Managing SNMP Users

An SNMP user is defined by the login credentials (username, passwords, and authentication method) and by the context and scope in which it operates by association with a group and an Engine ID.

The configured user have the attributes of its group, having the access privileges configured within the associated view.

Groups enable network managers to assign access rights to a group of users instead of to a single user.

A user can only belong to a single group.

To create an SNMPv3 user, the following must first exist:

• An engine ID must first be configured on the device. This is done in the Engine ID page.
• An SNMPv3 group must be available. An SNMPv3 group is defined in the Groups page.

To display SNMP users and define new ones:

1. Click SNMP > Users.

This page contains existing users.

2. Click Add.

This page provides information for assigning SNMP access control privileges to SNMP users.

3. Enter the parameters.
• User Name—Enter a name for the user.
• Engine ID—Select either the local or remote SNMP entity to which the user is connected. Changing or removing the local SNMP Engine ID deletes the SNMPv3 User Database. To receive inform messages and request information, you must define both a local and remote user.
• Local—User is connected to the local device.
• Remote IP Address—User is connected to a different SNMP entity besides the local device. If the remote Engine ID is defined, remote devices receive inform messages, but cannot make requests for information.
  
  Enter the remote engine ID.
• Group Name—Select the SNMP group to which the SNMP user belongs. SNMP groups are defined in the Add Group page.

NOTE     Users, who belong to groups which have been deleted, remain, but they are inactive.

• Authentication Method—Select the Authentication method that varies according to the Group Name assigned. If the group does not require authentication, then the user cannot configure any authentication. The options are:
• None—No user authentication is used.
• MD5 Password—A password that is used for generating a key by the MD5 authentication method.
• SHA Password—A password that is used for generating a key by the SHA (Secure Hash Algorithm) authentication method.
• Authentication Password—If authentication is accomplished by either a MD5 or a SHA password, enter the local user password in either Encrypted or Plaintext. Local user passwords are compared to the local database. and can contain up to 32 ASCII characters.
• Privacy Method—Select one of the following options:
• None—Privacy password is not encrypted.
• DES—Privacy password is encrypted according to the Data Encryption Standard (DES).
• Privacy Password—16 bytes are required (DES encryption key) if the DES privacy method was selected. This field must be exactly 32 hexadecimal characters. The Encrypted or Plaintext mode can be selected.
4. Click Apply to save the settings.