H3C S5120-SI Series Command Reference Manual page 667

View
System view
Default Level
3: Manage level
Parameters
user-name: User name, a string of 1 to 32 characters. It is case sensitive.
group-name: Group name, a string of 1 to 32 characters. It is case sensitive.
cipher: Specifies that auth-password and priv-password are cipher text passwords, which can be
calculated by using the snmp-agent calculate-password command.
authentication-mode: Specifies the security model to be authentication. MD5 is faster than SHA, while
SHA provides a higher security than MD5.
md5: Specifies the authentication protocol as MD5.
sha: Specifies the authentication protocol as SHA-1.
auth-password: Authentication password. If the cipher keyword is not specified, auth-password
indicates a plain text password, which is a string of 1 to 64 visible characters. If the cipher keyword is
specified, auth-password indicates a cipher text password. If the md5 keyword is specified,
auth-password is a string of 32 hexadecimal characters. If the sha keyword is specified, auth-password
is a string of 40 hexadecimal characters.
privacy-mode: Specifies the security model to be privacy. The three encryption algorithms AES, 3DES,
and DES are in descending order in terms of security. Higher security means more complex
implementation mechanism and lower speed. DES is enough to meet general requirements.
3des: Specifies the privacy protocol as 3DES.
des56: Specifies the privacy protocol as DES.
aes128: Specifies the privacy protocol as AES.
priv-password: The privacy password. If the cipher keyword is not specified, priv-password indicates a
plain text password, which is a string of 1 to 64 characters; if the cipher keyword is specified,
priv-password indicates a cipher text password; if the 3des keyword is specified, priv-password is a
string of 80 hexadecimal characters; if the aes128 keyword is specified, priv-password is a string of 40
hexadecimal characters; if the des56 keyword is specified, priv-password is a string of 40 hexadecimal
characters.
acl acl-number: Associates a basic ACL with the user. acl-number is in the range 2000 to 2999. By
using a basic ACL, you can restrict the source IP address of SNMP packets, that is, you can configure to
allow or prohibit SNMP packets with a specific source IP address, so as to allow or prohibit the specified
NMS to access the agent by using this user name.
local: Represents a local SNMP entity user.
engineid engineid-string: The engine ID string, an even number of hexadecimal characters, in the
range 10 to 64. Its length must not be an odd number, and the all-zero and all-F strings are invalid.
Description
Use the snmp-agent usm-user v3 command to add a user to an SNMP group.
Use the undo snmp-agent usm-user v3 command to delete a user from an SNMP group.
1-28