Configuring SNMP
Enforcing SNMP Message Encryption
You can configure SNMP to require authentication or encryption for incoming requests. By default, the SNMP
agent accepts SNMPv3 messages without authentication and encryption. When you enforce privacy, Cisco
NX-OS responds with an authorization error for any SNMPv3 PDU request using a security level parameter
of either noAuthNoPriv or authNoPriv.
Procedure
Step 1
Step 2
Step 3
Step 4
Assigning SNMPv3 Users to Multiple Roles
After you configure an SNMP user, you can assign multiple roles for the user.
Only users belonging to a network-admin role can assign roles to other users.
Note
Command or Action
configure terminal
Example:
switch# configure terminal
switch(config)#
snmp-server user name enforcePriv
Example:
switch(config)# snmp-server user Admin
enforcePriv
snmp-server globalEnforcePriv
Example:
switch(config)# snmp-server
globalEnforcePriv
copy running-config startup-config
Example:
switch(config)# copy running-config
startup-config
Cisco Nexus 7000 Series NX-OS System Management Configuration Guide
Enforcing SNMP Message Encryption
Purpose
Enters global configuration mode.
Enforces SNMP message encryption for
this user.
Enforces SNMP message encryption for
all users.
(Optional)
Copies the running configuration to the
startup configuration.
183