GE MDS iNET 900, Reference Manual

Page: 156 / 188

146 iNET Series Reference Manual 05-2806A01, Rev. J
SNMPv3 Accounts
The following default accounts are available for the SNMP Agent:
enc_mdsadmin
—Read/write account using Authentication and Encryp-
tion
auth_mdsadmin
—Read/write account using Authentication
enc_mdsviewer
—Read only account using Authentication and Encryp-
tion
auth_mdsviewer
—Read only account using Authentication
def_mdsviewer
—Read only account with no Authentication or Encryp-
tion
Context Names
The following Context Names are used (please refer to RFC2574 for full
details):
Admin accounts:
context_a
/ Viewer accounts:
context_v
All accounts share the same default passwords:
Authentication default password:
MDSAuthPwd
/ Privacy default pass-
word:
MDSPrivPwd
Passwords can be changed either locally (via the console) or from an
SNMP Manager, depending on how the Agent is configured. If pass-
words are configured and managed locally, they are non-volatile and
will survive a power-cycle. If passwords are configured from an SNMP
manager, they will be reset to whatever has been stored for local man-
agement on power-cycle.
This behavior was chosen based on RFC specifications. The SNMP
Manager and Agent don’t exchange passwords, but actually exchange
keys based on passwords. If the Manager changes the Agent’s password
the Agent doesn’t know the new password; just the new key. In this case,
only the Manager knows the new password. This could cause problems
if the Manager loses the password. If that happens, the Agent becomes
unmanageable. Resetting the Agent’s passwords (and therefore keys) to
what is stored in flash memory upon power-cycle prevents the serious
problem of losing the Agent’s passwords.
If passwords are managed locally, they can be changed on the Agent (via
the console). Any attempts to change the passwords for the Agent via an
SNMP Manager will fail when the Agent is in this mode. Locally
defined passwords will survive a power-cycle.