194 CHAPTER 7: IP S ERVICES COMMANDSIf the encryption type is des, 3des, or aes, you can specify apassphrase or a hexadecimal key. To specify a passphrase, use the encrypt-pass-phrase stringoption. The string can be from 8 to 32 alphanumeric characterslong, with no spaces. To specify a key, use the encrypt-key hex-string option.Defaults — No SNMPv3 users are configured by default. When youconfigure an SNMPv3 user, the default access is read-only, and thedefault authentication and encryption types are both none.Access — Enabled.History — Introduced in MSS Version 4.0.Examples — The following command creates USM user snmpmgr1,associated with the local SNMP engine ID. This user can send traps tonotification receivers.WX#1200 set snmp usm snmpmgr1 snmp-engine-id localsuccess: change accepted.The following command creates USM user securesnmpmgr1, which usesSHA authentication and 3DES encryption with passphrases. This user cansend informs to the notification receiver that has engine ID 192.168.40.2.WX4400# set snmp usm securesnmpmgr1 snmp-engine-id ip192.168.40.2 auth-type sha auth-pass-phrase myauthpwordencrypt-type 3des encrypt-pass-phrase mycryptpwordsuccess: change accepted.See Also clear snmp usm on page 138 set ip snmp server on page 173 set snmp community on page 179 set snmp notify target on page 185 set snmp notify profile on page 181 set snmp protocol on page 190 set snmp security on page 191 display snmp usm on page 158
