engine-id
Syntax
engine-id {
(local engine-id-suffix | use-default-ip-address | use-mac-address);
}
Hierarchy Level
[edit snmp]
Description
Define a unique identifier for an SNMPv3 engine by configuring the suffix of the engine ID. The engine ID is used for identification only and not for addressing. There are two parts of an engine ID: the prefix and the suffix. The prefix is formatted according to the specifications defined in RFC 3411, An Architecture for Describing Simple Network Management Protocol (SNMP) Management Frameworks and cannot be configured. The suffix is configured here.
SNMPv3 authentication and encryption keys are generated based on the associated user passwords and the engine ID. If you configure or change the engine ID, you must commit the user passwords and new engine ID before you configure SNMPv3 users, or the authentication will fail.
For the engine ID, we recommend using the MAC address of the management port.
By default the use-mac-address option is enabled. This causes
the engine ID suffix to be based on a MAC address.
Starting with Junos OS release 14.1X53-D43, QFX Series switches use the chassis MAC address for the engine ID suffix. On OCX Series, the MAC address of the management interface continues to be used.
You can override the default behavior by using the local
engine-id-suffix option, or by using the
use-default-ip-address option.
Default
For QFX series, when no snmp engine-id is configured, the default
value for the configuration is use-mac-address.
For ACX, EX, and MX series, when no snmp engine-id is configured,
the default value for the configuration is
use-default-ip-address.
For ZTP, if you need snmp engine-id to be constant, you must set
the engine-id configuration to set snmp engine-id
.local engine-id-suffix
Options
local engine-id-suffix |
The engine ID suffix is set based on the data entered. |
use-default-ip-address |
The engine ID suffix is generated from the default IP address. |
use-mac-address |
The engine ID suffix is generated from the MAC address of the management interface on all the junos platforms. |
Required Privilege Level
snmp—To view this statement in the configuration.
snmp-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 11.1.