Citrix Systems CITRIX NETSCALER 9.3 manual Setting the Engine ID

Chapter 2 SNMP

•Data integrity: To protect messages from being modified during transmission through the network.

•Data origin verification: To authenticate the user who sent the message request.

•Message timeliness: To protect against message delays or replays.

•Data confidentiality: To protect the content of messages from being disclosed to unauthorized entities or individuals.

wView-Based Access Control Model. The view-based access control model (VACM) enables you to configure access rights to a specific subtree of the MIB based on various parameters, such as security level, security model, user name, and view type. It enables you to configure agents to provide different levels of access to the MIB to different managers.

The Citrix NetScaler supports the following entities that enable you to implement the security features of SNMPv3:

wSNMP Engines

wSNMP Views

wSNMP Groups

wSNMP Users

These entities function together to implement the SNMPv3 security features. Views are created to allow access to subtrees of the MIB. Then, groups are created with the required security level and access to the defined views. Finally, users are created and assigned to the groups.

Note: The view, group, and user configuration are synchronized and propagated to the secondary node in a high availability (HA) pair. However, the engine ID is neither propagated nor synchronized as it is unique to each NetScaler appliance.

To implement message authentication and access control, you need to:

wSet the Engine ID

wConfigure Views

wConfigure Groups

wConfigure Users

Setting the Engine ID

SNMP engines are service providers that reside in the SNMP agent. They provide services such as sending, receiving, and authenticating messages. SNMP engines are uniquely identified using engine IDs.

The NetScaler has a unique engineID based on the MAC address of one of its interfaces. It is not necessary to override the engineID. However, if you want to change the engine ID, you can reset it.

64