Home » D-Link Manuals » Hubs & Switches » D-Link DES-3010FA-TAA » Manual Viewer

D-Link DES-3010FA-TAA CLI Guide - Page 202

snmp-server user, auth-md5-key

UPC - 790069296505

View all D-Link DES-3010FA-TAA manuals

Add to My Manuals
Save this manual to your list of manuals

Page 202 highlights

D-Link DES-3010FA/GA CLI Reference Guide snmp-server user The snmp-server user Global Configuration mode command configures a new SNMP Version 3 user. To remove a user, use the no form of this command. Syntax snmp-server user username groupname [remote engineid-string] [ auth-md5 password | auth-sha password | auth-md5-key md5-des-keys | auth-sha-key sha-des-keys ] no snmp-server user username [remote engineid-string] Parameters • username-Specifies the name of the user on the host that connects to the agent. (Range: 1-30 characters) • groupname-Specifies the name of the group to which the user belongs. (Range: 1-30 characters) • engineid-string-Specifies the engine ID of the remote SNMP entity to which the user belongs. The engine ID is a concatenated hexadecimal string. Each byte in the hexadecimal character string is two hexadecimal digits. Each byte can be separated by a period or colon. (Range: 5-32 characters) • auth-md5 password-Indicates the HMAC-MD5-96 authentication level. The user should enter a password for authentication and generation of a DES key for privacy. (Range: 1-32 characters) • auth-sha password-Indicates the HMAC-SHA-96 authentication level. The user should enter a password for authentication and generation of a DES key for privacy. (Range: 1-32 characters) • auth-md5-key md5-des-keys-Indicates the HMAC-MD5-96 authentication level. The user should enter a concatenated hexadecimal string of the MD5 key (MSB) and the privacy key (LSB). If authentication is only required, 16 bytes should be entered; if authentication and privacy are required, 32 bytes should be entered. Each byte in the hexadecimal character string is two hexadecimal digits. Each byte can be separated by a period or colon. (16 or 32 bytes) • auth-sha-key sha-des-keys-Indicates the HMAC-SHA-96 authentication level. The user should enter a concatenated hexadecimal string of the SHA key (MSB) and the privacy key (LSB). If authentication is only required, 20 bytes should be entered; if authentication and privacy are required, 36 bytes should be entered. Each byte in the hexadecimal character string is two hexadecimal digits. Each byte can be separated by a period or colon. (20 or 36 bytes) Default Configuration No group entry exists. Command Mode Global Configuration mode User Guidelines If auth-md5 or auth-sha is specified, both authentication and privacy are enabled for the user. When a show running-config Privileged EXEC mode command is entered, a line for this user will not be displayed. To see if this user has been added to the configuration, type the show snmp users Privileged EXEC mode command. An SNMP EngineID has to be defined to add SNMP users to the device. Changing or removing the SNMP EngineID value deletes SNMPv3 users from the device's database. The remote engineid designates the remote management station and should be defined to enable the device to receive informs. Page 201

