The following describes how to set an SNMP protocol group. There are a total of six steps. The first is to enter global mode, the second is local name settings, the third is remote settings, the fourth is to add users, the fifth is to return privileged mode, and the sixth is to save settings.
To set an SNMP protocol group and a user, follow these steps.
Step 2: Set the SNMP protocol group
Enter the global configuration mode.
- Cisco# configure terminal
Step 2: Set the SNMP protocol group
Copy the configuration name for each local or remote SNMP instance. Engineid-string is a 24-character SNMP copy ID string. For example, if the engine ID of the local device to be configured is 12340000000000000 0000000, you only need to enter "snmp-server engineID local 1234. If you select a remote device, you must specify the IP address and UDP port number for the SNMP replication. The default port is 162 ".
- Cisco(config)# snmp-server engineID
- {local engineid-string |remote ip-address[udp-port port-number]engineid-string}
Step 2: Set the SNMP protocol group
Configure a new SNMP group on the remote device. Groupname is used to specify the group name. V1, v2c, and v3 are used to specify the security mode. Among them, v1 has the lowest security mode and v3 has the highest security mode. Auth is used to enable Message Digest 5MD5) and Secure Hash AlgorithmSHA) package authentication. Priv is used to enable Enables Data Encryption StandardDES) Encryption. Noauthet is used to enable noAuthNoPriv encryption level.
- Cisco(config)#snmp-server group groupname{v1|v2c|v3{auth|noauth|priv}}
- [read readview] [write writeview] [notify notifyview] [access access-list]
Step 2: Set the SNMP protocol group
Add a new user to the SNMP group. Username is used to specify the user name on the host, and groupname is used to specify the user group to which the user is added. Remote is used to specify the Remote SNMP entry to which the user belongs. host is used to specify the host Name and IP address, and udp-port is used to specify the port number. The default value is 162 ). V1, v2c, and v3 are used to specify the SNMP version. Access-list is used to specify the access list. If you specify it as v3, you also need to specify the corresponding authentication method.
- Cisco(config)# snmp-server user username groupname {remote host [udp-port port]}
- {v1[access access-list]|v2c[access access-list]|v3[encrypted][access access-list][auth{md5|sha}auth-password]}
Step 2: Set the SNMP protocol group
Returns the privileged mode.
- Cisco(config)# end
Step 2: Set the SNMP protocol group
Save the modified configuration.
- Cisco# copy running-config startup-config