Extreme Networks ExtremeWare XOS 11.3, Manual

Page: 83 / 698

Using the Simple Network Management Protocol
ExtremeWare XOS 11.3 Concepts Guide
83
●
Message Processing on page 86
●
SNMPv3 Security on page 86
●
SNMPv3 MIB Access Control on page 89
●
SNMPv3 Notification on page 90
Enabling and Disabling SNMPv1/v2c and SNMPv3
ExtremeWare XOS can concurrently support SNMPv1/v2c and SNMPv3. The default is both types of
SNMP enabled. Network managers can access the device with either SNMPv1/v2c methods or
SNMPv3. To enable concurrent support, use the following command:
enable snmp access
To prevent any type of SNMP access, use the following command:
disable snmp access
To prevent access using SNMPv1/v2c methods and allow access using SNMPv3 methods only, use the
following commands:
enable snmp access
disable snmp access {snmp-v1v2c}
There is no way to configure the switch to simultaneously allow SNMPv1/v2c access and prevent
SNMPv3 access.
Most of the commands that support SNMPv1/v2c use the keyword
snmp
; most of the commands that
support SNMPv3 use the keyword
snmpv3
.
After a switch reboot, all slots must be in the "Operational" state before SNMP can manage and access
the slots. To verify the current state of the slot, use the
show slot
command.
Understanding Safe Defaults Mode and SNMP
ExtremeWare XOS 11.2 introduces the concept of safe defaults mode. Safe defaults mode runs an
interactive script that allows you to enable or disable SNMP, Telnet, and switch ports. When you set up
your switch for the first time, you must connect to the console port to access the switch. After logging
in to the switch, you enter safe defaults mode. Although SNMP, Telnet, and switch ports are enabled by
default, the script prompts you to confirm those settings.
If you choose to keep the default setting for SNMP—the default setting is enabled—the switch returns
the following interactive script:
Since you have chosen less secure management methods, please remember to increase
the security of your network by taking the following actions:
* change your admin password
* change your SNMP public and private strings
* consider using SNMPv3 to secure network management traffic
For more detailed information about safe defaults mode, see “Safe Defaults Setup Method” on page 47 .