Dell PowerSwitch S5212F-ON EMC SmartFabric OS10 User Guide Release 10.5.0 - Page 157

• Configure SNMP groups • Configure SNMP users Configure SNMP engine ID The engine ID identifies the SNMP local agent on a switch. The engine ID is an octet colon-separated number; for example, 80:00:02:b8:04:61:62:63 . The local engine ID is used to create a localized authentication and/or privacy key for greater security in SNMPv3 messages. You generate a localized authentication and/or privacy key when you configure an SNMPv3 user. Configure a remote device and its engine ID to allow a remote user to query the local SNMP agent. The remote engine ID is included in the query and used to generate the authentication and privacy password keys to access the local agent. If you do not configure the remote engine ID, remote users' attempts to access the local agent fail. NOTE: Create a remote engine ID with the snmp-server engineID command before you configure a remote user with the snmp-server user command. If you change the configured engine ID for a remote device, you must reconfigure the authentication and privacy passwords for all remote users associated with the remote engine ID. snmp-server engineID [local engineID] [remote ip-address {[udp-port port-number] remoteengineID}] To display the localized authentication and privacy keys in an SNMPv3 user configuration, use the show snmp engineID local command. Configure SNMP engineID OS10(config)# snmp-server engineID local 80:00:02:b8:04:61:62:63 Display SNMP engineID OS10# show snmp engineID local Local default SNMP engineID: 0x800002a2036c2b59fbd8a0 Configure SNMP views Configure a read-only, read-write, or notify view of the MIB tree structure in the SNMP agent on the switch. The oid-tree value specifies the OID in the MIB tree hierarchy at which a view starts. Enter included or excluded to include or exclude the rest of the sub-tree MIB contents in the view. If necessary, re-enter the command to exclude tree entries in the included content. snmp-server view view-name oid-tree [included | excluded] Configure read-only view OS10(config)# snmp-server view readonly 1.3.6.1.2.1.31.1.1.1.6 included Configure read-write view OS10(config)# snmp-server view rwView 1.3.6.1.2.1.31.1.1.1.6 included OS10(config)# snmp-server view rwView 1.3.6.1.2.1.31.0.0.0.0 excluded Display SNMP views OS10# show snmp view view name OID excluded : readview : 1.3.6.5 : True Configure SNMP groups Configure an SNMP group with the views allowed for the members of the group. Specify the read-only, read-write, and/or notification access to the SNMP agent. System management 157