Nortel Networks 8600 manual Snmp Group Access Policy Release 3.7.9, 4.1 or higher

Page 10

Technical Configuration Guide for SNMP

v2.0

December 2006

3.2.1 Configuration Example: Blocking SNMP via an Access Policy

In this example, we will create an access policy to not allow SNMP for any user coming from network 172.30.x.y/16.

a)Enable access policy globally:

•ERS-8606:5#config sys access-policy enable true

b)Add a new policy, in this example, since it is the first policy, we will simply create policy 2 and name it policy2:

•ERS-8606:5#config sys access-policy policy 2 create

•ERS-8606:5#config sys access-policy policy 2 name policy2

c)Add network 172.30.0.0/16 to policy 2:

•ERS-8606:5#config sys access-policy policy 2 network 172.30.0.0/16

d)Add read/write/all access level to policy 2:

•ERS-8606:5#config sys access-policy policy 2 accesslevel rwa

e)Disable SNMP service for policy 2:

•ERS-8606:5#config sys access-policy policy 2 service snmp disable

After the policy has been created, enter the following command to view policy 2:

•ERS-8606:5#show sys access-policy info policy2

AccessPolicyEnable: on

Id: 2

Name: policy2

PolicyEnable: true

Mode: allow

Service: httptelnetssh

Precedence: 128

NetAddr: 172.30.0.0

NetMask: 255.255.0.0

TrustedHostAddr: 0.0.0.0

TrustedHostUserName: none

AccessLevel: readWriteAll

AccessStrict: false

Usage: 337

3.3SNMP Group Access Policy – Release 3.7.9, 4.1 or higher

In release 3.7.9 or 4.1, a new policy enhancement was added that allows the administrator to specify a group or groups for SNMPv3 access. With SNMPv3, the community name is not mapped to an access level, but determined only through VACM. This allows the administrator to create separate policies for SNMP users based on USM or community and associate them to groups.

The following items where added high-lighted in red below.

ERS-8610:5#config sys access-policy policy 1 ?

______________________________________________________________________________________________________

NORTEL

External Distribution

9

Page 9 Page 11
Image 10
Page 9 Page 11
Contents Technical Configuration Guide for Snmp Disclaimer Abstract Table of Contents List of Figures List of TablesSNMPv3 Overview UDPSnmp Upgrade Considerations Hidden File DetailsBlocking Snmp ERS-86105#config bootconfig flags block-snmp trueERS-86105#config bootconfig flags block-snmp false Blocking SNMPv1/2 onlyERS-86065#config sys access-policy policy ERS-86065#config sys access-policy enable true/falseERS-86065#config sys access-policy policy 1..65535 ? ERS-86065#config sys access-policy policy 2 accesslevel rwa Snmp Group Access Policy Release 3.7.9, 4.1 or higherERS-86065#config sys access-policy enable true ERS-86065#show sys access-policy info policy2SNMPv3 Group Access Policy Configuration Example ERS-86105#config sys access-policy policy 1 service ?ERS-86105#config sys access-policy policy 2 enable ERS8610-B5#show snmp-v3 group-accessAdd the SNMPv1/2 group name and models to policy ERS-86105# Snmp Community Strings Config snmp-v3 community create followed by ERS-86065#config snmp-v3 community info ERS8600G3# config snmp-v3 community infoParameter ERS-86065#config snmp-v3 target-addr ? ERS-86065#config snmp-v3 notify ?ERS-86065#show snmp-v3 notify info ERS-86065#config snmp-v3 target-addr info ERS-86065#config snmp-v3 target-addr delete TAddr1ERS-86105#config snmp-v3 target-param info New Default Community Strings in High Secure hsecure Mode ERS-86065#config bootconfig flags hsecure falsetrueERS-86065#config sys set snmp ? Snmp SettingsERS-86065#config sys set sendAuthenticationTrap true Technical Configuration Guide for Snmp V2.0 Snmp with Radius Authentication and Accounting Loading the DES or AES Encryption Module Configuring SNMPv3Adding a New SNMPv3 User to USM Table ERS-8610-C5#config snmp-v3 group-member info ERS-86105#config snmp-v3 usm infoAssign USM User to USM Group Assigning the USM Group Access Level ERS-86105#config snmp-v3 group-access infoERS-86105#config snmp-v3 mib-view info Assigning the MIB View to the USM GroupCreating a MIB View MIB StructureERS-86065#config sys set snmp community rwa rwa123pp8600 Configuration Example Changing Snmp CommunitiesConfiguration Example Snmp Communities with Release ERS-86065#config sys set snmp community ro ro567pp8600Out of 3 Total entries displayed ERS-8610-C5#config snmp-v3 community info ERS-8610-C5#config snmp-v3 group-access infoERS-8610-C5#config snmp-v3 mib-view info Testing Snmp Using Device Manager Technical Configuration Guide for Snmp V2.0 Configuration Example Using SNMPv3 Testing SNMPv3 Using Device Manager ERS-86105#config snmp-v3 usm create user2 md5 auth user2abcdSoftware Baseline Reference Documentation Document Title Publication Description NumberAppendix a Configuration Files From Configuration Example# Snmp V3 Notify Filter Configuration Contact us
Related manuals
Manual 62 pages 39.02 Kb Manual 136 pages 14.91 Kb Manual 44 pages 49.61 Kb Manual 88 pages 41.11 Kb

8600 specifications

Nortel Networks 8600 is a highly regarded member of the Nortel Ethernet routing portfolio, specifically designed to meet the demands of today's bandwidth-hungry environments. This advanced platform is a favorite for service providers and enterprises due to its scalability, reliability, and performance capabilities.

One of the standout features of the Nortel 8600 is its exceptional scalability. The platform supports a wide range of Ethernet services that can accommodate the growth of network applications without requiring significant overhaul. This scalability is driven by its ability to provide multiple 10 Gigabit and 100 Gigabit Ethernet ports, allowing organizations to expand their network as bandwidth needs increase.

The 8600 employs a robust architecture that enhances its performance. It utilizes a switching fabric that delivers high throughput and low latency, making it ideal for applications that demand real-time data transmission, such as voice over IP (VoIP) and video streaming. With support for high-density Ethernet, the 8600 can handle a large number of simultaneous connections, facilitating seamless experiences for end-users.

Another technological highlight of the Nortel 8600 is its integrated service capabilities. The platform incorporates advanced quality of service (QoS) features that prioritize bandwidth for critical applications, ensuring reliable performance even during peak usage times. The 8600 also supports comprehensive security protocols, providing peace of mind for organizations as they navigate the complexities of modern cybersecurity challenges.

Additionally, the platform offers advanced management features that simplify network administration. Built-in tools for monitoring and reporting enhance operational visibility, enabling IT teams to quickly identify and resolve issues. The 8600 is designed to integrate smoothly with existing networking environments, offering interoperability with multiple vendors and protocols, thus protecting investment in other technologies.

Energy efficiency is another characteristic of the Nortel 8600, making it a suitable choice for organizations keen on reducing operational costs and minimizing their environmental impact. The platform is built with energy-saving components and intelligent power management that allow businesses to operate sustainably.

Overall, the Nortel Networks 8600 is a sophisticated routing solution that integrates cutting-edge technologies to meet the demands of modern network environments, making it a preferred choice for organizations seeking a balance between performance, reliability, and cost-effectiveness.
Top Page Image Contents