Nokia IPSO 4.0 manual To add an Snmp user, 264

6

To view existing SNMP users, click SNMP under Configuration > System Configuration in the tree view and click Manage SNMP Users. Alternatively, you can click the Manage SNMP User Access link located on the Configuration > Security and Access > Users page.

The admin user or a user with privileges for the SNMP feature can modify the security level, authentication pass phrase, and privacy pass phrase for existing SNMP users, and create or delete SNMP users. Pass phrases differ from passwords only in length—pass phrases are usually much longer than passwords. Their greater length makes pass phrases more secure.

The IPSO implementation of SNMP supports DES and MD5 authentication to automatically generate USM keys.

SNMP must be enabled on the system before you can set an SNMP user authentication or privacy pass phrase.

Note

If you change the security level from either authPriv or authPrivReq to authNoPriv, the privacy pass phrase is automatically deleted. If you change it back to authNoPriv, you must supply a privacy pass phrase.

To add an SNMP user

1.Click SNMP under Configuration in the tree view.

2.Click Manage USM Users.

3.Enter the following information for the new user:

„User Name—The range is 1 to 31 alphanumeric characters with no spaces, backslash, or colon characters. This can be the same as a user’s name for system access, though the SNMP user account is handled as a separate entity.

„Security Level. Select from the following:

„Authentication + Privacy—The user has authentication and privacy pass phrases and can connect with or without privacy encryption.

„Authentication, no privacy—The user has only an authentication pass phrase and can connect only without privacy encryption.

„Authentication and privacy required—The user must connect using both authentication and encryption pass phrases.

„Authentication Pass Phrase—Used to identify the user. Enter a password for the user that is between 8 and 128 characters in length.

„Privacy Pass Phrase—Used to cryptographically protect against disclosure of SNMP message payloads. Enter a pass phrase that is between 8 and 128 characters in length.

4.Click Apply.

An entry for the new user appears in the SNMP USM Users table.

5.Click Save to make your changes permanent.

264 Nokia Network Voyager for IPSO 4.0 Reference Guide