Cisco SF 302-08P User Manual

Configuring SNMP
Creating SNMP Groups
Cisco Small Business 300 Series Managed Switch Administration Guide 284
19
Creating SNMP Groups
In SNMPv1 and SNMPv2, a community string is sent along with the SNMP frames.
The community string acts as a password to gain access to a SNMP agent.
However, neither the frames nor the community string are encrypted. So SNMPv1
and SNMPv2 are not secure. In SNMPv3, there are two security mechanisms, and
both can be configured.
• Authentication—The switch checks that the SNMP user is an authorized
system administrator. This is done for each and every frame.
• Privacy—SNMP frames can carry encrypted data.
Thus, in SNMPv3, there are three levels of security:
• No security
• Authentication
• Authentication and privacy (Note that two groups with the same name, one
with authentication and one with privacy, must be added.)
In addition, SNMPv3 provides for a way to control what even authorized and
authenticated users can see and perform, by associating each user with a group.
A group is a label for a logical entity (combination of attributes). A group is
operational only when it is associated with an SNMP user or an SNMP community.
A group also has an attribute that tells if members should have read, write, and/or
notify privileges for the view.
To create an SNMP group:
STEP 1 Click SNMP > Groups. The Groups Page opens.
This page displays the existing SNMP groups.
STEP 2 Click Add. The Add Group Page opens.
STEP 3 Enter the parameters.
• Group Name—Enter a new group name for which privileges are being
defined. The field range is up to 30 ASCII characters.
• Security Model—Select the SNMP version attached to the group.

Cisco SF 302-08P Specifications

General

Product Type	Managed Switch
Number of Ports	8
PoE Ports	8
Layer	Layer 2
VLANs Supported	Up to 256
Power Supply	Internal
Management Type	Web Managed
MAC Address Table Size	8K entries
Jumbo Frame Support	9 KB
Dimensions (W x D x H)	1.7 in
Operating Temperature	32 to 104°F (0 to 40°C)
Operating Humidity	10% to 90% (non-condensing)

Summary

Getting Started

Logging In

Steps for logging into the switch's web interface using default credentials and changing passwords.

Managing System Files

Upgrade/Backup Firmware/Language

Process for upgrading firmware, boot code, or language files and backing up system configurations.

General Administrative Information and Operations

Rebooting the Switch

Steps to reboot the switch, including critical considerations for saving configurations.

System Time

Configuring System Time

Setting SNTP

Configuration for synchronizing the switch's system clock with an SNTP server for accurate time.

Managing Device Diagnostics

Testing Copper Ports

Performing integrated cable tests on copper cables using TDR or DSP-based methods.

Port Management

Setting the Basic Port Configuration

Configuring global and per-port settings like speed, duplex, and flow control for switch ports.

Configuring Link Aggregation

Bundling multiple physical ports into a single logical channel (LAG) for increased bandwidth and redundancy.

VLAN Management

VLANs

Defines VLANs as logical groups for network segmentation and communication.

Creating VLANs

Configuring VLAN Interface Settings

Managing MAC Address Tables

Configuring Static MAC Addresses

Assigning static MAC addresses to specific interfaces and VLANs for controlled network access.

Configuring IP Information

Management and IP Interfaces

Configuring switch IP addresses, management VLANs, and IP addressing modes (Layer 2/Layer 3).

Defining an IPv6 Interface

Configuring Security

Defining Users

Creating and managing user accounts for switch administration, including password policies.

Management Access Authentication

802.1X

Implementing port-based network access control using the IEEE 802.1X standard.

Access Control

Access Control Lists

Creating ordered lists of classification filters and actions to control traffic flows.

Defining IPv4-based ACLs

Defining ACL Binding