Section	Page
Table of Contents	2
Section 1. Using the CLI	11
1.1 CLI Command Modes	11
1.1.1 Introduction	11
1.1.2 User EXEC Mode	12
1.1.3 Privileged EXEC Mode	12
1.1.4 Global Configuration Mode	13
1.1.5 Interface Configuration and Specific Configuration Modes	13
1.2 Starting the CLI	14
1.3 Editing Features	15
1.3.1 Entering Commands	15
1.3.1.1 Terminal Command Buffer	15
1.3.1.2 Negating the Effect of Commands	16
1.3.1.3 Command Completion	16
1.3.1.4 Keyboard Shortcuts	16
1.3.1.5 CLI Command Conventions	16
Section 2. AAA Commands	18
aaa authentication login	18
aaa authentication enable	20
login authentication	22
enable authentication	23
ip http authentication	24
ip https authentication	25
show authentication methods	26
password	27
enable password	28
username	29
Section 3. Address Table Commands	30
bridge address	30
bridge multicast filtering	31
bridge multicast address	32
bridge multicast forbidden address	33
bridge multicast forward-all	34
bridge multicast forbidden forward-all	35
bridge aging-time	36
clear bridge	37
port security	38
port security routed secure-address	39
show bridge address-table	40
show bridge address-table static	41
show bridge address-table count	42
show bridge multicast address-table	43
show bridge multicast filtering	45
show ports security	46
Section 4. Clock	48
clock set	48
clock source	49
clock timezone	50
clock summer-time	51
sntp authentication-key	53
sntp authenticate	54
sntp trusted-key	55
sntp client poll timer	56
sntp broadcast client enable	57
sntp anycast client enable	58
sntp client enable (Interface)	59
sntp unicast client enable	60
sntp unicast client poll	61
sntp server	62
show clock	63
show sntp configuration	64
show sntp status	65
Section 5. Configuration and Image Files	66
copy	66
delete	69
delete startup-config	70
show running-config	71
show startup-config	72
Section 6. Ethernet Configuration Commands	73
interface ethernet	73
interface range ethernet	74
shutdown	75
description	76
speed	77
duplex	78
negotiation	79
flowcontrol	80
mdix	81
back-pressure	82
clear counters	83
set interface active	84
show interfaces advertise	85
show interfaces configuration	87
show interfaces status	88
show interfaces description	90
show interfaces counters	91
port storm-control include-multicast	94
port storm-control broadcast enable	95
port storm-control broadcast rate	96
show ports storm-control	97
Section 7. GVRP Commands	98
gvrp enable (Global)	98
gvrp enable (Interface)	99
garp timer	100
gvrp vlan-creation-forbid	101
gvrp registration-forbid	102
clear gvrp statistics	103
show gvrp configuration	104
show gvrp statistics	105
show gvrp error-statistics	106
Section 8. IGMP Snooping Commands	107
ip igmp snooping (Global)	107
ip igmp snooping (Interface)	108
ip igmp snooping host-time-out	109
ip igmp snooping mrouter-time-out	110
ip igmp snooping leave-time-out	111
show ip igmp snooping mrouter	112
show ip igmp snooping interface	113
show ip igmp snooping groups	114
Section 9. IP Addressing Commands	115
ip address	115
ip address dhcp	116
ip default-gateway	117
show ip interface	118
arp	119
arp timeout	120
clear arp-cache	121
show arp	122
ip domain-name	123
ip name-server	124
ip host	125
clear host	126
clear host dhcp	127
show hosts	128
Section 10. LACP Commands	129
lacp system-priority	129
lacp port-priority	130
lacp timeout	131
show lacp ethernet	132
show lacp port-channel	134
Section 11. Line Commands	135
line	135
speed	136
exec-timeout	137
history	138
history size	139
terminal history	140
terminal history size	141
show line	142
Section 12. Management ACL	143
management access-list	143
permit (Management)	145
deny (Management)	146
management access-class	147
show management access-list	148
show management access-class	149
Section 13. PHY Diagnostics Commands	150
test copper-port tdr	150
show copper-ports tdr	151
show copper-ports cable-length	152
show fiber-ports optical-transceiver	153
Section 14. Port Channel Commands	154
interface port-channel	154
interface range port-channel	155
channel-group	156
show interfaces port-channel	157
Section 15. Port Monitor Commands	158
port monitor	158
port monitor vlan-tagging	159
show ports monitor	160
Section 16. QoS Commands	161
qos	161
show qos	162
priority-queue out num-of-queues	163
rate-limit interface configuration	164
show qos interface	165
traffic-shape	167
wrr-queue cos-map	168
qos map dscp-queue	169
qos trust (Global)	170
qos trust (Interface)	171
qos cos	172
show qos map	173
Section 17. Radius Commands	174
radius-server host	174
radius-server key	176
radius-server retransmit	177
radius-server source-ip	178
radius-server timeout	179
radius-server deadtime	180
show radius-servers	181
Section 18. RMON Commands	182
show rmon statistics	182
rmon collection history	184
show rmon collection history	185
show rmon history	186
rmon alarm	189
show rmon alarm	191
rmon event	193
show rmon events	194
show rmon log	195
rmon table-size	197
Section 19. SNMP Commands	198
snmp-server community	198
snmp-server view	200
snmp-server group	201
snmp-server user	202
snmp-server engineID local	204
snmp-server enable traps	206
snmp-server filter	207
snmp-server host	208
snmp-server v3-host	209
snmp-server trap authentication	210
snmp-server contact	211
snmp-server location	212
snmp-server set	213
show snmp	214
show snmp engineid	216
show snmp views	217
show snmp groups	218
show snmp filters	220
show snmp users	221
Section 20. Spanning-Tree Commands	222
spanning-tree	222
spanning-tree mode	223
spanning-tree forward-time	224
spanning-tree hello-time	225
spanning-tree max-age	226
spanning-tree priority	227
spanning-tree disable	228
spanning-tree cost	229
spanning-tree port-priority	230
spanning-tree portfast	231
spanning-tree link-type	232
spanning-tree pathcost method	233
spanning-tree bpdu	234
clear spanning-tree detected-protocols	235
spanning-tree guard root	236
spanning-tree mst priority	237
spanning-tree mst max-hops	238
spanning-tree mst port-priority	239
spanning-tree mst cost	240
spanning-tree mst configuration	241
instance (mst)	242
name (mst)	243
revision (mst)	244
show (mst)	245
exit (mst)	246
abort (mst)	247
show spanning-tree	248
Section 21. Syslog Commands	250
logging on	250
logging	251
logging console	252
logging buffered	253
logging buffered size	254
clear logging	255
logging file	256
clear logging file	257
aaa logging	258
file-system logging	259
management logging	260
show logging	261
show logging file	263
show syslog-servers	265
Section 22. System Management	266
ping	266
traceroute	268
reload	270
hostname	271
show users	272
show system	273
show version	274
show system id	275
Section 23. User Interface	276
enable	276
disable	277
login	278
configure	279
exit (Configuration)	280
exit	281
end	282
help	283
terminal data-dump	284
show history	285
show privilege	286
Section 24. VLAN Commands	287
vlan database	287
vlan	288
interface vlan	289
interface range vlan	290
name	291
private-vlan primary	292
private-vlan isolated	293
private-vlan community	294
switchport mode	295
switchport access vlan	296
switchport private-vlan	297
show vlan private-vlan	298
switchport trunk allowed vlan	299
switchport trunk native vlan	300
switchport general allowed vlan	301
switchport general pvid	302
switchport general ingress-filtering disable	303
switchport general acceptable-frame-type tagged-only	304
switchport forbidden vlan	305
switchport protected	306
ip internal-usage-vlan	307
show vlan	308
show vlan internal usage	309
show interfaces switchport	310
Section 25. Web Server	313
ip http server	313
ip https server	314
ip http port	315
ip https port	316
show ip http	317
Section 26. 802.1x Commands	318
aaa authentication dot1x	318
dot1x system-auth-control	319
dot1x port-control	320
dot1x re-authentication	321
dot1x timeout re-authperiod	322
dot1x re-authenticate	323
dot1x timeout quiet-period	324
dot1x timeout tx-period	325
dot1x max-req	326
dot1x timeout supp-timeout	327
dot1x timeout server-timeout	328
show dot1x	329
show dot1x users	332
show dot1x statistics	334
ADVANCED FEATURES	336
dot1x auth-not-req	336
dot1x multiple-hosts	337
dot1x single-host-violation	338
dot1x guest-vlan	339
dot1x guest-vlan enable	340
show dot1x advanced	341
Troubleshooting	343
Product Registration	347
Product Registration	347

