Configuring SNMPv3 Management Access
To configure SNMPv3 management access to the switch, follow these steps:
1. If you want to change the default engine ID, do so bef ore con figurin g other
SNMP parameters.
2. Specify read and write access views for the switch MIB tr ee.
3. Configure SNMP user groups with th e required s ecurity m odel (i.e., SNMP v1,
v2c or v3) and security level (i.e., authentication and privacy).
4. Assign SNMP users to gro ups, a long wit h thei r spec i fic au then ticat ion and
privacy passwords.

Setting a Local Engine ID

An SNMPv3 engine is an independent SNMP agent that res ides on the switch. This
engine protects against message replay, delay, and redirection. The engine ID is
also used in combination with user passwo rds to ge nerate t he sec urity keys for
authenticating and encrypting SNMPv3 packets.
A local engine ID is automatically generated that is unique to the switc h. This is
referred to as the default engine ID. If th e local e ngineID is d eleted or chang ed, all
SNMP users will be cleared. You will need to reconfigure all existing users.
A new engine ID can be specified by enterin g 9 to 64 hexa decima l charac ters. If an
odd number of characters are specified, a trai ling zero i s added to the valu e to fill in
the missing octet. For example, the value “123456789” is equivalent to
“1234567890”.
Web
– Click SNMP, SNMPv3, Engine ID. Enter an ID of up to 64 hexadecimal
characters and then click Save.
Figure 5-4 Setting the SNMPv3 Engine ID
CLI
– This example sets an SNMPv3 engine ID.
Configuring SNMPv3 Management Access

5
Console(config)#snmp-server engine-id local 12345abcdef
Console(config)#exit
Console#show snmp engine-id
Local SNMP engineID: 8000002a8000000000e8666672
Local SNMP engineBoots: 1
Console#
24-8
24-9

5-7