engine-id
Syntax
engine-id {
(local suffix-string | unique-id hex-string | use-default-ip-address | use-mac-address);
}
Hierarchy Level
[edit snmp]
Description
Define a unique identifier for an SNMPv3 engine by configuring the engine ID. The
unique engine ID is used for identification only and not for addressing. There are
two ways to configure engine-id:
-
Local configuration - There are two parts for a local engine ID: prefix and suffix. The prefix is formatted according to the specifications defined in RFC 3411, An Architecture for Describing Simple Network Management Protocol (SNMP) Management Frameworks. You can configure the suffix here.
-
Unique-id configuration - The unique ID uses the engine ID as configured. It does not append an RFC 3411 prefix. It uses an hexadecimal string for engine ID with a length between 5 to 32 bytes.
SNMPv3 authentication and encryption keys are generated based on the associated user passwords and the engine ID. If you configure or change the engine ID, you must commit the user passwords and new engine ID before you configure SNMPv3 users, or the authentication will fail.
For the engine ID, we recommend using the MAC address of the management port.
By default the use-mac-address option is enabled. This causes the engine ID suffix to be based on a MAC address.
The unique-ID uses the engine ID as configured. It does not append an RFC 3411 prefix.
Starting with Junos OS release 14.1X53-D43, QFX Series switches use the chassis MAC address for the engine ID suffix. On OCX Series, the MAC address of the management interface continues to be used.
You can override the default behavior by using the local engine-id-suffix option, or by using the use-default-ip-address option.
Default
For QFX5110, QFX5120, QFX5210, QFX5220, QFX10002, QFX10008, and QFX10016 devices,
when no snmp engine-id is configured, the default value for the
configuration is use-mac-address.
For QFX5130, QFX5200, QFX5230-64CD, QFX5240, and QFX5700 devices, when no
snmp engine-id is configured, the default value for the
configuration is use-default-ip-address.
For ACX, EX, and MX series, when no snmp engine-id is configured,
the default value for the configuration is
use-default-ip-address.
For ZTP, if you need snmp engine-id to be constant, you must set
the engine-id configuration to set snmp engine-id
.local suffix-string
Options
local suffix-string |
The local engine ID suffix is set based on the data entered. |
unique-id hex-string |
Uses full length engine-id with a hexadecimal string of 5 through 32 bytes in length. |
use-default-ip-address |
The engine ID suffix is generated from the default IP address. |
use-mac-address |
The engine ID suffix is generated from the MAC address of the management interface on all the junos platforms. |
Required Privilege Level
snmp—To view this statement in the configuration.
snmp-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 11.1.
Option unique-id introduced in Junos OS Evolved Release
25.2X100-D20.