Qtech QSW-3900-48-SFP-DC [39/245] Configure user
Макгруп McGrp.ru
Задайте вопрос
Зарегистрироваться

Qtech QSW-3900-48-SFP-DC [39/245] Configure user

Qtech QSW-3900-48-SFP-DC [39/245] Configure user
QTECH Software Configuration Manual
2-38
Context-name is facility context. If the keyword is vacant, it is default to be local facility.
For example :
! Add group “group1” to local facility, using security model 1, and configure read, write, and notify view to
be internet
QTECH(config)# snmp-server group group1 1 read internet write internet notify Internet
! Remove group “group1” from local facility
QTECH(config)# no snmp-server group group1 1
! Display current group configuration.
QTECH(config)# show snmp group
2.12.10 Configure user
Use this configuration to configure user for local engine and recognizable remote engine. Following users
are default to exist : (1)initialmd5(required md5 authentication), (2) initialsha(required sha authentication), (3)
initialnone(non- authentication). The above three users are reserved for system not for user. The engine the user
belonged to must be recognizable. When deleting recognizable engine, contained users are all deleted. At most 64
users can be configured. Configure it in global configuration mode :
snmp-server user username groupname [ remote host [ udp-port port ] ] [ auth { md5 | sha }
{ authpassword { encrypt-authpassword authpassword | authpassword } | authkey { encrypt-authkey
authkey | authkey } } [ priv des { privpassword { encrypt-privpassword privpassword | privpassword }
| privkey { encrypt-privkey privkey | privkey } } ]
no snmp-server user username [ remote host [ udp-port port ] ]
Display configured user in any configuration mode :
show snmp user
Username is the username to be configured. It ranges from 1 to 32 characters, excluding space.
Groupname is the groupname that user going to be added. It ranges from 1 to 32 characters, excluding space.
Host is remote engine ip address. If it is vacant, it is default to be local engine.
Port is the port number of remote engine. If it is vacant, it is default to be 162.
Authpassword is authentication password. Unencrypted password ranges from 1 to 32 characters. To avoid
disclosing, this password should be encrypted. To configured encrypted password needs client-side which supports
encryption to encrypt password, and use encrypted cryptograph to do the configuration. Cryptograph is different by
different encryption. Input cryptograph in the form of hexadecimal system, such as
“a20102b32123c45508f91232a4d47a5c”
Privpassword is encryption password. Unencrypted password ranges from 1 to 32 characters. To avoid
disclosing, this password should be encrypted. To configured encrypted password needs client-side which supports
encryption to encrypt password, and use encrypted cryptograph to do the configuration. Cryptograph is different by
different encryption. Input cryptograph in the form of hexadecimal system, such as
“a20102b32123c45508f91232a4d47a5c”
Authkey is authentication key. Unauthenticated key is in the range of 16 byte (using md5 key folding) or 20
byte (using SHA-1 key folding). Authenticated key is in the range of 16 byte (using md5 key folding) or 24 byte
(using SHA-1 key folding).
Privkey is encrpted key. Unencypted key ranes from 16 byte, and encrypted key ranes from 16 byte.
Keyword encrypt-authpassword, encrypt-authkey, encrypt-privpassword, encrypt-privkey are only used in
command line created by compile to prevent leaking plain text password and key. When deconfiguring SNMP, user
cannot use above keywords.
For example :
! Add user “user1” for local engine to group “grp1”, and configure this user not to use authentication and
encryption.
QTECH(config)# snmp-server user user1 grp1
! Add user “user2” for local engine to group “grp2”, and configure this user to use md5 authentication and
non-encryption with the auth-password to be 1234
QTECH(config)# snmp-server user user2 grp2 auth md5 auth-password 1234
! Add user “user3” for local engine to group “grp3”, and configure this user to use md5 authentication and

Содержание

Похожие устройства

Скачать