D Isplaying U Ser I Nformation - HP ProCurve 9304M Security Manual

Security Guide for ProCurve 9300/9400 Series Routing Switches
Displaying User Information
To display the definition of an SNMP user account, enter a command such as the following:
ProCurveRS(config)# show snmp user
username = bob
acl id = 2
group = admin
security model = v3
group acl id = 0
authtype = md5
authkey = 3aca18d90b8d172760e2dd2e8f59b7fe
privtype = des,
engine ID= 800007c70300e052ab0000
Syntax:
Interpreting Varbinds in Report Packets
If an SNMP version 3 request packet is to be rejected by an SNMP agent, the agent sends a report packet that
contains one or more varbinds. The varbinds contain additional information, showing the cause of failures. An
SNMP manager application decodes the description from the varbind. The following table presents a list of
varbinds supported by the SNMP agent.
Varbind Object Identifier
1. 3. 6. 1. 6. 3. 11. 2. 1. 3. 0
1. 3. 6. 1. 6. 3. 12. 1. 5. 0
1. 3. 6. 1. 6. 3. 15. 1. 1. 1. 0
1. 3. 6. 1. 6. 3. 15. 1. 1. 2. 0
1. 3. 6. 1. 6. 3. 15. 1. 1. 3. 0
1. 3. 6. 1. 6. 3. 15. 1. 1. 4. 0
1. 3. 6. 1. 6. 3. 15. 1. 1. 5. 0
1. 3. 6. 1. 6. 3. 15. 1. 1. 6. 0
Defining SNMP Views
SNMP views are named groups of MIB objects that can be associated with user accounts to allow limited access
for viewing and modification of SNMP statistics and system configuration. SNMP views can also be used with
other commands that take SNMP views as an argument. SNMP views reference MIB objects using object names,
10 - 10
privkey = 1088359afb3701730173a6332d406eec
show snmp user
Description
Unknown packet data unit.
The value of the varbind shows the engine ID that
needs to be used in the snmp-server engineid
command
Unsupported security level.
Not in time packet.
Unknown user name. This varbind may also be
generated:
• If the configured ACL for this user filters out this
packet.
• If the group associated with the user is unknown.
Unknown engine ID. The value of this varbind would
be the correct authoritative engineID that should be
used.
Wrong digest.
Decryption error.
June 2005