SNMP Authentication
When running in SNMPv3, it is possible to configure the following authentication settings:
Parameter SNMPv3 Authentication
Authentication Defines the authentication (MD5 or SHA)
Encryption Defines the privacy protocols to use (DES or AES)
In general, the admin user can read and write any values. Read access will be granted to any other
system users.
There is no authentication/encryption in SNMPv1/v2c and should not be used to set any values. How-
ever, it is possible to define its communities and authoritive host which will be granted administrative
access.
Parameter SNMPv1/v2c Authentication
Read community Defines the community name for read access
Admin community Defines the community name for admin access
Allowed host Defines the host which is allowed for admin access
Attention must be paid to the fact that SNMP passwords have to be more than 8 characters long.
Shorter passwords will be doubled for SNMP (e.g. admin01 becomes admin01admin01).
Due to the use of passphrases in SNMP it is mandatory to store passwords of users who shall be able
to authenticate against the SNMP server. Please refer to chapter 6.8.2 for more information.
Please note that the SNMP daemon is also listening on WAN interfaces and it is therefore suggested
to restrict the access with the firewall.
Typical SNMP Commands
Setting MIB values and triggering extensions is generally limited to the SNMPv3 admin user. It is
possible to specify an administrative host for SNMP v1/2c.
The SNMP extensions can be read and triggered as follows:
Getting the software version of the system:
snmpget -v 3 -u admin -n "" -l authNoPriv -a MD5 -x DES -A admin01admin01 192.168.1.1
1.3.6.1.4.1.31496.10.40.1.0
Getting the kernel version:
snmpget -v 3 -u admin -n "" -l authNoPriv -a MD5 -x DES -A admin01admin01 192.168.1.1
1.3.6.1.4.1.31496.10.40.2.0
Getting the serial number:
snmpget -v 3 -u admin -n "" -l authNoPriv -a MD5 -x DES -A admin01admin01 192.168.1.1
NB1601 157 User Manual for NRSW version 4.8.0.103
To Next Page
Loading...
