SNMP Commands 285D E L L C O N F I D E N T I A L – P R E L I M I N A R Y 9 / 1 3 / 0 6 – F O R P R O O F O N LYDefault ConfigurationNo group entry exists.Command ModeGlobal Configuration modeUser GuidelinesThe index of the group name table is comprised of Group Name, Security Model, andSecurity Level. Different views for the same group can be defined with different securitylevels. For example, after having created the appropriate views, a group can be created forwhich "no authentication" is required, while allowing only notification view for "interfaces".A group of the same name can be created for which "priv" authentication is required. Readviews can, for example, be configured for this group for mib2, and write views for interfaces.In this case, users in this group who send "priv" packets can modify all "interfaces" MIBs andview all mib2.ExamplesThe following example attaches a group called user-group to SNMPv3 and assigns to the groupthe privacy security level and read access rights to a view called user-view.snmp-server userThe snmp-server user Global Configuration mode command configures a new SNMP Version 3user. To remove a user, use the no form of this command.Syntaxsnmp-server user username groupname [remote engineid-string] [ auth-md5 password | auth-sha password | auth-md5-key md5-des-keys | auth-sha-key sha-des-keys ]no snmp-server user username [remote engineid-string]• username—Specifies the name of the user on the host that connects to the agent. (Range:1-30 characters)• groupname—Specifies the name of the group to which the user belongs. (Range: 1-30characters)• engineid-string—Specifies the engine ID of the remote SNMP entity to which the userbelongs. The engine ID is a concatenated hexadecimal string. Each byte in thehexadecimal character string is two hexadecimal digits. Each byte can be separated by aperiod or colon. (Range: 5-32 characters)Console(config)# snmp-server group user-group v3 priv readuser-view
