Cisco SG220-26 - Managing SNMP Users

SNMP
Managing SNMP Users
Cisco 220 Series Smart Switches Administration Guide Release 1.1.0.x 280
19
Three types of views with various security levels can be defined. For each
security level, select the views for Read, Write, and Notify by entering the
following fields:
• Security Level—Check Enable to enable the relative security level attached
to the group. SNMPv1 and SNMPv2 support neither authentication nor
privacy. If SNMPv3 is selected as the security mode, choose one of the
following:
- No Authentication and No Privacy—Neither the authentication nor the
privacy security levels are assigned to the group.
- Authentication and No Privacy—Authenticates SNMP messages, and
ensures that the SNMP message origin is authenticated but does not
encrypt them, meaning that they can be intercepted and read.
- Authentication and Privacy—Authenticates SNMP messages, and
encrypts them if the SNMP message origins are authenticated.
• View—Choose a previously defined view for Read, Write, and Notify.
Associating a view with the Read, Write, and Notify access privileges of the
group limits the scope of the MIB tree to which the group has read, write, and
notify access.
- Read—Management access is read-only for the selected view. A read-
only view must be selected for an SNMP group.
- Write—Management access is write for the selected view. Otherwise, a
user or a community associated with this group is able to write all MIBs
except those that control SNMP itself.
- Notify—Sends only traps with contents that is included in the SNMP view
selected for notification. Otherwise, there is no restriction on the contents
of the traps. Generally you do not need to select the notify view.
STEP 4 Click Apply. The SNMP group is defined, and the Running Configuration is
updated.
Managing SNMP Users
An SNMP user is defined by the login credentials (username, passwords, and
authentication method) and by the context and scope in which it operates by
association with a group and an Engine ID.