H3C S5120-SI Series Command Reference Manual page 668

The user name configured by using this command is applicable to the SNMPv3 networking
environments, If the agent and the NMS use SNMPv3 packets to communicate with each other, you
need to create an SNMPv3 user.
To make the configured user valid, create an SNMP group first. Configure the authentication and
encryption modes when you create a group, and configure the authentication and encryption
passwords when you create a user.
If you specify the cipher keyword, the system considers the arguments auth-password and
priv-password as cipher text passwords. In this case, the command supports copy and paste,
meaning if the engine IDs of the two devices are the same, you can copy and paste the SNMPv3
configuration commands in the configuration file on device A to device B and execute the
commands on device B. The cipher text password and plain text password on the two devices are
the same.
If you do not specify the cipher keyword, the system considers the arguments auth-password and
priv-password as plain text passwords. In this case, if you perform the copy and paste operation,
the system will encrypt these two passwords, resulting in inconsistency of the cipher text and plain
text passwords of the two devices.
Note that:
If you use the snmp-agent usm-user v3 cipher command, the pri-password argument in this
command can be obtained by the snmp-agent calculate-password command. To make the
calculated cipher text password applicable to the snmp-agent usm-user v3 cipher command and
have the same effect as that in the snmp-agent usm-user v3 cipher command, ensure that the
same privacy protocol is specified for the two commands and the local engine ID specified in the
snmp-agent usm-user v3 cipher command is consistent with the SNMP entity engine ID
specified in the snmp-agent calculate-password command.
If you execute this command repeatedly to configure the same user (namely, the user names are
the same, no limitation to other keywords and arguments), the last configuration takes effect.
A plain text password is required when the NMS accesses the device; therefore, please remember
the user name and the plain text password when you create a user.
Related commands: snmp-agent calculate-password, snmp-agent group, snmp-agent usm-user
{ v1 | v2c }.
Examples
# Add a user testUser to the SNMPv3 group testGroup. Configure the security model as
authentication without privacy, the authentication protocol as MD5, the plain-text authentication
password as authkey.
<Sysname> system-view
[Sysname] snmp-agent group v3 testGroup authentication
[Sysname] snmp-agent usm-user v3 testUser testGroup authentication-mode md5 authkey
Set the SNMP version on the NMS to SNMPv3
Fill in the user name testUser,
Set the authentication protocol to MD5
Set the authentication password to authkey
Establish a connection, and the NMS can access the MIB objects in the ViewDefault view on the
device
1-29