About Aes Encryption-Based Privacy; Configuring Snmp Users From The Cli - Cisco AP776A - Nexus Converged Network Switch 5020 Configuration Manual

Chapter 33 Configuring SNMP
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
•

About AES Encryption-Based Privacy

The Advanced Encryption Standard (AES) is the symmetric cipher algorithm. The Cisco NX-OS
software uses AES as one of the privacy protocols for SNMP message encryption and conforms with
RFC 3826.
The priv option offers a choice of DES or 128-bit AES encryption for SNMP security encryption. The
priv option along with the aes-128 token indicates that this privacy password is for generating a 128-bit
AES key. The AES priv password can have a minimum of eight characters. If the passphrases are
specified in clear text, you can specify a maximum of 64 characters. If you use the localized key, you
can specify a maximum of 130 characters.
Note For an SNMPv3 operation using the external AAA server, user configurations in the external AAA server
require AES to be the privacy protocol to use SNMP PDU encryption.

Configuring SNMP Users from the CLI

The passphrase specified in the snmp-server user command and the username command are
synchronized (see the
To create or modify SNMP users from the CLI, follow these steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# snmp-server user joe
network-admin auth sha abcd1234
switch(config)# snmp-server user sam
network-admin auth md5 abcdefgh
switch(config)# snmp-server user Bill
network-admin auth sha abcd1234 priv
abcdefgh
switch(config)# no snmp-server user
usernameA
switch(config)# no snmp-server usam role
vsan-admin
OL-18084-01, Cisco MDS NX-OS Release 4.x
Adding or Deleting Communities, page 33-8
"SNMPv3 CLI User Management and AAA Integration" section on page
Purpose
Enters configuration mode.
Creates or modifies the settings for a user (joe) in the
network-admin role using the HMAC-SHA-96
authentication password (abcd1234).
Creates or modifies the settings for a user (sam) in the
network-admin role using the HMAC-MD5-96
authentication password (abcdefgh).
Creates or modifies the settings for a user (Bill) in the
network-admin role using the HMAC-SHA-96
authentication level and privacy encryption
parameters.
Deletes the user (usernameA) and all associated
parameters.
Deletes the specified user (usam) from the vsan-admin
role.
Cisco MDS 9000 Family CLI Configuration Guide
Creating and Modifying Users
33-3).
33-5