This Article helps to understand the reason for Warning message 'privacy-des' is deprecated message in configuration.

Customer may notice this warning when using DES algorithm in snmp v3 after upgrading to latest Junos versions.

The warning message "privacy-des" command that you are using DES encryption for SNMPv3 privacy, which is deprecated due to security weaknesses. To address this, you can switch to a more secure encryption algorithm such as "privacy-aes128".

root@EX# set snmp v3 usm local-engine user Space privacy?

Possible completions:

> privacy-3des     Configure Triple DES privacy

> privacy-aes128    Configure AES128 privacy

 privacy-none     Set no privacy for the user

{master:0}[edit]

root@EX#

Example:

set snmp v3 usm local-engine user ghial_Space privacy-aes privacy-key <AES_key_here>

Replace <AES_key_here> with a strong, unique AES key. Ensure the key complies with your organization's security policy. AES (Advanced Encryption Standard) is a more secure encryption algorithm compared to DES (Data Encryption Standard). The rest of the configuration remains the same.

Note: When switching from DES to AES, you need to generate a new AES key and use that key for the privacy encryption. The key should be generated using a secure key generation method to ensure its strength and confidentiality.

set snmp v3 usm local-engine user ghial_Space privacy-aes privacy-key "<new_privacy_key>"

Replace <new_privacy_key> with the desired AES-128 encryption key. The key should be a random string of characters with a length of 16 bytes (128 bits) for AES-128.

[Junos] Example - Configuring SNMPv3 (juniper.net)

Version: 1

https://www.juniper.net/documentation/us/en/software/junos/network-mgmt/topics/topic-map/configuring-snmpv3.html