Snmp-Agent Community - H3C SR6600 Command Reference Manual

mode: Specifies authentication and privacy algorithms. Select a mode option, depending on the
authentication and privacy algorithm you are configuring with the snmp-agent usm-user v3 command.
The three privacy algorithms Advanced Encryption Standard (AES), Triple Data Encryption Standard
(3DES), and Data Encryption Standard (DES) are in descending order of security strength. Higher
security means more complex implementation mechanism and lower speed. DES is enough to meet
general requirements. The Message-Digest Algorithm 5 (MD5) and Secure Hash Algorithm (SHA- 1 ) are
the two authentication algorithms. MD5 is faster but less secure than SHA- 1 . For more information about
these algorithms, see Security Configuration Guide.
• 3desmd5: Converts the plaintext privacy key to an encrypted key for 3DES encryption used together
with MD5 authentication.
3dessha: Converts the plaintext privacy key to an encrypted key for 3DES encryption used together
•
with SHA- 1 authentication.
md5: Converts the plaintext authentication key to an encrypted key for MD5 authentication, or
•
converts the plaintext privacy key to an encrypted key for AES or DES encryption used in
conjunction with MD5.
• sha: Converts the plaintext authentication key to an encrypted key for SHA- 1 authentication, or
converts the plaintext privacy key to an encrypted key for AES or DES encryption used in
conjunction with SHA- 1 authentication.
local-engineid: Uses the local engine ID to calculate the encrypted key. For engine ID-related
configuration, see the snmp-agent local-engineid command.
specified-engineid: Uses a user-defined engine ID to calculate the encrypted key.
engineid: Specifies an SNMP engine ID as a hexadecimal string. It must comprise an even number of
hexadecimal characters, in the range of 10 to 64. All-zero and all-F strings are invalid.
Usage guidelines
This command helps you calculate encrypted authentication and privacy keys for SNMPv3 users that use
encrypted authentication and privacy keys. To create an SNMPv3 user, see the snmp-agent usm-user v3
command.
Make sure the SNMP agent is enabled before you execute the snmp-agent calculate-password
command.
The converted key is valid only under the engine ID specified for key conversion.
The 3DES encryption and MD5 authentication algorithms are supported only in non-FIPS mode. The
SHA- 1 authentication algorithm is supported in FIPS mode.
Examples
# Use the local engine and the MD5 algorithm to convert the plaintext key authkey to an encrypted key.
<Sysname> system-view
[Sysname] snmp-agent calculate-password authkey mode md5 local-engineid
The secret key is: 09659EC5A9AE91BA189E5845E1DDE0CC
Related commands
snmp-agent usm-user v3

snmp-agent community

Use snmp-agent community to configure an SNMP community.
Use undo snmp-agent community to delete an SNMP community.
110