Aes Encryption-Based Privacy; Adding Or Deleting Communities - Cisco DS-X9530-SF1-K9 - Supervisor-1 Module - Control Processor Configuration Manual

Chapter 27 Configuring SNMP
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .

AES Encryption-Based Privacy

The Advanced Encryption Standard (AES) is the symmetric cipher algorithm. The Cisco SAN-OS
software uses AES as one of the privacy protocols for SNMP message encryption and conforms with
RFC3826.
The priv option offers a choice of DES or 128-bit AES encryption for SNMP security encryption. The
priv option along with aes-128 token indicates that this privacy password is for generating 128-bit AES
key.The AES priv password can have a minimum of eight characters. If the passphrases are specified in
clear text, you can specify a maximum of 64 characters. If you use the localized key, you can specify a
maximum of 130 characters.
For an SNMPv3 operation using the external AAA server, user configurations in the external AAA server
Note
require AES to be the privacy protocol to use SNMP PDU encryption.
To create or modify SNMP users from the CLI, follow these steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# snmp-server user user1
role1 auth md5 0xab0211gh priv des
0x45abf342 localizedkey
switch(config)# snmp-server user user1
role2 auth sha 0xab0211gh priv aes-128
0x45abf342 localizedkey

Adding or Deleting Communities

You can configure read-only or read-write access for SNMPv1 and SNMPv2 users. Refer to RFC 2576.
To create an SNMPv1 or SNMPv2c community, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# snmp-server community snmp_Community ro
switch(config)# snmp-server community snmp_Community rw
switch(config)# no snmp-server community snmp_Community
OL-6973-03, Cisco MDS SAN-OS Release 2.x
Purpose
Enters configuration mode.
Specifies the password to be in localized key format
using the DES option for security encryption
Specifies the password to be in localized key format
using the 128-bit AES option for security encryption
Purpose
Enters configuration mode.
Adds read-only access for the
specified SNMP community.
Adds read-write access for the
specified SNMP community.
Deletes access for the specified
SNMP community (default).
Cisco MDS 9000 Family Configuration Guide
AES Encryption-Based Privacy
27-7