Configuration Guide Configuring SNMP
the network, the SNMP agent must be able to identify SNMPv1 and SNMPv2C packets and return packets of the
corresponding versions.
Security
One authentication name has the following attributes:
Read-only: Provides the read permission of all MIB variables for authorized management workstations.
Read-write: Provide the read/write permission of all MIB variables for authorized management workstations.
Related Configuration
Setting Authentication Names and Access Permissions
The default access permission of all authentication names is read-only.
The snmp-server community command is used to configure or delete an authentication name and access permission.
This command is the first important command for enabling the SNMP agent function. It specifies community attributes and
NMS scope where access to the MIB is allowed.
5.3.3 SNMPv3
SNMPv3 redefines the SNMP architecture and includes functions of SNMPv1 and SNMPv2 into the SNMPv3 system.
Working Principle
The NMS and SNMP agent are SNMP entities. In the SNMPv3 architecture, SNMP entities consist of the SNMP engine and
SNMP applications. The SNMP engine is used to send and receive messages, identify and encrypt information, and control
access to managed objects. SNMP applications refer to internal applications of SNMP, which work by using the services
provided by the SNMP engine.
SNMPv3v determines whether a user has the right to use MIB objects by using the User-based Security Model (USM). The
security level of the NMS user must be the same as that of an SNMP user defined in devices so as to manage devices.
SNMPv3 requires the NMS to obtain the SNMP agent engine IDs on devices when the NMS manages devices. SNMPv3
defines the discover and report operation mechanisms. When the NMS does not know agent engine IDs, the NMS may first
send a discover message to the agent and the agent returns a report message carrying an engine ID. Later, management
operations between the NMS and the agent must carry the engine ID.
Security
SNMPv3 determines the data security mechanism based on the security model and security level. At present,
security models include: SNMPv1, SNMPv2C, and SNMPv3. SNMPv3 includes SNMPv1 and SNMPv2C into the
security model.
SNMPv1 and SNMPv2C Security Models and Security Levels
To Next Page
Loading...
Need help?
General
