GE MDS MDS iNET-II 900, Reference Manual

Page: 157 / 190

05-2806A01, Rev. H iNET Series Reference Manual 147
4.4.9 Placing an iNET Radio Behind a Firewall
iNET-II and iNET radios use the port numbers listed below. If you place
the radio behind a firewall, make sure these port numbers are included
in the allowed list:
• SSH: 22 <- Management
• TELNET: 23 <- Management
• SMTP: 25 <- DF1
• TFTP: 69 <- Reprogramming
• HTTP: 80 <- Management
• NTP: 123 <- Time server
• SNMP: 161 <- Management
• SNMP-TRAP: 162 <- Event management via traps
• HTTPS: 443 <- Management
• SYSLOG: 514 <- Event management via remote syslog
server
These well-known port numbers follow the recommendation of IANA.
For more information, go to
http://www.iana.org/assignments/port-numbers.
4.5 SNMPv3 NOTES
4.5.1 Overview
The transceiver’s SNMP Agent supports SNMP version 3 (SNMPv3).
The SNMPv3 protocol introduces Authentication (MD5/SHA-1),
Encryption (DES), the USM User Table, and View-Based Access
(Refer to RFC2574 for full details). The SNMP Agent has limited
SNMPv3 support in the following areas:
• Only MD5 Authentication is supported (no SHA-1). SNMPv3
provides support for MD5 and SHA-1. Currently, only MD5
Authentication is supported in the SNMP Agent.
• Limited USM User Table Manipulation. The SNMP Agent
starts with 5 default accounts. New accounts can be added
(SNMPv3 adds new accounts by cloning existing ones), but
they will be volatile (will not survive a power-cycle).
New views cannot be configured on the SNMP Agent. Views
will be inherited for new accounts from the account that was
cloned.
The SNMP Agent uses one password pair (Authentication / Pri-
vacy) for all accounts. This means that when the passwords
change for one user, they change for all users.