Enterasys Matrix DFE-Gold Series User Manual

SNMP Configuration Summary
Enterasys Matrix DFE-Gold Series Configuration Guide 5-3
Using SNMP Contexts to Access Specific MIBs
Bydefault,whenoperatingfromtheswitchCLI,MatrixSeriesdevicesallowaccesstoallSNMP
MIBsorcontexts.AcontextisacollectionofMIBobjects,oftenassociatedwithaparticular
physicalorlogicaldevice.
Ifnooptionalcontextparametersareconfiguredforv1andv2“community”namesandv3
“user”
groups,thesegroupsareabletoaccessallSNMPMIBobjectswheninswitchmode.
SpecifyingacontextparameterwhensettingupSNMPusergroupaccesswouldpermitorrestrict
thegroup’sswitchmanagementaccesstotheMIB(s)specifiedbythecontext(MIBobjectID)value.
AllSNMPcontextsknown
tothedevicecanbedisplayedusingtheshowsnmpcontextcommand
asdescribedin“showsnmpcontext”onpage 5 ‐23.
Examples
Thisexamplepermitsthe“powergroup”tomanageallMIBsviaSNMPv3:
Matrix(rw)->set snmp access powergroup security-model usm
Thisexamplegrantsthe“powergroup”SNMPv3managementaccessfromthemoduleoperating
inroutermode:
Matrix(rw)->set snmp access powergroup security-model usm context router prefix
Forinformationonpreparingthedeviceforroutermode,referbackto“PreparingtheDevicefor
RouterMode”onpage 2‐100.
Creating a Basic SNMP Trap Configuration
TrapsarenotificationmessagessentbyanSNMPv1orv2agenttoanetworkmanagementstation,
aconsole,oraterminaltoindicatetheoccurrenceofasignificantevent,suchaswhenaportor
devicegoesupordown,whenthereareauthenticationfailures,andwhenpowersupplyerrors
occur.
ThefollowingconfigurationexampleshowshowtouseCLIcommandstoassociateSNMP
notificationparameterswithsecurityandauthorizationcriteria(targetparameters),andmapthe
parameterstoamanagementtargetaddress.
Table 5-1 SNMP Security Levels
Model Security Level Authentication Encryption How It Works
v1 NoAuthNoPriv Community string None Uses a community string match for
authentication.
v2c NoAuthNoPriv Community string None Uses a community string match for
authentication.
v3 NoAuthNoPriv User name None Uses a user name match for
authentication.
AuthNoPriv MD5 or SHA None Provides authentication based on
the HMAC-MD5 or HMAC-SHA
algorithms.
authPriv MD5 or SHA DES Provides authentication based on
the HMAC-MD5 or HMAC-SHA
algorithms. Provides DES 56-bit
encryption in addition to
authentication based on the CBC-
DES (DES-56) standard.

Enterasys Matrix DFE-Gold Series Specifications

General

Brand	Enterasys
Model	Matrix DFE-Gold Series
Category	Switch
Language	English