| 
70 Configuring Security using the CLIsnmp-server user commandThe snmp-server user command creates an SNMPv3 user. The syntaxfor the snmp-server user command is:snmp-server user [engine-id ] [read-view ][write-view ][notify-view ][{md5|sha} [read-view ][write-view ][notify-view ][{3des|aes|des} [read-view ][write-view ][notify-view ]The snmp-server user command is executed in the Global Configurationcommand mode.The sha and des parameters are available only if the switch image hasfull SHA/DES support.The command shows three sets of read/write/notify views. The first setspecifies unauthenticated access. The second set specifies authenticatedaccess. The third set specifies authenticated and encrypted access.You can specify authenticated access only if the md5 or sha parameter isincluded. Likewise, you can specify authenticated and encrypted accessonly if the des, aes, or 3des parameter is included.If you omit the authenticated view parameters, authenticated accessuses the views specified for unauthenticated access. If you omit all theauthenticated and encrypted view parameters, the authenticated andencrypted access uses the same views that are used for authenticatedaccess. These views are the unauthenticated views, if all the authenticatedviews are also omitted.Table 30 "snmp-server user command parameters and variables" (page70) describes the parameters and variables for the snmp-server usercommand.Table 30snmp-server user command parameters and variablesParameters andvariables Descriptionengine-idSpecifies the SNMP engine ID of the remote SNMPentity. Specifies the user names; enter an alphanumericstring of up to 255 characters.Nortel Ethernet Routing Switch 2500 SeriesSecurity — Configuration and ManagementNN47215-505 (323165-B) 02.01 Standard4.1 19 November 2007Copyright © 2007, Nortel Networks. |
