Question

A service provider requires that all SNMP management traffic to their IOS XR routers be both authenticated and encrypted. An engineer creates an SNMPv3 group and user but notices that a network management station is still able to poll the router even though the packets are being sent in cleartext. Reviewing the configuration, the engineer finds the user was created with the 'auth' security level. Which change correctly enforces both authentication and encryption for this SNMPv3 user?

Accepted Answer

Configure the SNMPv3 group with the 'priv' security level and define the user with both an authentication protocol/password and a privacy protocol/password

Answer

Configure the SNMPv3 group with the 'noauth' security level and rely on an access-list to restrict the NMS source address

Answer

Add an SNMPv2c community string with RO access so encryption is negotiated automatically between the router and the NMS

Answer

Configure the SNMPv3 user with only an authentication protocol and password, since privacy is implied when authentication is enabled