Snmp-Agent Usm-User V3 - H3C SR6600 Command Reference Manual

snmp-agent usm-user v3

Use snmp-agent usm-user v3 to add an SNMPv3 user to an SNMP group.
Use undo snmp-agent usm-user v3 to delete an SNMPv3 user from an SNMP group.
Syntax
In non-FIPS mode:
snmp-agent usm-user v3 user-name group-name [ cipher ] [ authentication-mode { md5 | sha }
auth-password [ privacy-mode { 3des | aes128 | des56 } priv-password ] ] [ acl acl-number | acl ipv6
ipv6-acl-number ] *
undo snmp-agent usm-user v3 user-name group-name { local | engineid engineid-string }
In FIPS mode:
snmp-agent usm-user v3 user-name group-name [ cipher ] [ authentication-mode sha auth-password
[ privacy-mode aes128 priv-password ] ] [ acl acl-number ]
undo snmp-agent usm-user v3 user-name group-name { local | engineid engineid-string }
Views
System view
Default command level
3: Manage level
Parameters
user-name: User name, a case-sensitive string of 1 to 32 characters.
group-name: Group name, a case-sensitive string of 1 to 32 characters.
cipher: Specifies that auth-password and priv-password are encrypted keys. To set the authentication or
privacy key as a hexadecimal string, you can use the snmp-agent calculate-password command to
convert its plaintext form to the hexadecimal form. To set auth-password and priv-password in plaintext,
do not specify this keyword.
authentication-mode: Specifies an authentication algorithm. MD5 is faster but less secure than SHA. For
more information about these algorithms, see Security Configuration Guide.
md5: Specifies the MD5 authentication algorithm.
•
sha: Specifies the SHA- 1 authentication algorithm.
•
auth-password: Specifies a case-sensitive plaintext or encrypted authentication key. A plaintext key is a
string of 1 to 64 visible characters. If the cipher and md5 keywords are specified, auth-password
represents a hexadecimal string of 32 characters or a non-hexadecimal string of 53 characters. If the
cipher and sha keywords are specified, auth-password is a hexadecimal string of 40 characters or a
non-hexadecimal string of 57 characters.
privacy-mode: Specifies an encryption algorithm for privacy. The three encryption algorithms AES, 3DES,
and DES are in descending order of security. Higher security means more complex implementation
mechanism and lower speed. DES is enough to meet general requirements. For more information about
these algorithms, see Security Configuration Guide.
3des: Specifies the 3DES algorithm.
•
des56: Specifies the DES algorithm.
•
• aes128: Specifies the AES algorithm.
127