SNMP Commands 253
If the SNMPv3 engine ID is deleted or the configuration file is erased, SNMPv3 cannot be
used. By default, SNMPv1/v2 are enabled on the device. SNMPv3 is enabled only by defining
the Local Engine ID.
If you want to specify your own ID, you do not have to specify the entire 32-character engine
ID if it contains trailing zeros. Specify only the portion of the engine ID up to the point where
just zeros remain in the value. For example, to configure an engine ID of
123400000000000000000000, you can specify snmp-server engineID local 1234.
Since the engine ID should be unique within an administrative domain, the following is
recommended:
• For a standalone device, use the default keyword to configure the engine ID.
• For a stackable system, configure the engine ID and verify its uniqueness.
Changing the value of the engine ID has the following important side-effect. A user's
password (entered on the command line) is converted to an MD5 or SHA security digest. This
digest is based on both the password and the local engine ID. The user’s command line
password is then destroyed, as required by RFC 2274. As a result, the security digests of
SNMPv3 users become invalid if the local value of the engine ID change, and the users will
have to be reconfigured.
You cannot specify an engine ID that consists of all 0x0, all 0xF or 0x000000001.
The
show running-config
Privileged EXEC mode command does not display the SNMP
engine ID configuration. To see the SNMP engine ID configuration, enter the snmp-server
engine ID local
GlobalConfiguration mode command.
Example
The following example specifies the Simple Network Management Protocol (SNMP) engineID on
the local device.
show snmp engineid
The
show snmp engineID
Privileged EXEC mode command displays the ID of the local Simple
Network Management Protocol (SNMP) engine.
Syntax
show snmp engineID
Default Setting
This command has no default configuration.
Command Mode
Privileged EXEC mode
Console(config) # snmp-server engineID local default