CISCO IOS in a Nutshell

Name

snmp-server user — global

Synopsis

snmp-server user name 
               group 
               version [encrypted] [auth hash 
               auth-pwd [priv des56 priv-pwd]] [access access-list]
no snmp-server user name
            

Configures

SNMP users

Default

None

Description

This command defines SNMP users, associates them with a group (which in turn defines the information they’re allowed to view), and specifies encryption requirements together with the appropriate passwords.

name

The name of the user you are defining.

group

The SNMP group the user is associated with.

version

The version of SNMP that is in use. Possible values are v1, v2c, and v3; v3 is the only version that supports encryption.

encrypted

If this keyword is present, the auth-pwd and priv-pwd passwords are present as an MD5 hash rather than in plain text.

auth hash auth-pwd

SNMPv3 only. Configures an authentication key for the user. hash is the name of the hashing algorithm used to create the key; possibilities are md5 and sha. auth-pwd is the actual password assigned to the user. The router stores this password in encrypted form.

priv des56 priv-pwd

SNMPv3 only. Configures an encryption key for the user, using the des56 algorithm. (Currently, des56 is the only algorithm supported.) priv-pwd is the actual password assigned to the user. The router stores this password in encrypted form.

access access-list

Optional. An access list that restricts the hosts from which the user can access the group.

The encryption of the password and the authentication key depend on the router’s ...