Cli And Snmp User Synchronization - Cisco Nexus 3548 series Configuration Manual
Nx-os system management, release 7.x
Hide thumbs
Also See for Nexus 3548 series:
- Command reference manual (556 pages) ,
- Configuration manual (220 pages) ,
- Installation manual (112 pages)
Table of Contents
Advertisement
CLI and SNMP User Synchronization
SNMPv3 authorizes management operations only by configured users and encrypts SNMP messages.
Cisco NX-OS uses two authentication protocols for SNMPv3:
• HMAC-MD5-96 authentication protocol
• HMAC-SHA-96 authentication protocol
Cisco NX-OS uses Advanced Encryption Standard (AES) as one of the privacy protocols for SNMPv3 message
encryption and conforms with RFC 3826.
The priv option offers a choice of DES or 128-bit AES encryption for SNMP security encryption. The priv
option and the aes-128 token indicates that this privacy password is for generating a 128-bit AES key #.The
AES priv password can have a minimum of eight characters. If the passphrases are specified in clear text, you
can specify a maximum of 64 characters. If you use the localized key, you can specify a maximum of 130
characters.
Note
For an SNMPv3 operation using the external AAA server, you must use AES for the privacy protocol in user
configuration on the external AAA server.
CLI and SNMP User Synchronization
SNMPv3 user management can be centralized at the Access Authentication and Accounting (AAA) server
level. This centralized user management allows the SNMP agent in Cisco NX-OS to leverage the user
authentication service of the AAA server. Once user authentication is verified, the SNMP PDUs are processed
further. Additionally, the AAA server is also used to store user group names. SNMP uses the group names to
apply the access/role policy that is locally available in the switch.
Any configuration changes made to the user group, role, or password results in database synchronization for
both SNMP and AAA.
Cisco NX-OS synchronizes user configuration in the following ways:
• The auth passphrase specified in the snmp-server user command becomes the password for the CLI
• The password specified in the username command becomes the auth and priv passphrases for the SNMP
• If you create or delete a user using either SNMP or the CLI, the user is created or deleted for both SNMP
• User-role mapping changes are synchronized in SNMP and the CLI.
• Role changes (deletions or modifications from the CLI) are synchronized to SNMP.
Note
When you configure passphrase/password in localized key/encrypted format, Cisco NX-OS does not synchronize
the user information (passwords, rules, etc.).
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
94
user.
user.
and the CLI.
Configuring SNMP
Advertisement
Table of Contents