Match case Limit results 1 per page

D-Link DES-3010FA/GA CLI Reference Guide

Page 201

snmp-server user

The

snmp-server user

Global Configuration mode command configures a new SNMP Version 3 user. To remove

a user, use the

form of this command.

Syntax

snmp-server user

username

groupname

[remote

engineid-string

] [ auth-md5

password

| auth-sha

password

auth-md5-key

md5-des-keys

| auth-sha-key

sha-des-keys

]

no snmp-server user

username

[remote

engineid-string

]

Parameters

•

username

—Specifies the name of the user on the host that connects to the agent. (Range: 1-30 characters)

•

groupname

—Specifies the name of the group to which the user belongs. (Range: 1-30 characters)

•

engineid-string

—Specifies the engine ID of the remote SNMP entity to which the user belongs. The engine ID

is a concatenated hexadecimal string. Each byte in the hexadecimal character string is two hexadecimal dig-

its. Each byte can be separated by a period or colon. (Range: 5-32 characters)

•

auth-md5

password

—Indicates the HMAC-MD5-96 authentication level. The user should enter a password

for authentication and generation of a DES key for privacy. (Range: 1-32 characters)

•

auth-sha

password

—Indicates the HMAC-SHA-96 authentication level. The user should enter a password

for authentication and generation of a DES key for privacy. (Range: 1-32 characters)

•

auth-md5-key

md5-des-keys

—Indicates the HMAC-MD5-96 authentication level. The user should enter a

concatenated hexadecimal string of the MD5 key (MSB) and the privacy key (LSB). If authentication is only

required, 16 bytes should be entered; if authentication and privacy are required, 32 bytes should be entered.

Each byte in the hexadecimal character string is two hexadecimal digits. Each byte can be separated by a

period or colon. (16 or 32 bytes)

•

auth-sha-key

sha-des-keys

—Indicates the HMAC-SHA-96 authentication level. The user should enter a con-

catenated hexadecimal string of the SHA key (MSB) and the privacy key (LSB). If authentication is only

required, 20 bytes should be entered; if authentication and privacy are required, 36 bytes should be entered.

Each byte in the hexadecimal character string is two hexadecimal digits. Each byte can be separated by a

period or colon. (20 or 36 bytes)

Default Configuration

No group entry exists.

Command Mode

Global Configuration mode

User Guidelines

If auth-md5 or auth-sha is specified, both authentication and privacy are enabled for the user.

When a

show running-config

Privileged EXEC mode command is entered, a line for this user will not be dis-

played. To see if this user has been added to the configuration, type the

show snmp users

Privileged EXEC

mode command.

An SNMP EngineID has to be defined to add SNMP users to the device. Changing or removing the SNMP Engi-

neID value deletes SNMPv3 users from the device’s database.

The remote engineid designates the remote management station and should be defined to enable the device to

receive informs.