Enterasys Networks 9034313-07 manual Reviewing Snmp Statistics, Configuration Considerations

Models: 9034313-07

1 872
Download 872 pages 24.54 Kb
Page 231
Image 231

 

 

 

 

 

Reviewing SNMP Statistics

 

Table 8-1 SNMP Security Levels

 

 

 

 

 

 

 

 

 

Model

Security Level

Authentication

Encryption

How It Works

 

 

 

 

 

 

 

v1

NoAuthNoPriv

Community string

None

Uses a community string match for

 

 

 

 

 

authentication.

 

 

 

 

 

 

 

v2c

NoAuthNoPriv

Community string

None

Uses a community string match for

 

 

 

 

 

authentication.

 

 

 

 

 

 

 

v3

NoAuthNoPriv

User name

None

Uses a user name match for

 

 

 

 

 

authentication.

 

 

 

 

 

 

 

 

AuthNoPriv

MD5 or SHA

None

Provides authentication based on

 

 

 

 

 

the HMAC-MD5 or HMAC-SHA

 

 

 

 

 

algorithms.

 

 

 

 

 

 

 

 

authPriv

MD5 or SHA

DES

Provides authentication based on

 

 

 

 

 

the HMAC-MD5 or HMAC-SHA

 

 

 

 

 

algorithms. Provides DES 56-bit

encryption in addition to authentication based on the CBC- DES (DES-56) standard.

Using SNMP Contexts to Access Specific MIBs

By default, when operating from the switch CLI, SecureStack C3 devices allow access to all SNMP MIBs or contexts. A context is a collection of MIB objects, often associated with a particular physical or logical device.

If no optional context parameters are configured for v1 and v2 “community” names and v3 “user” groups, these groups are able to access all SNMP MIB objects when in switch mode.

Specifying a context parameter when setting up SNMP user group would permit or restrict the group’s switch management access to the MIB(s) specified by the context (MIB object ID) value.

All SNMP contexts known to the device can be displayed using the show snmp context command as described in show snmp context” on page 8‐21.

Example

This example permits the “powergroup” to manage all MIBs via SNMPv3:

C3(su)->set snmp access powergroup security-model usm

Configuration Considerations

Commands for configuring SNMP on the SecureStack C3 device are independent during the SNMP setup process. For instance, target parameters can be specified when setting up optional notification filters — even though these parameters have not yet been created with the set snmp targetparams command.

Reviewing SNMP Statistics

Purpose

To review SNMP statistics.

SecureStack C3 Configuration Guide 8-3

Page 231
Image 231
Enterasys Networks 9034313-07 Reviewing Snmp Statistics, Using Snmp Contexts to Access Specific MIBs, Snmp Security Levels