To configure Simple Network Management Protocol version 3 (SNMP v3) access on a per-user basis, use the snmp-server user command in configuration mode.
Syntax
[no] snmp-server user <username> v3 enable
snmp-server user <username> v3 auth md5 <password> [priv [des | aes-128] [<password>] ]
snmp-server user <username> v3 auth sha <password> [priv [des | aes-128] [<password>] ]
snmp-server user <username> v3 encrypted auth md5 <password> [priv [des | aes-128] [<password>] ]
snmp-server user <username> v3 encrypted auth sha <password> [priv [des | aes-128] [<password>] ]
snmp-server user <username> v3 prompt auth md5 <password> [priv [des | aes-128] ]
snmp-server user <username> v3 prompt auth sha <password> [priv [des | aes-128] ]
Parameters
<username> v3 enable
Enables the SNMPv3 option for the specified user. Use the no form of the command to disable the SNMPv3 option for the specified user.
<username> v3 auth md5 <password> [priv [des | aes-128] [<password>] ]
Sets the MD5 hash algorithm and password for the specified user. You have the option to use a default privacy algorithm. You can also choose the following privacy options:
des—Sets the Data Encryption Standard (DES) privacy option.
aes-128—Sets the Advanced Encryption Standard (AES), 128-bit privacy option.
<username> v3 auth sha <password> [priv [des | aes-128] [<password>] ]
Sets the SHA1 hash algorithm and password for the specified user. You have the option to use a default privacy algorithm. You can also choose the following privacy options:
des—Sets the DES privacy option.
aes-128—Sets the AES, 128-bit privacy option.
<username> v3 encrypted auth md5 <password> [priv [des | aes-128] [<password>] ]
Sets the MD5 hash algorithm and hexadecimal password for the specified user with encryption. You have the option to use a default privacy algorithm. You can also choose the following privacy options:
des—Sets the DES privacy option.
aes-128—Sets the AES, 128-bit privacy option.
<username> v3 encrypted auth sha <password> [priv [des | aes-128] [<password>] ]
Sets the SHA1 hash algorithm and password for the specified user with encryption. You have the option to use a default privacy algorithm. You can also choose the following privacy options:
des—Sets the DES privacy option.
aes-128—Sets the AES, 128-bit privacy option.
<username> v3 prompt auth md5 <password> [priv [des | aes-128] ]
Sets the MD5 hash algorithm and password for the specified user with follow-up prompts. You have the option to use a default privacy algorithm. You can also choose the following privacy options:
des—Sets the DES privacy option.
aes-128—Sets the AES, 128-bit privacy option.
<username> v3 prompt auth sha <password> [priv [des | aes-128] ]
Sets the SHA1 hash algorithm and password for the specified user with follow-up prompts. You have the option to use a default privacy algorithm. You can also choose the following privacy options:
des—Sets the DES privacy option.
aes-128—Sets the AES, 128-bit privacy option.
Examples
The following example enables SNMP v3 access for the “admin” user:
hostname (config) # snmp-server user admin v3 enable
The following example sets the SNMPv3 user and password:
hostname (config) # snmp-server user admin v3 enable
hostname (config) # snmp-server user admin v3 auth sha 12345678
User role
Admin or Operator
Supported appliances
Malware Analysis: Before Release 7.6.0
Central Management System: Before Release 7.6.0
Email Security — Server: Before Release 7.6.0
Network Security: Before Release 7.6.0
Intelligent Virtual Execution - Server: Before Release 7.6.0