Configuration modes
ELSA LANCOM DSL/10 Office
18
Accessing tables and parameters using SNMP
Any of the tables and parameters can be read and modified as necessary via the SNMP
interface. This also involves specifying in the MIB the variables which should have 'read-
only' or 'read-write' status. Commercially available SNMP managers indicate 'read-only'
and 'read-write' status using color coding.
Access protection in SNMP V.1
Access to SNMP objects is controlled using so-called communities. A community is
basically a password used to govern access to particular classes of information. The
router permits read-only access to all parameters and tables through the 'public'
community. Bear in mind that this community cannot execute any write accesses.
You must use the device's password if you wish to write data using SNMP. Write access
using SNMP will
not
be granted as a matter of principle if the device's password is not
entered.
The settings in 'Setup/Config-module' are evaluated as follows if using SNMP to access
the router:
If the trapping mechanism is enabled and a failed access attempt is detected, an
'Authentication Failed' trap is triggered and sent to the manager(s) in the SNMP trap
table.
Bear in mind that the access protection given by the community mechanism in the SNMP
V.1 is only very limited since the data, the MIB IDs and the communities are not encrypted
in the UDP data blocks of requests and responses as they are transmitted.
Deleting rows in tables using SNMP
SNMP itself has no mechanisms intended for deleting. You therefore have to use a trick
to delete entries from tables.
If you need to delete a row, you have to change the index entry value, i.e. the value in the
first column, to its current value.
Entry
Value
Meaning
Password-required
On
Access through the 'public' community is barred.
Password-required
Off
Access via the 'public' community is read-only.
All actions can be executed if the password is given as the
community.
LAN/WAN-config
Off
All access via LAN/WAN is barred.
LAN/WAN-config
On
Access via the 'public' community is read-only.
All actions can be executed if the password is given as the
community.
LAN/WAN-config
Read
Access via both the 'public' community and the password is
read-only.
