Chapter 2 SNMP
•Data integrity: To protect messages from being modified during transmission through the network.
•Data origin verification: To authenticate the user who sent the message request.
•Message timeliness: To protect against message delays or replays.
•Data confidentiality: To protect the content of messages from being disclosed to unauthorized entities or individuals.
w
The Citrix NetScaler supports the following entities that enable you to implement the security features of SNMPv3:
wSNMP Engines
wSNMP Views
wSNMP Groups
wSNMP Users
These entities function together to implement the SNMPv3 security features. Views are created to allow access to subtrees of the MIB. Then, groups are created with the required security level and access to the defined views. Finally, users are created and assigned to the groups.
Note: The view, group, and user configuration are synchronized and propagated to the secondary node in a high availability (HA) pair. However, the engine ID is neither propagated nor synchronized as it is unique to each NetScaler appliance.
To implement message authentication and access control, you need to:
wSet the Engine ID
wConfigure Views
wConfigure Groups
wConfigure Users
Setting the Engine ID
SNMP engines are service providers that reside in the SNMP agent. They provide services such as sending, receiving, and authenticating messages. SNMP engines are uniquely identified using engine IDs.
The NetScaler has a unique engineID based on the MAC address of one of its interfaces. It is not necessary to override the engineID. However, if you want to change the engine ID, you can reset it.
64
