D-Link DWS/DXS-3200 manual Snmp v1 and v2c, Configuring Snmp Security

Configuring SNMP

SNMP v1 and v2c

Section 17. Configuring SNMP

Simple Network Management Protocol (SNMP) provides a method for managing network devices. The device supports the following SNMP versions:

•SNMP version 1

•SNMP version 2c

•SNMP version 3

SNMP v1 and v2c

The SNMP agents maintain a list of variables, which are used to manage the device. The variables are defined in the Management Information Base (MIB). The SNMP agent defines the MIB specification format, as well as the format used to access the information over the network. Access rights to the SNMP agents are controlled by access strings.

SNMP v3

SNMP v3 applies access control and a new traps mechanism. In addition, User Security Model (USM) parameters are defined for SNMPv3, including:

•Authentication — Provides data integrity and data origin authentication.

•Privacy — Protects against the disclosure of message content. Cipher Block-Chaining (CBC) is used for encryption. Either authentication is enabled on a SNMP message, or both authentication and privacy are enabled on a SNMP message. However, privacy cannot be enabled without authentication.

•Timeliness — Protects against message delay or message redundancy. The SNMP agent compares incom- ing message to the message time information.

•Key Management — Defines key generation, key updates, and key use.

The device supports SNMP notification filters based on Object IDs (OIDs). OIDs are used by the system to man- age device features.

SNMP v3 supports the following features:

•Security

•Feature Access Control

•Traps

The device generates the following traps:

•Copy trap

This section contains the following topics:

•Configuring SNMP Security

•Configuring SNMP Notifications

Configuring SNMP Security

This section contains information for configuring SNMP security parameters, and contains the following topics:

•Defining SNMP Security

•Defining SNMP Views

•Defining SNMP Group Profiles

Page 215