMP

Configuring SNMP
Be aware that the Cisco NX-OS commands for this feature may differ from those commands used in Cisco
Note
IOS.

Configuring SNMP Users

You can configure a user for SNMP.
Procedure
Step 1
Step 2
Step 3
Step 4

Enforcing SNMP Message Encryption

You can configure SNMP to require authentication or encryption for incoming requests. By default, the SNMP
agent accepts SNMPv3 messages without authentication and encryption. When you enforce privacy, Cisco
NX-OS responds with an authorization error for any SNMPv3 PDU request using a security level parameter
of either noAuthNoPriv or authNoPriv.
Cisco Nexus 9000 Series NX-OS System Management Configuration Guide, Release 6.x
116
Command or Action
configure terminal
Example:
switch# configure terminal
switch(config)#
snmp-server user name [auth {md5 | sha}
passphrase [auto] [priv [aes-128]
passphrase] [engineID id] [localizedkey]]
Example:
switch(config)# snmp-server user Admin
auth sha abcd1234 priv abcdefgh
show snmp user
Example:
switch(config) # show snmp user
copy running-config startup-config
Example:
switch(config)# copy running-config
startup-config
Purpose
Enters global configuration mode.
Configures an SNMP user with authentication and
privacy parameters. The passphrase can be any
case-sensitive, alphanumeric string up to 64
characters. If you use the localizedkey keyword,
the passphrase can be any case-sensitive,
alphanumeric string up to 130 characters.
The engineID format is a 12-digit, colon-separated
decimal number.
(Optional)
Displays information about one or more SNMP
users.
(Optional)
Copies the running configuration to the startup
configuration.
Configuring SNMP