SNMPv3 User Management

To support user-based security for SNMPv3, LSMS provides the SNMP Configuration > User Configuration > Add/Delete/Edit/Show menu options. These menu options are accessible only when the SNMP Global Mode is set to SNMPv3 ONLY or Both. Following is an example of the initial Add menu.

Figure 1. Initial Add User Screen

The User Name must be unique, 1 - 50 alphanumeric characters in length, and is case sensitive.

The Group Name must be already configured to be specified for a user, and must exactly match (case sensitive) a configured group name.

After specifying valid values for the User Name and Group Name and selecting OK, display of another screen depends on the security level configured for the specified group:

If the security level configured for the specified group is noAuthNoPriv, user configuration is complete.
If the security level configured for the specified group is AuthNoPriv or AuthPriv, a second screen is displayed containing the configured security fields for the specified group. Following is an example for a group having the AuthPriv security level:
Figure 2. Add User Screen for AuthPriv

Note: When the security level configured for the specified group is AuthNoPriv, input fields Priv Protocol, and Priv Password will not be displayed.

Select or specify the Auth Protocol, Auth Password, Priv Protocol, and Priv Password fields as needed:
- The default and only valid value for Auth Protocol is SHA.
- Valid values for Priv Protocol are DES and AES.
- The Auth Password and Priv Password fields must be 8 - 255 characters in length. Valid characters include alphanumeric characters and the following special characters:
  - @
  - #
  - $
  - !
  The Auth Password and Priv Password fields are encrypted in the database.

A user that is associated with any NMS cannot be deleted. For information about associating a user with an NMS, see NMS Configuration.