![background image](http://html1.mh-extra.com/html/foundry-networks/netiron-m2404c/netiron-m2404c_user-manual_2324273385.webp)
Foundry NetIron M2404C and M2404F Metro Access Switches
Configuring SNMP (Rev. 03)
Simple Network Management Protocol
© 2008 Foundry Networks, Inc.
Page 9 of 48
Table 1: Security Levels Available in the SNMPv3 Security Models
Level
Authentication
Encryption
Explanation
noAuthNoPriv Username
No
All
PDUs are sent unencrypted and not
authenticated in the network.
authNoPriv HMAC-MD5
or
HMAC-SHA
No
The PDUs are authenticated with
HMAC (keyed-Hashing for Message
Authentication Codes). They cannot be
altered by an attacker, but can be read.
authPriv HMAC-MD5
or
HMAC-SHA
Cipher Block
Chaining - Data
Encryption
Standard
(CBC-DES)
The PDUs are authenticated and
encrypted (with CBC-DES Symmetric
Encryption Protocol).
The VACM provides the means for controlling access to the information on managed devices. The
information on the device is represented to the external world as a MIB tree. The view is a
collection of MIB branches with an access right assigned to each one of them. The access can be
read
,
write
and
notify
.
All SNMPv3 requests are sent on behalf of an authorized user. The user name is included in the
SNMPv3 PDUs (similar to SNMPv1/v2c community string). When the agent receives a request
from a user, it checks its VACM database to determine if that user has the access rights for the
requested operation. The user’s access rights are taken from the group in which the user
participates. Each group is associated with a read
view
, a
write
view and a
notify
view.
The user must configure the SNMP agent to use the version of SNMP supported by the
management station. An agent can communicate with multiple users. For this reason, the user can
configure the application software to support communications with many users: some users can use
the SNMPv1 protocol, some can use the SNMPv2c protocol, and the rest can use SMNPv3.
NOTE
A user can participate in different groups, with a different security model in each
group. Users cannot participate in more than one group with the same security
model.
SNMP Default Configuration
Table 2
shows the SNMP default configuration.
Table 2: SNMP Default Configuration
Parameter
Default Value
SNMP Engine ID
00 00 02 DB 03 [MAC ADDR] 00 00
SNMP contact
Empty (null)
System name
The default value is the device model name
Location Empty
(null)