SNMP version 3 (SNMPv3) is an extensible SNMP Framework that supplements the SNMPv2 Framework by supporting the following:
•a new SNMP message format
•security for messages
•access control
•remote configuration of SNMP parameters
For more details on the SNMPv3 architecture please see RFC2271 to RFC2275.
The following table describes the SNMPv3 Configuration Menu options.
Table 85 SNMPv3 Configuration Menu options
Command | Description |
|
|
usm | Configures a user security model (USM) entry for an authorized user. You can also |
| configure this entry through SNMP. The range is |
|
|
view | Configures different MIB views. The range is |
|
|
access | Configures access rights. The |
| that an application can use for checking access rights of the user. You need access |
| control when you have to process retrieval or modification request from an SNMP entity. |
| The range is |
|
|
group | Configures an SNMP group. A group maps the user name to the access group names |
| and their access rights needed to access SNMP management objects. A group defines |
| the access rights assigned to all names that belong to a particular group. The range is 1- |
| 16. |
|
|
comm | Configures a community table entry. The community table contains objects for mapping |
| community strings and |
| The range is |
|
|
taddr | Configures the destination address and user security levels for outgoing notifications. This |
| is also called the transport endpoint. The range is |
|
|
tparam | Configures SNMP parameters, consisting of message processing model, security model, |
| security level, and security name information. There may be multiple transport endpoints |
| associated with a particular set of SNMP parameters, or a particular transport endpoint |
| may be associated with several sets of SNMP parameters. |
|
|
notify | Configures a notification index. A notification application typically monitors a system for |
| particular events or conditions, and generates |
| these events or conditions. The range is |
|
|
v1v2 disableenable | Enables or disables the access to SNMP version 1 and version 2. This command is |
| enabled by default. |
|
|
cur | Displays the current SNMPv3 configuration. |
|
|
User Security Model configuration
Command: /cfg/sys/ssnmp/snmpv3/usm
[SNMPv3 usmUser | 1 Menu] | |
name | - | Set USM user name |
auth | - | Set authentication protocol |
authpw | - | Set authentication password |
priv | - | Set privacy protocol |
privpw | - | Set privacy password |
del | - | Delete usmUser entry |
cur | - | Display current usmUser configuration |
|
|
|
You can make use of a defined set of user identities using this Security Model. An SNMP engine must have the knowledge of applicable attributes of a user.
This menu helps you create a user security model entry for an authorized user. You need to provide a security name to create the USM entry.
The following table describes the User Security Model Configuration Menu options.
Configuration Menu 98