17
Table of Contents
Linksys
Groups
• In SNMPv1 and SNMPv2, a community string is sent along with the SNMP
frames. The community string acts as a password to gain access to an
SNMP agent. However, neither the frames nor the community string are
encrypted. Therefore, SNMPv1 and SNMPv2 are not secure.
• In SNMPv3, the following security mechanisms can be configured.
• Authentication—The device checks that the SNMP user is an authorized
system administrator. This is done for each frame.
• Privacy—SNMP frames can carry encrypted data.
Thus, in SNMPv3, there are three levels of security:
• No security (No authentication and no privacy)
• Authentication (Authentication and no privacy)
• Authentication and privacy
SNMPv3 provides a means of controlling the content each user can read or
write and the notifications they receive. A group defines read/write privileges
and a level of security. It becomes operational when it is associated with an
SNMP user or community.
NOTE:
To associate a non-default view with a group, first create the view in the
Views page.
To create an SNMP group:
STEP 1 Click Configuration > System Management > SNMP> Groups.
• This page displays the existing SNMP groups and their security levels. The
following fields are displayed for each SNMP group (only the fields not
explained in the Add page):
• No Authentication Read View—No authentication is needed, and anyone
is able to read the view.
• No Authentication Write View—No authentication is needed, and anyone
is able to write the view.
• No Authentication Notify View—No authentication is needed, and
anyone is able to receive notification of the view.
• Authentication Read View—Only authenticated users are allowed to read
the view. By default, all users or community of a group can access all the
MIB objects. A group can be limited to specific view(s) based on the read,
write, notify, authentication and/or privacy configurations.
• Authentication Write View—Only authenticated users are able to write
the view.
• Management access is write for the selected view.
• Authentication Notify View—Only authentication users are allowed
toreceived notification.
• Privacy Read View— When reading the objects in the view, the SNMP
messages are encrypted.
• Privacy Write View—When writing the object in the view, the SNMP
messages are encrypted.
• Privacy Notify View—Notification on the objects in the view are encrypted.
STEP 2 Click Add.
STEP 3 Enter the parameters.
• Group Name—Enter a new group name.
• Security Model—Select the SNMP version attached to the group,
SNMPv1, v2, or v3.
• Three types of views with various security levels can be defined. For each
security level, select the views for Read, Write and Notify by entering the
following fields:
• Enable—Select this field to enable the Security Level.
• Security Model—Define the security level attached to the group. SNMPv1
and SNMPv2 support neither authentication nor privacy. If SNMPv3 is
selected, select to enable one of the following:
• No Authentication and No Privacy—Neither the Authentication nor the
Privacy security levels are assigned to the group.
• Authorized View—Select the Read, Write and Notify views associated with
this group and with the above security level.
• Authentication and No Privacy—Authenticates SNMP messages, and ensures
the SNMP message origin is authenticated but does not encrypt them.
• Authorized View—Select the Read, Write and Notify views associated with
this group and with the above security level.
To Next Page
Loading...
Need help?
General
