Cisco Systems IPMUX-1E operation manual Authentication, Network Management Stations

Appendix C SNMP Management IPmux-1/1EInstallation and Operation Manual

In general, SNMP agents support two types of access rights:

Read-Only: The SNMP agent accepts and processes only SNMP getRequest and getNextRequest commands from management stations which have a Read-Only community name.

Read-Write: The SNMP agent accepts and processes all the SNMP commands received from a management station with a Read-Write community name.

Authentication

In accordance with SNMP protocol, the SNMP community of the originating entity is sent in each message.

When an SNMP message is received by the addressed entity, it first checks the originator's community. Messages with community names not included in the SNMP community names table of the recipient are discarded. SNMP agents of managed entities usually report this event by means of an authentication failure trap.

The SNMP agents of managed entities evaluate messages originated by communities appearing in the agent's SNMP community names table in accordance with the access rights, as previously explained. Thus, a setRequest for a MIB object with read-write access rights will nevertheless be rejected if it comes from a management station whose community has read-only rights with respect to that particular agent.

Network Management Stations

The IPmux-1/1E SNMP agent stores the IP address of the Network Management Station (NMS) that is intended to manage it.

C-4 SNMP Environment