Dell EMC SmartFabric OS10 User Guide Release 10.5.0

• user-name — Enter the name of the user. A maximum of 32 alphanumeric characters.
• group-name — Enter the name of the group to which the user belongs. A maximum of 32 alphanumeric characters.
• security-model — Enter an SNMP version that sets the security level for SNMP messages:
  • 1 — SNMPv1 provides no user authentication or privacy protection. SNMP messages are sent in plain text.
  • 2c — SNMPv2c provides no user authentication or privacy protection. SNMP messages are sent in plain text.
  • 3 — SNMPv3 provides optional user authentication and encryption for SNMP messages.
• noauth — (SNMPv3 only) Configure SNMPv3 messages to send without user authentication and privacy encryption.
• auth — (SNMPv3 only) Include a user authentication key for SNMPv3 messages sent to the user:
  • md5 — Generate an authentication key using the MD5 algorithm.
  • sha — Generate an authentication key using the SHA algorithm.
  • auth-password — Enter a text string used to generate the authentication key that identifies the user; a maximum of 32 alphanumeric characters maximum. For an encrypted password, you can enter the encrypted string instead of plain text.
• priv — (SNMPv3 only) Configure encryption for SNMPv3 messages sent to the user:
  • aes — Encrypt messages using AES 128-bit algorithm.
  • des — Encrypt messages using DES 56-bit algorithm.
  • priv-password — Enter a text string used to generate the privacy key used in encrypted messages. A maximum of 32 alphanumeric characters. For an encrypted password, enter the encrypted string instead of plain text.
• localized — (SNMPv3 only) Generate an SNMPv3 authentication and/or privacy key in localized key format.
• access acl-name — (Optional) Enter the name of an IPv4 or IPv6 access list to filter SNMP requests on the switch. A maximum of 16 characters.
• remote ip-address/prefix-length udp-port port-number — (Optional) Enter the IPv4 or IPv6 address of the user's remote device and the UDP port number used to connect to the SNMP agent on the switch, from 0 to 65535. The default is 162.

The group to which a user is assigned determines the user's SNMP access. To configure a group's SNMP access to the switch — read, write, and notify, use the snmp-server user command.

No default values exist for SNMPv3 authentication and privacy algorithms and passwords. If you forget a password, you cannot recover it — you must reconfigure the user. You can specify either a plain-text password or an encrypted cypher-text password. In either case, the password stores in the configuration in an encrypted form and displays as encrypted in the show running-config snmp output.

A localized authentication or privacy key is more complex and provides greater privacy protection. To display the localized authentication and privacy keys in an SNMPv3 user configuration, use the show running-configuration snmp command.

To limit user access to the SNMP agent on the switch, enter an access acl-name value. In IPv6 ACLs, SNMP supports only IPv6 and UDP types. TCP, ICMP, and port rules are not supported.

Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.2.0. Also supported in SmartFabric mode starting in release 10.5.0.1.

The no version of this command removes a user from the SNMP group.

OS10(config)# snmp-server user privuser v3group v3 auth md5
9fc53d9d908118b2804fe80e3ba8763d priv des d0452401a8c3ce42804fe80e3ba8763d

OS10(config)# snmp-server user authuser v3group v3 auth md5 authpasswd

OS10(config)# snmp-server user n3user ngroup remote 172.31.1.3 udp-port 5009 3
auth md5 authpasswd