Enforcing Snmpv3 Message Encryption; Assigning Snmpv3 Users To Multiple Roles - Cisco DS-X9530-SF1-K9 - Supervisor-1 Module - Control Processor Configuration Manual

Assigning SNMPv3 Users to Multiple Roles

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .

Enforcing SNMPv3 Message Encryption

By default the SNMP agent allows the securityLevel parameters of 'authNoPriv' and 'authPriv' for the
SNMPv3 messages that use SNMPv3 user configured with 'auth' and 'priv' keys. You can enforce the
message encryption for a user by using the following configuration commands:
Command
Step 1
switch# config t
Step 2
switch(config)# snmp-server user
testUser enforcePriv
switch(config)# no snmp-server
user testUser enforcePriv
Alternatively, you can enforce the SNMPv3 message encryption globally on all the users using the
following commands:
Command
Step 1
switch# config t
Step 2
switch(config)# snmp-server
globalEnforcePriv
switch(config)# no snmp-server
globalEnforcePriv
Assigning SNMPv3 Users to Multiple Roles
The SNMP server user configuration is enhanced to accommodate multiple roles (groups) for SNMPv3
users. After the initial SNMPv3 user creation, you can map additional roles for the user.
Only users belonging to network-admin role can assign roles to other users.
Note
To configure multiple roles for SNMPv3 users from the CLI, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# snmp-server user NewUser
role1
switch(config)# snmp-server user NewUser
role2
switch(config)# no snmp-server user
User5 role2
Cisco MDS 9000 Family Configuration Guide
27-6
Purpose
Enters configuration mode.
Enforces the message encryption for SNMPv3 messages
using this user.
You can only use this command for previously
Note
existing users configured with both auth and priv
keys. When the user is configured to enforce privacy,
for any SNMPv3 PDU request using such a user with
securityLevel parameter of either 'noAuthNoPriv' or
'authNoPriv', the SNMP agent responds with
'authorizationError'.
Disables SNMPv3 message encryption enforcement.
Purpose
Enters configuration mode.
Enforces the SNMPv3 message encryption for all the users
on the switch.
Disables global SNMPv3 message encryption enforcement.
Purpose
Enters configuration mode.
Creates or modifies the settings for an SNMPv3 user
(NewUser) for the role1 role.
Creates or modifies the settings for an SNMPv3 user
(NewUser) for the role2 role.
Removes role2 for the specified user (User5)
OL-6973-03, Cisco MDS SAN-OS Release 2.x
Chapter 27 Configuring SNMP