157If you create the same SNMP community or user with both modes multiple times, the most recentconfiguration takes effect. For more information about user roles and the rule command, seeFundamentals Command Reference.For an NMS to access an agent:• The RBAC mode requires the user role bound to a community name or username to have the sameaccess right to MIB objects as the NMS.• The VACM mode requires only the access right from the NMS to MIB objects.H3C recommends the RBAC mode because it is more secure.FIPS complianceThe device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for features,commands, and parameters might differ in FIPS mode and non-FIPS mode. For more information aboutFIPS mode, see Security Configuration Guide.Security strengthBy default, the device provides low encryption. To obtain high encryption, you must install the StrongCryptography feature license. This feature provides stronger cryptography, additional IPsec tunnels, andhigher encryption performance. For more information about obtaining the Strong Cryptography featurelicense, see the release notes or contact HP Support.Support for features, commands, and parameters varies by the cryptography capability.Configuring SNMP basic parametersSNMPv3 differs from SNMPv1 and SNMPv2c in many ways. Their configuration procedures aredescribed in separate sections.Configuring SNMPv1 or SNMPv2c basic parametersSNMPv1 and SNMPv2c settings are supported only for high encryption in non-FIPS mode.To configure SNMPv1 or SNMPv2c basic parameters:Step Command Remarks1. Enter system view. system-view N/A2. (Optional.) Enable theSNMP agent. snmp-agentBy default, the SNMP agent isdisabled.The SNMP agent is enabled whenyou use any command that beginswith snmp-agent except for thesnmp-agent calculate-passwordcommand.3. (Optional.) Configurethe system contact. snmp-agent sys-info contact sys-contact The default system contact isHangzhou H3C Tech. Co., Ltd..
