1. ACLI Reference Guide
  2. ACLI Configuration Elements N-Z
  3. snmp-user-entry

snmp-user-entry

The required snmp-user-entry element is used to create an identity for one or more SNMPv3 users, their security level, passwords for secure authentication and privacy. This element provides a way to identify a user, protect the user from a different SNMP agent that uses message capture and replay, and protect the user from a network traffic source that uses an incorrect password or security level.

Parameters

name
Enter the name of the user authorized for retrieving SNMPv3 information.
  • Default: none
  • Values: <user name string> that is 1 to 24 characters.
auth-protocol
Use this required parameter to enter the HMAC-SHA2-256 or HMAC-SHA2-512 authentication protocol.
  • Default: sha512
  • Values: none | sha256 | sha512
priv-protocol
Use this required parameter to enter the AES or CBC-DES privacy protocol.
  • Default: aes128
  • Values: none | aes128
auth-password
Enter the authorization password for this user. This value is obscured when displayed at the ACLI.
  • Default: none
  • Values: <password-string> that is 6 to 64 characters.
priv-password
Enter the privacy password for this user. This value is obscured when displayed at the ACLI.
  • Default: none
  • Values: <password-string> that is 6 to 64 characters.
trap-filter-level
Use this optional parameter to allow this user to view traps based on their severity level.
  • ALL—A user can view all trap conditions.
  • Minor—A user can view trap error conditions that exist on a device.
  • Major—A user can view trap critical conditions that exist on a device.
  • Critical—A user can view trap conditions that require an immediate action for a device.
  • None—(Default) A user cannot view trap conditions.
address-list
Enter the required address list name(s) for this user, which must match an address-name parameter that you specified when you configured the snmp-address-entry element.
  • Default: none
  • Values: <address-string> that is 1 to 24 characters. You can specify multiple address list names by separating them with a comma.

Path

snmp-community is an element under the system path. The full path from the topmost ACLI prompt is: configure terminal , and then system , and then snmp-user-entry.

Note:

This is a multiple instance configuration element.