Configuring SNMP 161

Setting SNMP Security

By default, WSS Software allows nonsecure SNMP message exchanges. You can configure WSS Software to require secure SNMP exchanges instead.

Depending on the level of security you want WSS Software to enforce, you can require authentication of message exchanges only, or of message exchanges and notifications. You also can require encryption in addition to authentication.

SNMPv1 and SNMPv2c do not support authentication or encryption. If you plan to use SNMPv1 or SNMPv2c, leave the minimum level of SNMP security set to unsecured.

To set the minimum level of security WSS Software requires for SNMP, use the following command:

set snmp security {unsecured authenticated encrypted auth-req-unsec-notify}

You can specify one of the following options:

unsecured—SNMP message exchanges are not secure. This is the default, and is the only value supported for SNMPv1 and SNMPv2c. (This security level is the same as the noAuthNoPriv level described in SNMPv3 RFCs.)

authenticated—SNMP message exchanges are authenticated but are not encrypted. (This security level is the same as the authNoPriv level described in SNMPv3 RFCs.)

encrypted—SNMP message exchanges are authenticated and encrypted. (This security level is the same as the authPriv level described in SNMPv3 RFCs.)

auth-req-unsec-notify—SNMP message exchanges are authenticated but are not encrypted, and notifications are neither authenticated nor encrypted.

Command Example

The following command sets the minimum level of SNMP security allowed to authentication and encryption:

23x0# set snmp security encrypted

success: change accepted.

Nortel WLAN Security Switch 2300 Series Configuration Guide

Page 161
Image 161
Nortel Networks 2300 manual Setting Snmp Security, 23x0# set snmp security encrypted