Enforcing Snmpv3 Message Encryption - Cisco AP776A - Nexus Converged Network Switch 5020 Configuration Manual

Creating and Modifying Users
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Command
switch(config)# snmp-server user user1
network-admin auth md5 0xab0211gh priv
0x45abf342 localizedkey
switch(config)# snmp-server
auth md5 asdgfsadf priv aes-128
asgfsgkhkj
Step 3
switch(config)# snmp-server user joe
sangroup
switch(config)# snmp-server user joe
techdocs
To create or modify passwords for SNMP users from the CLI, follow these steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# snmp-server user user1
role1 auth md5 0xab0211gh priv
0x45abf342 localizedkey
switch(config)# snmp-server user user1
role2 auth sha 0xab0211gh priv aes-128
0x45abf342 localizedkey
Avoid using the localizedkey option when configuring an SNMP user from the CLI. The localized keys
Caution
are not portable across devices as they contain device engine ID information. If a configuration file is
copied to the device, the passwords may not be set correctly if the configuration file was generated at a
different device. Explicitly configure the desired passwords after copying the configuration into the
device. Passwords specified with the localizedkey option are limited to 130 characters.
The snmp-server user command takes the engineID as an additional parameter. The engineID creates
Note
the notification target user (see the
If the engineID is not specified, the local user is created.

Enforcing SNMPv3 Message Encryption

By default the SNMP agent allows the securityLevel parameters of authNoPriv and authPriv for the
SNMPv3 messages that use user-configured SNMPv3 message encryption with auth and priv keys.
Cisco MDS 9000 Family CLI Configuration Guide
33-6
Purpose
Specifies the password to be in localized key format
(RFC 2574). The localized key is provided in
hexadecimal format (for example, 0xacbdef).
Configures the user2 with the MD5 authentication
user user2
protocol and AES-128 privacy protocol.
Adds the specified user (joe) to the sangroup role.
Adds the specified user (joe) to the techdocs role.
Purpose
Enters configuration mode.
Specifies the password to be in localized key format
using the DES option for security encryption.
Specifies the password to be in localized key format
using the 128-bit AES option for security encryption
"Configuring the Notification Target User" section on page
Chapter 33 Configuring SNMP
OL-18084-01, Cisco MDS NX-OS Release 4.x
33-12).