Configuring SNMPv3 Management Access3-473CLI – Use the snmp-server user command to configure a new user name andassign it to a group.Configuring Remote SNMPv3 UsersEach SNMPv3 user is defined by a unique name. Users must be configured with aspecific security level and assigned to a group. The SNMPv3 group restricts users toa specific read and a write view.To send inform messages to an SNMPv3 user on a remote device, you must firstspecify the engine identifier for the SNMP agent on the remote device where theuser resides. The remote engine ID is used to compute the security digest forauthenticating and encrypting packets sent to a user on the remote host. (See“Specifying Trap Managers and Trap Types” on page 3-41 and “Specifying aRemote Engine ID” on page 3-44.)Command Attributes• User Name – The name of user connecting to the SNMP agent. (Range: 1-32characters)• Group Name – The name of the SNMP group to which the user is assigned.(Range: 1-32 characters)• Engine ID – The engine identifier for the SNMP agent on the remote device wherethe remote user resides. Note that the remote engine identifier must be specifiedbefore you configure a remote user. (See “Specifying a Remote Engine ID” onpage 3-44.)• Remote IP – The Internet address of the remote device where the user resides.• Security Model – The user security model; SNMP v1, v2c or v3. (Default: v1)• Security Level – The security level used for the user:- noAuthNoPriv – There is no authentication or encryption used in SNMPcommunications. (This is the default for SNMPv3.)- AuthNoPriv – SNMP communications use authentication, but the data is notencrypted (only available for the SNMPv3 security model).- AuthPriv – SNMP communications use both authentication and encryption (onlyavailable for the SNMPv3 security model).• Authentication Protocol – The method used for user authentication. (Options:MD5, SHA; Default: MD5)• Authentication Password – A minimum of eight plain text characters is required.Console(config)#snmp-server user chris group r&d v3 auth md5greenpeace priv des56 einstien 4-128Console(config)#exitConsole#show snmp user 4-130EngineId: 80000034030001f488f5200000User Name: chrisAuthentication Protocol: md5Privacy Protocol: des56Storage Type: nonvolatileRow Status: activeConsole#
