configure snmpv3 add user

configure snmpv3 add user [ hex hex_user_name | user_name ] {engine-id engine_id} {authentication [md5 | sha] {localized-key auth_localized_key | hex hex_auth_password | auth_password} {privacy {des |aes {128 |192 | 256}} {localized-key priv_localized_key | hex hex_priv_password | priv_password} }} {volatile}

Description

Adds (and modifies) an SNMPv3 user.

Syntax Description


`hex_user_name`	Specifies the user name to add or modify. The value is to be supplied as a colon separated string of hex octets.
`user_name`	Specifies the user name to add or modify in ASCII format.
engine-id	SNMP engine id. If not specified, the user is created with the local engine id.
`engine_id`	Engine id (in hexadecimal)"; type="ostring_t
authentication	Specifies the authentication password or hex string to use for generating the authentication key for this user.
md5	Specifies RSA Data Security, Inc. MD5 Message-Digest Algorithm authentication.
sha	Specifies SHA authentication.
localized-key	Following value is a MD5 or SHA digest of the engine-id and user's password.
`auth_localized_key`	Authentication localized key (in hexadecimal) ) ;type="ostring_t"
privacy	Specifies the privacy password or hex string to use for generating the privacy key for this user.
des	Specifies the use of the 56-bit DES algorithm for encryption. This is the default.
aes	Specifies the use of the AES algorithm for encryption.
128	Specifies the use of the 128-bit AES algorithm for encryption.
192	Specifies the use of the 192-bit AES algorithm for encryption.
256	Specifies the use of the 256-bit AES algorithm for encryption.
`priv_localized_key`	Privacy localized key (in hexadecimal)"; type="ostring_t"
volatile	Specifies volatile storage. By specifying volatile storage, the configuration is not saved across a switch reboot.

Default

The default values are:

authentication—no authentication.
privacy—no privacy.
non-volatile storage.

Usage Guidelines

Use this command to create or modify an SNMPv3 user configuration.

The initial password for admin is password.

If hex is specified, supply a 16 octet hex string for RSA Data Security, Inc. MD5 Message-Digest Algorithm, or a 20 octet hex string for SHA.

You must specify authentication if you want to specify privacy. There is no support for privacy without authentication.

Note

AES 192 and AES 256 bit encryptions are proprietary implementations and may not work with some SNMP managers.

SNMPv3 password and localized-key are saved to the configuration file using AES256-CBC encryption.

Example

The following command configures the user guest on the local SNMP Engine with security level noauth (no authentication and no privacy):

configure snmpv3 add user guest

The following command configures the user authMD5 to use RSA Data Security, Inc. MD5 Message-Digest Algorithm authentication with the password palertyu:

configure snmpv3 add user authMD5 authentication md5  palertyu

The following command configures the user authShapriv to use SHA authentication with the hex key shown below, the privacy password palertyu, and volatile storage:

configure snmpv3 add user authShapriv authentication sha hex 01:03:04:05:01:05:02:ff:ef:cd:12:99:34:23:ed:ad:ff:ea:cb:11 privacy palertyu volatile

History

This command was first available in ExtremeXOS 10.1.

The hex_user_name parameter was added in ExtremeXOS 11.0.

Support for 3DES and AES was added in ExtremeXOS 12.3.

Support for 3DES was removed in version 32.6.3.

Platform Availability

This command is available on all Universal switches supported in this document.