NetApp AltaVault AVA400 - Page 72

72 NetApp AltaVault Cloud Integrated Storage Administration Guide
Beta Draft
Configuring system administrator settings Configuring SNMP basic settings
2. Under Security Names, complete the configuration as described in this table.
3. Click Apply to apply your changes to the running configuration.
To set secure groups
1. Choose Configure > SNMP ACLs.
2. Under Groups, complete the configuration as described in this table.
.
Control Description
Add a New Security
Name
Displays the controls to add a security name.
Security Name Specify a name to identify a requestor allowed to issue gets and sets (v1 and v2c only). The
specified requestor can make changes to the view-based access-control model (VACM) security
name configuration.
Community strings do not allow printable 7-bit ASCII characters, except for spaces.
Also, community strings cannot begin with '#' or '-' (hash or hyphen).
This control does not apply to SNMPv3 queries. To restrict v3 USM users from polling a particular
subnet, use the Management ACL feature.
Traps for v1 and v2c are independent of the security name.
Community String Specify the password-like community string to control access using a combination of uppercase,
lowercase, and numerical characters to reduce the chance of unauthorized access to the
AltaVault.
Community strings do not allow printable 7-bit ASCII characters, except for spaces. Also, the
community strings cannot begin with '#' and '-'.
If you specify a read-only community string (located in the SNMP Basic page under SNMP Server
Settings), it takes precedence over this community name and allows users to access the entire MIB
tree from any source host. If this is not desired, delete the read-only community string.
To create multiple SNMP community strings on a
AltaVault, leave the default public community
string and then create a second read-only community string with a different security name. Or, you
can delete the default public string and create two new SNMP access control lists (ACLs) with
unique names.
Source IP Address and
Mask Bits
Specify the host IP address and mask bits to which you permit access using the security name and
community string.
Add Adds the security name.
Remove Selected Select the check box next to the name and click Remove Selected.
Control Description
Add a New Group Displays the controls to add a new group
Group Name Specify a group name.
Security Model and Name
Pairs
Click the + button and select a security model from the drop-down list:
• v1 or v2c - displays another drop-down list; select a security name.
• v3 (usm) - displays another drop-down list, select a user.
To add another Security Model and Name pair, click the plus sign (+).
Add Adds the group name and security model and name pairs.
Remove Selected Select the check box next to the name and click Remove Selected.