No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Command Reference

OceanStor 2800 V3 V300R006

This document is applicable to OceanStor 2800 V3. Based on the CLI provided by the DeviceManager, this document describes how to use variouscommands classified by functions and how to set the CLI and manage the storage system throughthese commands. The document that you browse online matches the latest C version of the product. Click Download to download documents of other C versions.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
add snmp usm

add snmp usm

Function

The add snmp usm command is used to add USM user.

Format

add snmp usm user_name=? authenticate_protocol=? private_protocol=? [ user_level=? ]

Parameters

Parameter

Description

Value

user_name=?

USM User name.

The value contains 4 to 32 ASCII characters including digits, letters, underscores (_), or hyphens (-), and the first character must be a letter.

authenticate_protocol=?

Authentication protocol.

The value can be "MD5", "SHA", or "NONE".

NOTE:

You are advised to use the SHA protocol to ensure data security.

private_protocol=?

Data encryption protocol.

The value can be "DES", "AES", "NONE", or "3DES".

NOTE:

You are advised to use the AES protocol to ensure data security.

user_level=?

USM user level.

The value can be "read_only" or "read_write".

NOTE:

USM users of the "read_only" level can only read device information, USM users of the "read_write" level can read and write device information, and all USM users have the permission for Trap reporting.

Level

Administrator

Usage Guidelines

  • SNMPv3 adopts the USM security mechanism, providing authentication-based access control. After adding a user account by running this command, you can manage the storage system by using the user account through SNMP.
  • This command adopts an interactive mode to input password. The passwords are subject to the following conditions:
    • The password consists of 6 to 32 characters and is case-sensitive.
    • The password must comply the password complexity requirements:
  • When password complex is "Normal", the password must contain special characters and at least two types of the following characters: uppercase letters, lowercase letters, and digits.
  • When password complex is "High", the password must contain special characters, uppercase letters, lowercase letters, and digits.
  • When password complex is "Low", the password must contain any types of the following characters: special characters, uppercase letters, lowercase letters and digits.
    • Do not use passwords composed of repeated substrings, such as aaaaaaaa, abababab, or abcdabcd. The substring has no length limits.
    • The authentication protocol password and data encryption password must be different from a USM user name that is either in its normal or reverse order.
    • The authentication protocol password cannot be the same as the data encryption password.
NOTE:
  • You can use the "change snmp safe_strategy" command to change the password policies of USM user.
  • The special characters include ` ~ ! @ # $ % ^ & * ( ) - _ = + \ | [ { } ] ; : ' " , < . > / ? and space.

Example

Add USM user "user" and set the authentication protocol, data encryption protocol, and user level to "MD5", "NONE", and "read_only", respectively.

admin:/>add snmp usm user_name=user authenticate_protocol=MD5 private_protocol=NONE user_level=read_only 
Please input your authenticate password:*************** 
Please input your authenticate password again:*************** 
CAUTION: You are advised to set the USM account using secure authentication protocol SHA and data encryption protocol AES. 
Do you wish to continue?(y/n)y 
Command executed successfully.

System Response

None

Translation
Download
Updated: 2019-07-12

Document ID: EDOC1000138382

Views: 318035

Downloads: 38

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next