Network OS Administration Guide

Supporting Network OS 6.0.1a

Part Number: 53-1003768-04

Configuring SNMP server users

The snmp-server user command configures a SNMPv3 user and allows the configured user to be associated with user-defined SNMP groups. You execute this command in global configuration mode and RBridge ID configuration mode.

  1. Enter the configure command to access global configuration mode.
    switch# configure
  2. Enter the snmp-server user command.
    The following example configures the SNMPv3 users "user1" and "user2" associated with user-defined group "group1" under global configuration mode.
    switch(config)# snmp-server user user1 groupname group1
    switch(config)# snmp-server user user2 groupname group1 auth md5 auth-password password priv DES priv-password 
    
    The following example configures the SNMPv3 users "user1" and "user2" associated with user-defined group "group1" under global configuration mode. It also applies an IPv4 ACL and an IPv6 ACL to "user1."
    switch(config)# snmp-server user user1 groupname group1 ipv4-acl standV4ACL1 ipv6-acl standV6ACL1
    switch(config)# snmp-server user user2 groupname group1 auth md5 auth-password password priv DES priv-password 
    
    NOTE
    You can associate only global SNMPv3 users with ACLs. For the entire flow of implementing SNMP ACLs, refer to Implementation flow of ACLs under SNMP .
    The following example configures the SNMPv3 user "snmpadmin1" under RBridge ID configuration mode.
    switch(config-rbridge-id-1)# snmp-server user snmpadmin1 groupname snmpadmin auth sha auth-password private123 priv DES priv-password public123
    
NOTE
When creating a new SNMPv3 user without the groupname option, by default there is no group name mapped with the SNMPv3 user. You must map the configured SNMPv3 user with a group name available in the group CLI configuration to contact the switch through SNMPv3.
NOTE
The behavior of this command in RBridge ID configuration mode is same as in global configuration mode. If the user name is configured to be the same in both global and RBridge ID configurations, the RBridge ID configuration takes precedence. The encrypted password generated in global configuration mode can be used for another global user to modify the passwords. The encrypted passwords generated in global configurations cannot be used in RBridge ID configurations, and vice versa.