Chapter 63 Security
GS2220 Series User’s Guide
509
The following table describes the labels in this screen.
Table 273 Security > Access Control > SNMP > User Information > Add or Edit User Information
LABEL DESC RIPTIO N
User Information
Note: Use the user name and password of the login accounts you specify in this
screen to create accounts on the SNMPv3 or SNMPv2c manager.
Username Specify the user name of a login account on the Switch.
Security Level Select whether you want to implement authentication and/or encryption for SNMP
communication from this user. Choose:
• no a uth – to use the user name as the password string to send to the SNMP manager. This is
equivalent to the Get, Set and Trap Community in SNMPv2c. This is the lowest security
level.
• a uth – to implement an authentication algorithm for SNMP messages sent by this user.
• priv – to implement authentication and encryption for SNMP messages sent by this user.
This is the highest security level.
Note: The settings on the SNMP manager must be set at the same security level or
higher than the security level settings on the Switch.
Authentication Select an authentication algorithm. MD5 (Message Digest 5) and SHA (Secure Hash Algorithm)
are hash algorithms used to authenticate SNMP data. SHA authentication is generally
considered stronger than MD5, but is slower.
Password Enter the password of up to 32 ASCII characters (except [ ? ], [ | ], [ ' ], [ " ] or [ , ]) for SNMP
user authentication.
Privacy Specify the encryption method for SNMP communication from this user. You can choose one
of the following:
• DES – Data Encryption Standard is a widely used (but breakable) method of data
encryption. It applies a 56-bit key to each 64-bit block of data.
• AES – Advanced Encryption Standard is another method for data encryption that also
uses a secret key. AES applies a 128-bit key to 128-bit blocks of data.
Password Enter the password of up to 32 ASCII characters (except [ ? ], [ | ], [ ' ], [ " ] or [ , ]) (for
encrypting SNMP packets.
Group SNMPv3 adopts the concept of View-based Access Control Model (VACM) group. SNMP
managers in one group are assigned common access rights to MIBs. Specify in which SNMP
group this user is.
a dmin – Members of this group can perform all types of system configuration, including the
management of administrator accounts.
re a dwrite – Members of this group have read and write rights, meaning that the user can
create and edit the MIBs on the Switch, except the user account and AAA configuration.
re a do nly – Members of this group have read rights only, meaning the user can collect
information from the Switch.
Add Click this to create a new entry or to update an existing one.
This saves your changes to the Switch’s run-time memory. The Switch loses these changes if it is
turned off or loses power, so use the Sa ve link on the top navigation panel to save your
changes to the non-volatile memory when you are done configuring.
Clear Click Cle a r to reset the fields to the factory defaults.
Cancel Click Ca nc e l to reset the fields to your previous configuration.
To Next Page
Loading...
