Administrator Guide

Switch Management Commands 2148
• priv-des-key — CBC-DES Symmetric Encryption privacy mode. The
administrator should enter a pre-generated DES encryption key.
• des-key — The pregenerated DES encryption key. The length is
determined by the authentication method selected . Enter 32 hex
characters if MD5 Authentication is selected, 40 hex characters if SHA
Authentication is selected.
• priv-3des— The CBC 3DES Symmetric Encryption privacy level. Enter
a shared password to generate the key.
• priv-3des-key— The CBC-3DES Symmetric Encryption privacy level.
The administrator should enter a pre-generated 3DES key.
• priv-aes128— CBC-AES128 Symmetric Encryption privacy mode.
• priv-aes128-key— A pre-generated AES128 encryption key - 32 hex
characters in length.
• aes-key— Advanced Encryption Standard. Enter a pre-generated AES
key of the appropriate length (128 or 256 bits). An AES 128 bit key is 32
hexadecimal characters in length.
Default Configuration
No user entry exists.
Command Mode
Global Configuration mode
User Guidelines
If the SNMP local engine ID is changed, configured users will no longer be
able to connect and will need to be re-configured (deleted from the
configuration and added back).
Use of MD5 authentication in conjunction with AES privacy is discouraged
as it results in a weak cypher. Utilize SHA authentication when using AES
privacy.
The SNMP group must exist or an error is displayed and the user is not
configured. The user name can consist of any printable character and may
contain embedded blanks if enclosed in quotes.