Assigning Snmpv3 Users To Multiple Roles - Cisco AP776A - Nexus Converged Network Switch 5020 Configuration Manual

Chapter 33 Configuring SNMP
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
To enforce the message encryption for a user, follow these steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# snmp-server user
testUser enforcePriv
switch(config)# no snmp-server
user testUser enforcePriv
Alternatively, you can enforce the SNMPv3 message encryption globally on all the users using the
following commands:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# snmp-server
globalEnforcePriv
switch(config)# no snmp-server
globalEnforcePriv

Assigning SNMPv3 Users to Multiple Roles

The SNMP server user configuration is enhanced to accommodate multiple roles (groups) for SNMPv3
users. After the initial SNMPv3 user creation, you can map additional roles for the user.
Only users belonging to a network-admin role can assign roles to other users.
Note
To configure multiple roles for SNMPv3 users from the CLI, follow these steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# snmp-server user NewUser
role1
switch(config)# snmp-server user NewUser
role2
switch(config)# no snmp-server user
User5 role2
OL-18084-01, Cisco MDS NX-OS Release 4.x
Purpose
Enters configuration mode.
Enforces the message encryption for SNMPv3 messages
using this user.
You can only use this command for previously
Note
existing users configured with both auth and priv
keys. When the user is configured to enforce privacy,
for any SNMPv3 PDU request using securityLevel
parameter of either noAuthNoPriv or authNoPriv, the
SNMP agent responds with authorizationError.
Disables SNMPv3 message encryption enforcement.
Purpose
Enters configuration mode.
Enforces the SNMPv3 message encryption for all the users
on the switch.
Disables global SNMPv3 message encryption enforcement.
Purpose
Enters configuration mode.
Creates or modifies the settings for an SNMPv3 user
(NewUser) for the role1 role.
Creates or modifies the settings for an SNMPv3 user
(NewUser) for the role2 role.
Removes role2 for the specified user (User5).
Cisco MDS 9000 Family CLI Configuration Guide
Creating and Modifying Users
33-7