Chapter 36 Access Control

Table 120 Management > Access Control > SNMP (continued)

LABEL

DESCRIPTION

Username

Enter the username to be sent to the SNMP manager along with the SNMP v3

 

trap.

 

Note: This username must match an existing account on the Switch

 

(configured in Management > Access Control > Logins

 

screen).

 

 

User Information

Use this section to configure users for authentication with managers using SNMP

 

v3.

 

Note: Use the username and password of the login accounts you

 

specify in this section to create accounts on the SNMP v3

 

manager.

 

 

Index

This is a read-only number identifying a login account on the Switch.

 

 

Username

This field displays the username of a login account on the Switch.

 

 

Security Level

Select whether you want to implement authentication and/or encryption for SNMP

 

communication from this user. Choose:

 

• noauth -to use the username as the password string to send to the SNMP

 

manager. This is equivalent to the Get, Set and Trap Community in SNMP v2c.

 

This is the lowest security level.

 

• auth - to implement an authentication algorithm for SNMP messages sent by

 

this user.

 

• priv - to implement authentication and encryption for SNMP messages sent by

 

this user. This is the highest security level.

 

Note: The settings on the SNMP manager must be set at the same

 

security level or higher than the security level settings on the

 

Switch.

 

 

Authentication

Select an authentication algorithm. MD5 (Message Digest 5) and SHA (Secure

 

Hash Algorithm) are hash algorithms used to authenticate SNMP data. SHA

 

authentication is generally considered stronger than MD5, but is slower.

 

 

Privacy

Specify the encryption method for SNMP communication from this user. You can

 

choose one of the following:

 

• DES - Data Encryption Standard is a widely used (but breakable) method of

 

data encryption. It applies a 56-bit key to each 64-bit block of data.

 

• AES - Advanced Encryption Standard is another method for data encryption

 

that also uses a secret key. AES applies a 128-bit key to 128-bit blocks of data.

 

 

Apply

Click Apply to save your changes to the Switch’s run-time memory. The Switch

 

loses these changes if it is turned off or loses power, so use the Save link on the

 

top navigation panel to save your changes to the non-volatile memory when you

 

are done configuring.

 

 

Cancel

Click Cancel to begin configuring this screen afresh.

36.3.5 Configuring SNMP Trap Group

From the SNMP screen, click Trap Group to view the screen as shown. Use the Trap Group screen to specify the types of SNMP traps that should be sent to each SNMP manager.

296

 

ES-4124 User’s Guide