Security

Controlling SNMP Access

There are three methods for limiting SNMP access.

HDisable the SNMP management option.

HAssign SNMP community names and access levels. The DSU supports SNMP Version 1, which provides limited security through the use of community names.

HLimiting SNMP access through validation of the IP address of each allowed SNMP manager.

Assigning SNMP Community Names and Access Levels

The DSU can be managed by an SNMP manager supporting the SNMP protocol. The community name must be supplied by an external SNMP manager accessing an object in the MIB.

To define SNMP community names, follow this menu selection sequence:

Main Menu Configuration Load Configuration From Edit

SNMP & Communication General SNMP Management

Refer to General SNMP Management Options, Table A-10, to:

HEnable SNMP Management.

HAssign the SNMP community names of the SNMP Managers that are allowed to access the DSU's Management Information Base (MIB).

HSpecify read or read-write access for each SNMP community name.

Limiting SNMP Access through the IP Addresses of the Managers

The DSU provides an additional level of security through validation of the

IP addresses.

The SNMP Management option must be enabled. To control SNMP access with

IP addresses, follow this menu selection sequence:

Main Menu Configuration Load Configuration From Edit

SNMP & Communication SNMP NMS Security Options

Refer to SNMP NMS Security Options, Table A-11. The SNMP access can be limited by:

HEnabling NMS IP address validation to perform validation checks on the

IP address of an SNMP management system attempting to access the DSU.

HSpecifying read or read-write access for each NMS authorized to access the unit.

4-6

November 1997

7610-A2-GB20-10

Page 33
Image 33
Paradyne 7610, SNMP DSU manual Controlling Snmp Access, Assigning Snmp Community Names and Access Levels