Cisco Nexus SNMPv3 User Appears as a CLI Account: Before You Delete It
An internal vulnerability assessment called for removing apparently unnecessary accounts from a Cisco Nexus switch. I found an SNMPv3 username listed as a local CLI user. From my experience with Cisco IOS, I initially treated the monitoring identity and the administrative login as separate objects. I paused the deletion to check NX-OS behavior. By default, NX-OS synchronizes SNMPv3 users with its security user database, so deleting the CLI account can also remove the SNMP user and interrupt monitoring. Environment Platform: Cisco Nexus C93180YC-FX3 Software: Cisco NX-OS 10.6(1) Context: Internal vulnerability assessment and account cleanup Change status: No account was deleted Usernames, passwords, customer information, and environment-specific details have been omitted. How I found the account I found the entries with: show running-config | include user The output included a local username and an snmp-server user entry for the same identity. The entries had this structu...