IBM 8239 Token-Ring Stackable Hub, Setup And User Manual

Page: 87 / 141

These types of files can be transferred from an 8239 Model 1:
¹
Scripts
¹
Trace files
¹
Event logs
Access Modes
Access modes prevent unauthorized access to the 8239. For the command
interface, access mode is in the form of a user login and password. When using
SNMP, the access mode is defined by the community table.
Command Interface
Two access modes are supported for the command interface:
¹
Administrator
¹
User
Both of these modes are password-protected.
The tasks that a user can do are a subset of what an administrator can do. The
administrator access mode allows you to change parameters that affect
connectivity, such as IP information, network assignments, and so on.
SNMP
Access to the 8239 via SNMP is controlled by the use of community names. The
8239 has four levels of access. Each succeeding level is granted the rights of the
lower levels in addition to the specific capabilities listed:
¹
Level 1 provides read access to MIB-II objects. The default community name is
public.
¹
Level 2 provides read access to MIB-II, RMON MIB, and Aspen MIB objects,
excluding objects in the accessControl group and in the captureBufferTable.
The default community name is
rmon.
¹
Level 3 provides write access to RMON MIB and Aspen MIB objects, excluding
the objects in the probeAdmin, interface, and accessControl groups. It provides
read access to MIB-II, RMON MIB (including the captureBufferTable), and
Aspen MIB objects excluding those in the accessControl group. It also provides
write access to the 8239 MIB, excluding certain groups, such as the community
table. The default community name is
user.
¹
Level 4 provides read and write access to all MIBs. The default community
name is
admin.
Access Control List: For additional security, you can specify which IP addresses
can access an 8239 with a particular community name. This measure prevents
wide access to well-known communities. It is recommended that you set up a script
or the BOOTP configuration file to implement this protection.
Scripts
A script is an ASCII file containing a list of commands that can be issued from the
8239 terminal interface. Scripts allow you to:
¹
Execute a set of commands by issuing one command instead of typing all the
commands
Chapter 7. 8239 Device Management
7-3